Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json)
Hash identifier: +l9/KD3YrNugAMGG2fpmHVsVNuXrSBIMsg/iBR16LvE=
Subject key identifier: FF:D1:2E:B7:19:B9:96:5B:95:11:1A:A4:23:E3:DD:89:22:B9:71:22
Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43
Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
Manifest number: 6D
Signing time: Sat 29 Mar 2025 06:12:14 +0000
Manifest this update: Sat 29 Mar 2025 06:12:14 +0000
Manifest next update: Sat 05 Apr 2025 06:12:14 +0000
Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: UpsUJm/PmpMnHSS4n/N8dVZp2m0fptYEl4hmDzDnsW0=)
2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2D9
Validity
Not Before: Mar 29 06:12:14 2025 GMT
Not After : Apr 5 06:12:14 2025 GMT
Subject: CN=67e78f3e-d8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:54:6f:79:49:31:18:2d:3f:3c:83:1c:66:
b6:4a:09:6a:a6:c9:3c:4f:4f:b9:35:70:ac:9f:fb:
b7:73:55:76:27:ec:2e:22:cd:24:84:4f:d9:d4:90:
a4:3d:8b:3b:31:8f:f2:69:0e:bc:68:bc:1b:69:22:
d3:72:d0:b9:b4:d9:f3:ff:70:fe:46:e1:70:b2:bc:
27:33:d8:9b:f8:cc:a2:97:c6:b9:69:04:f0:45:d4:
b0:40:cc:62:9f:f5:1b:56:81:60:9a:df:e2:43:e6:
9d:dc:de:9e:7f:14:73:95:8a:19:a1:cc:8c:20:cc:
a0:06:21:f4:82:96:de:2d:9a:39:79:de:37:d0:69:
a8:fb:70:ac:93:26:24:6b:d2:bd:d1:78:80:5b:bc:
25:2b:73:67:9e:d1:ff:41:5f:2c:3d:ad:73:fb:5b:
dc:c0:64:7d:50:63:dd:8d:00:59:f6:25:f5:b4:9f:
e4:40:72:55:20:fb:31:be:7e:81:08:0c:b2:bd:ce:
f0:01:32:ac:26:43:92:e1:e6:4d:2c:56:1b:86:5b:
a7:1d:02:d0:8a:0f:91:59:8b:ec:60:8d:99:2e:09:
a9:4f:67:5f:3d:73:c9:e1:12:5b:86:8c:8d:6c:06:
af:4b:77:ef:25:7d:b8:f0:12:09:fa:24:b0:23:0a:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:2E:B7:19:B9:96:5B:95:11:1A:A4:23:E3:DD:89:22:B9:71:22
X509v3 Authority Key Identifier:
keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ad:7d:8a:94:a1:6c:19:fe:ce:75:01:e5:59:42:93:45:64:
b8:1f:cd:81:b1:2d:da:08:09:4b:1d:9a:d1:3a:70:78:f9:05:
da:8c:70:f1:af:5d:23:c6:ab:4d:11:8a:ef:13:0e:5b:a2:72:
a8:b1:0f:b5:49:6f:e2:34:cc:cb:04:1f:52:e8:2d:f4:53:26:
94:f4:ff:36:2e:d3:cb:37:be:de:17:e6:e9:cd:e9:f6:c2:8f:
96:da:c4:fc:a1:99:c9:b3:33:fa:d6:5a:d2:80:72:ab:0b:7a:
f5:1d:d1:e2:47:ce:c4:3c:9a:7e:01:fe:65:df:68:ad:df:36:
66:fb:44:22:3f:10:e4:0a:9f:0f:74:e5:65:7e:cc:cc:1d:14:
d2:45:99:e3:6a:d6:0a:b3:52:0b:16:20:c9:78:91:82:90:1c:
64:e4:98:05:bf:7f:0c:f0:a7:22:eb:cd:4f:e5:e8:b8:96:03:
84:9c:63:98:b7:06:ee:5b:b7:ad:ab:a2:e0:86:1a:a6:c9:80:
de:98:3a:d8:39:75:18:4c:d9:d4:24:ad:a1:a5:8a:25:60:e6:
9a:9b:b5:24:8f:d6:38:d3:60:7b:0f:a0:e6:02:d5:47:d8:08:
65:f4:25:96:d4:ac:bc:ef:a7:35:2d:37:8e:b3:a7:17:ce:c5:
3e:bc:d7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:14:50 2025 by rpki-client