Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
File: EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json)
Hash identifier: j9i2Rg/Kiqp8OySmY+yMVGYojvzfSToDMj81BqFupc8=
Subject key identifier: 2A:9C:48:96:C7:5E:BD:BD:45:37:BA:D0:D9:16:D1:C6:7B:D6:2A:D5
Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A
Certificate issuer: /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
Manifest number: DE
Signing time: Sat 29 Mar 2025 04:55:55 +0000
Manifest this update: Sat 29 Mar 2025 04:55:54 +0000
Manifest next update: Sat 05 Apr 2025 04:55:54 +0000
Files and hashes: 1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: vfyjTd3wU8GiohAkmBtVi58RHOR6aKGCQJXt/elL+48=)
2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: YLouRJayszJ+YXIZjA0nYlRHirFmGMZNUS3tAUGchSU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A76AD
Validity
Not Before: Mar 29 04:55:54 2025 GMT
Not After : Apr 5 04:55:54 2025 GMT
Subject: CN=67e77d5b-c5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:d4:35:89:47:e7:34:fd:20:e5:ab:69:4c:
60:c6:fb:0a:0f:49:6d:72:27:57:d6:e9:af:fa:ef:
e4:a1:f9:ff:53:9f:8f:cb:1d:19:30:46:d8:f6:5a:
3a:6f:ae:60:1b:bd:cc:85:99:b5:63:16:c7:14:3d:
1e:a5:bd:5c:e5:0c:cf:f5:79:d0:72:ff:46:05:38:
e2:17:56:50:f9:1d:f8:e0:9f:ee:e1:0b:13:0a:58:
15:51:fb:39:1d:07:22:1e:fd:45:42:30:a9:d2:2e:
26:5b:00:c3:a1:eb:e8:3e:7d:f8:7a:e7:77:b2:18:
c7:e6:ac:b0:9c:62:c2:d4:d5:8f:a5:17:16:95:dc:
11:2d:50:29:f4:82:da:7a:ff:b9:39:2e:5f:a3:3f:
7a:56:5a:35:d3:79:ca:55:49:c9:53:c5:bb:b6:cd:
e9:50:94:a7:0b:e5:24:53:37:4c:f6:72:b2:11:8f:
06:73:e3:1b:bb:aa:77:95:e5:ca:68:55:33:be:a5:
27:21:be:62:f0:5c:6c:99:b8:b8:15:f7:29:47:95:
d5:5d:f6:8e:ac:c6:8c:fa:8f:b8:3d:7a:aa:0f:92:
77:93:77:23:29:71:46:8d:e9:f9:da:7a:9f:45:2e:
4b:8d:d1:24:a9:d4:3e:f2:06:51:d9:a8:ad:0d:f7:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9C:48:96:C7:5E:BD:BD:45:37:BA:D0:D9:16:D1:C6:7B:D6:2A:D5
X509v3 Authority Key Identifier:
keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:cf:15:a7:0a:fc:5e:03:68:2f:85:27:c1:a1:c4:6d:41:d2:
d1:7b:d2:9e:ab:db:ab:c9:8a:d3:59:d7:38:d6:6e:b4:ba:7d:
d6:f6:87:98:2d:35:2d:61:95:13:7b:2d:6a:4c:4f:15:09:12:
05:4a:be:f7:ca:71:0b:6a:24:f4:64:7b:ae:01:77:7c:33:d5:
a6:53:a9:77:d1:21:66:83:b4:9e:4e:2b:4c:5b:1b:45:a2:1d:
cb:86:46:cb:be:9b:ca:9b:de:15:4d:2b:a4:5a:c5:ba:33:55:
fc:f8:fd:c2:f2:38:69:c0:b3:25:24:4f:d6:7a:7f:87:d5:47:
99:b1:9b:6c:e9:52:45:8e:ba:bd:35:39:41:9d:f3:a7:f5:d7:
22:83:dc:e7:44:0c:48:bc:00:bc:c7:64:65:4e:3c:7b:fa:e3:
c7:5a:5c:c1:79:6e:d4:63:2d:97:88:2b:91:a8:e5:d4:57:62:
74:a3:86:0a:1a:ae:bf:b7:35:4c:e4:d7:fb:b3:02:b0:46:4f:
17:cc:41:a6:08:7c:28:d6:1d:17:46:05:5b:2e:2a:ae:e0:18:
f6:47:fa:49:62:53:a2:c7:39:a5:ca:22:e8:e1:af:17:f9:b9:
8f:76:09:f8:be:cc:3d:c7:4d:91:6f:9c:ea:04:dc:26:64:22:
36:f5:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:59 2025 by rpki-client