Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft
File: b2FOWP6Tat901zb1OS3tX9FrdYc.mft (raw, json)
Hash identifier: OJ2X7IFxyJWIH/Tvld+y2+lUbFff6usWglQz7+P6Kps=
Subject key identifier: EC:26:C4:C4:64:E1:60:50:7A:9E:BC:4E:FC:05:98:78:75:1F:55:7A
Authority key identifier: 6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87
Certificate issuer: /CN=A91A9B3C/serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587
Certificate serial: 063B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft
Manifest number: 0636
Signing time: Fri 28 Mar 2025 22:53:48 +0000
Manifest this update: Fri 28 Mar 2025 22:53:48 +0000
Manifest next update: Fri 04 Apr 2025 22:53:48 +0000
Files and hashes: 1: b2FOWP6Tat901zb1OS3tX9FrdYc.crl (hash: pcw4mtr3CtTwNAm4TpG9kFRQYE/HM5JfzO4ymMpiU1k=)
2: 00D8BE5286FC11EB8A95642DC4F9AE02.roa (hash: k0J17sE1EdNCFMHPLLouV8rIaMP7CAywUqJdG5phE9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9B3C
Validity
Not Before: Mar 28 22:53:48 2025 GMT
Not After : Apr 4 22:53:48 2025 GMT
Subject: CN=67e7287c-aec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:9b:e6:27:f3:c6:48:39:00:3d:96:62:8d:
d3:c9:fe:24:0d:4b:36:3e:19:94:1b:4e:6e:02:07:
3d:14:cb:91:c4:f3:b2:d5:f7:3e:55:52:72:b9:ed:
07:13:32:07:c6:2f:af:48:88:10:e2:7e:8b:51:f3:
d8:5b:33:6d:d1:28:28:c0:7a:e6:50:d9:d1:3e:b3:
3f:fd:1f:46:7b:6c:e0:99:e3:dc:c2:11:74:b3:6b:
d0:e0:10:12:b8:84:df:e1:27:a5:69:1f:c2:1a:40:
bc:0d:d3:d5:6c:88:be:df:f0:6e:7c:b6:ad:1e:8d:
f1:70:e7:88:94:e8:f3:eb:06:ff:69:02:55:61:88:
7d:ab:c0:00:a3:bb:74:c9:b4:d7:75:ee:4c:4b:ab:
59:db:e0:d5:ce:80:1d:da:b1:e1:dc:e3:68:89:bb:
36:d9:42:8b:7d:40:1c:fd:cb:49:59:cd:c1:8b:1b:
0a:56:32:6a:6e:2d:fd:c5:12:b7:d7:47:75:47:e2:
8a:0b:9f:4a:c6:95:3a:9c:9b:4e:16:f9:59:3d:15:
3d:e6:76:b1:5b:aa:72:da:fe:95:27:db:93:4b:a1:
7b:09:ba:96:51:7b:92:5f:a2:ba:35:1b:8d:ff:94:
df:b1:5d:90:34:28:69:16:5f:96:36:f2:fa:e9:08:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:26:C4:C4:64:E1:60:50:7A:9E:BC:4E:FC:05:98:78:75:1F:55:7A
X509v3 Authority Key Identifier:
keyid:6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:55:39:2e:7e:a6:30:d1:bc:3f:01:a2:0d:e2:71:b5:ee:44:
5b:ef:de:ab:74:63:d6:7c:c3:ae:c2:1c:7a:35:61:f4:31:67:
50:e3:80:db:1e:45:de:f2:9d:7f:1f:42:db:54:a1:65:b6:df:
18:3e:e7:a8:78:0c:dd:23:ac:0d:98:f5:e8:84:15:09:68:30:
0f:2c:2e:85:4b:cb:39:af:6f:ff:7a:75:d4:ab:80:5a:05:2e:
93:25:55:09:24:18:fc:8d:e7:bc:c5:83:b5:9c:b5:fa:af:0b:
f2:db:34:0b:86:04:81:69:c4:65:c7:10:a6:bd:cc:bc:28:c6:
db:82:f4:90:d0:81:c2:bc:e4:20:68:f5:74:3b:45:94:9d:39:
40:66:64:dc:75:ad:d0:14:bf:0b:a3:50:13:67:f7:70:5a:5a:
4d:e4:58:1e:0a:87:71:75:d4:ed:1f:fa:4d:68:44:c2:6a:45:
ed:3f:a5:76:72:c1:8b:27:86:7e:49:f7:e3:43:dd:5b:55:ef:
24:59:4d:02:89:95:95:24:d1:9e:ff:25:2f:9b:b2:e7:cd:51:
d3:94:39:33:19:62:41:55:74:46:8a:c0:a3:15:14:dd:16:64:
5d:44:6f:05:86:86:98:01:85:ec:bd:e2:ff:f3:f6:aa:f5:fc:
74:25:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:22:47 2025 by rpki-client