
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
File: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json)
Hash identifier: //KEZ0lG60I3XeZnNqk+uzB0/i5veq7ljd4nvR6D9YM=
Subject key identifier: 4B:B2:63:5B:69:1B:47:16:2C:46:06:D5:9A:9C:22:8C:EE:E9:6A:7E
Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E
Certificate issuer: /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
Certificate serial: 063D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
Manifest number: 0631
Signing time: Fri 28 Mar 2025 22:58:00 +0000
Manifest this update: Fri 28 Mar 2025 22:58:00 +0000
Manifest next update: Fri 04 Apr 2025 22:58:00 +0000
Files and hashes: 1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: 7Xx6GwWOQa7384zWo3HSqn84W0XxsceczngaIoRepK4=)
2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: kTnNlxGzV54r4KPZAQuINu1i12sln6cK8TaYfF0XXkI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6BBA
Validity
Not Before: Mar 28 22:58:00 2025 GMT
Not After : Apr 4 22:58:00 2025 GMT
Subject: CN=67e72978-e3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:9c:45:71:b7:0c:ed:c5:e7:fc:4f:da:62:
fb:67:04:d5:5c:da:03:87:e9:30:61:5e:f9:61:7a:
d9:93:b2:77:93:e5:09:7a:a2:14:f8:11:ce:3b:c4:
25:3a:6a:50:b6:e7:b8:cb:d7:76:6a:24:05:e9:52:
fa:74:62:bb:05:d5:b5:e6:7d:b3:57:f1:1a:db:11:
ef:e2:bf:b8:ea:36:f1:39:bf:2e:3d:9a:3f:6b:c7:
b1:06:28:36:c8:b0:d0:d4:01:39:4f:27:92:8d:4e:
ed:d3:56:9e:94:f1:3b:cd:30:64:06:6f:72:ca:b0:
c1:a7:70:df:df:03:eb:df:c3:74:bc:c7:c8:d0:92:
a0:cc:1b:d9:fd:3c:58:35:2e:b1:87:47:2d:aa:40:
51:76:66:cc:db:f5:aa:d7:25:e3:4f:13:4c:b9:87:
08:96:30:b7:77:5a:59:0b:24:e0:36:72:46:86:71:
38:4b:d3:2d:78:f2:80:13:e7:d1:89:13:2e:80:fa:
e0:82:99:45:63:4d:50:84:f5:08:36:2c:7a:24:28:
1d:97:a1:f9:a9:d0:45:41:dc:b0:71:ab:ac:f3:a0:
6e:71:55:6a:77:ea:13:7e:28:da:c6:66:ac:00:4e:
6a:2c:3d:fb:1a:99:4c:d4:8f:db:bd:92:b2:45:43:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B2:63:5B:69:1B:47:16:2C:46:06:D5:9A:9C:22:8C:EE:E9:6A:7E
X509v3 Authority Key Identifier:
keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:cc:38:07:ce:d7:db:be:80:65:41:57:c2:a4:35:d3:ac:0e:
8e:4b:ad:c9:31:68:5d:25:a2:2a:45:b0:71:b9:84:76:45:d9:
f1:18:5f:39:0c:c9:6e:7f:0a:a2:4f:e0:33:91:d7:12:35:19:
3d:ef:1e:90:97:64:d4:81:3b:62:05:5f:81:1c:c9:7d:a1:83:
97:ec:b0:9a:da:40:31:a3:3c:b5:a2:77:f8:44:04:34:84:e9:
41:27:20:2a:60:ed:bb:41:d1:1b:7f:3c:8f:21:50:ee:ea:01:
52:10:32:c3:fa:2e:d7:a7:4f:f0:0d:15:e2:6a:2a:42:d2:7d:
6f:5f:44:ba:6b:e4:6f:71:bf:d7:87:31:df:50:5e:26:a6:4c:
ea:f1:27:ae:ef:82:67:57:72:ae:68:3b:ce:a9:b7:a4:9e:44:
8a:11:a6:e1:e8:55:b2:ab:d7:89:14:b9:dd:bf:a7:cf:a7:10:
b7:32:71:ea:f0:a3:05:1e:bb:ec:60:c4:e8:d0:20:54:7b:ab:
62:cb:49:28:bb:99:56:22:00:a3:3c:b1:6c:72:7b:04:e7:6b:
d4:47:29:42:61:5a:93:52:be:5f:be:4c:68:a1:03:5c:d5:8c:
18:ec:f7:0d:1f:7c:d1:b2:1b:38:88:04:d5:12:24:5f:55:f5:
08:1f:e9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:25:41 2025 by rpki-client