Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json)
Hash identifier: +Ip96vYDCEiqpbaE5fjygAYTcWAFcZiKSnLhkcwG9ck=
Subject key identifier: 8C:9A:C7:AF:D0:D5:50:E0:7C:A7:94:03:84:16:57:A2:B4:33:0E:C6
Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Certificate serial: 0F8C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
Manifest number: 0F84
Signing time: Fri 28 Mar 2025 17:39:36 +0000
Manifest this update: Fri 28 Mar 2025 17:39:36 +0000
Manifest next update: Fri 04 Apr 2025 17:39:36 +0000
Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: eOV/QKurVWedJTsUgTdHCsk9sBSaxAk3MfWrW4Zv0cU=)
2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: 4lBnHy42IrC+CuFwqVAzKyt4CMy0vA1UroTjFuzkrh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3980 (0xf8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAE16
Validity
Not Before: Mar 28 17:39:36 2025 GMT
Not After : Apr 4 17:39:36 2025 GMT
Subject: CN=67e6ded8-f39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:45:2f:0b:ef:ab:75:18:1f:96:9a:16:ea:
e1:e6:21:55:17:33:fa:da:c1:e3:77:9b:19:5a:63:
b4:24:0b:31:94:54:8e:54:f2:d7:6a:03:9d:b5:5e:
f6:25:ed:08:e9:b9:29:e7:1a:1c:a3:b5:18:26:22:
d6:b4:7d:ef:9a:89:31:83:e4:24:83:9e:d2:d7:ad:
01:33:21:dc:7f:f5:64:8e:a7:29:df:58:c6:c5:e6:
c1:9e:c2:d8:48:d0:8e:21:b7:c8:d3:10:ba:ff:90:
9f:1c:8e:c7:10:82:2a:9a:b0:95:3e:9c:d5:92:98:
c7:a8:4e:cc:9c:5e:27:5b:1d:4a:f1:a5:67:ed:9e:
b9:1b:f0:12:64:38:01:54:fe:a0:69:d9:d0:00:d5:
8b:2a:71:61:d4:54:f5:83:dc:ca:18:4a:4a:d6:97:
24:a5:1d:ae:ad:18:a5:11:b6:7a:43:5e:38:78:9f:
df:76:ce:f7:26:3c:38:9f:1e:c1:e7:2b:18:45:8a:
52:63:d4:7b:dc:08:41:37:cb:4f:b7:08:bc:dc:7a:
aa:bc:c7:81:b4:ca:18:10:b3:3a:9f:9b:85:7c:50:
5b:20:c4:08:b0:1a:39:c5:0b:83:ba:66:dc:3e:cd:
07:b2:21:d9:25:48:a6:1c:8d:0d:40:40:55:26:88:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9A:C7:AF:D0:D5:50:E0:7C:A7:94:03:84:16:57:A2:B4:33:0E:C6
X509v3 Authority Key Identifier:
keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c4:78:ba:b8:a7:dc:d8:16:2d:3c:0f:9e:c1:d9:44:9c:c5:
7a:18:b3:12:94:ad:1a:c8:d0:42:73:94:84:72:e1:b8:13:d0:
72:ce:0f:91:45:b5:28:e4:73:d2:b5:69:8a:91:a0:6d:ba:f8:
a3:bf:3e:b8:2f:36:6a:19:a6:89:66:47:c8:71:56:28:bc:be:
d3:44:d5:99:6f:40:c6:21:6b:33:d0:fa:01:dd:93:ea:53:c0:
d7:31:16:a1:23:76:6f:de:8e:ac:4d:64:51:14:22:09:0b:bb:
5c:d3:0e:6f:6b:ed:cc:ff:e0:d1:3d:75:b4:fd:a9:be:68:f4:
df:65:96:19:2c:7c:82:13:64:e9:c9:42:82:9e:8c:bc:8b:bb:
e7:63:28:fb:9b:bf:2a:55:b7:f6:cd:05:1b:90:10:7c:67:e4:
56:63:3e:e5:43:70:73:00:1d:d9:8c:a2:03:90:56:51:8a:1a:
77:7b:75:a6:51:b9:a7:8f:ef:92:8b:a6:b6:7a:e2:72:b8:d6:
a0:ff:cb:27:3b:a9:50:25:82:f2:ce:52:aa:6c:0e:1f:64:3f:
26:50:66:47:d5:5d:e5:8a:3b:cd:ac:2a:fc:f7:24:e5:ff:ff:
c2:15:33:a5:b7:9c:b4:2c:41:a4:25:12:9f:f6:70:94:d6:91:
7e:b6:89:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:14:19 2025 by rpki-client