Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
File: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft (raw, json)
Hash identifier: Au7iE2NSpINzS4yq/HgmsqOcqB8SHMyCbPOLBw6Ei9g=
Subject key identifier: 1E:17:C7:B5:5F:3E:7F:62:EC:E4:C1:DF:84:99:88:AB:37:22:0C:5C
Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
Certificate issuer: /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
Manifest number: 77
Signing time: Sat 29 Mar 2025 06:06:01 +0000
Manifest this update: Sat 29 Mar 2025 06:06:00 +0000
Manifest next update: Sat 05 Apr 2025 06:06:00 +0000
Files and hashes: 1: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl (hash: EqZU2wwLtKK1kWrrDuTVO7hnhDohT7cdGVBNUIWxYN0=)
2: 1CDD9EF85B9F11EFACE3275CC4F9AE02.roa (hash: v4ejIpdySbBIKimD5EDirkHkD31xywXn/idyAwvPc/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF3E2
Validity
Not Before: Mar 29 06:06:00 2025 GMT
Not After : Apr 5 06:06:00 2025 GMT
Subject: CN=67e78dc9-a909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cb:44:c0:2a:58:7e:66:32:89:b3:55:a4:99:
6e:a4:3b:1a:2c:32:6b:1c:ff:1b:09:f6:07:1c:e5:
04:cd:1a:4e:7d:35:79:bf:88:c3:1b:0c:b5:fb:d3:
7d:89:46:4a:bc:b3:61:0a:26:f2:02:17:cb:11:9a:
76:65:94:df:a1:4a:26:57:47:27:8c:70:e8:30:0d:
8b:1a:47:6e:3d:77:28:bb:09:7b:55:d2:26:82:96:
cc:80:30:b5:9f:8a:c7:c6:6f:c6:48:77:7e:aa:37:
18:68:cc:85:b9:ed:74:90:94:ee:b1:46:d6:23:3c:
a0:87:8e:2c:12:86:26:3d:e3:68:0d:bc:1e:af:2f:
a5:60:71:06:13:a1:c3:ed:43:5c:8e:30:05:14:3c:
d5:91:31:84:7d:a7:3f:37:c4:32:3c:70:51:be:d6:
f5:49:9a:0c:46:f7:52:a3:88:7e:5b:d2:1e:32:5c:
85:e6:ae:73:b7:ef:57:39:f5:84:09:97:99:a5:4c:
ac:71:ce:4e:dc:4c:7b:9b:fd:30:61:b1:82:ef:d9:
86:83:f0:a6:3a:3a:e1:38:6a:92:6a:92:f7:da:e7:
76:7e:5c:f6:f9:b9:f5:72:09:b7:66:af:3f:ff:3f:
6b:32:bd:49:d0:72:84:ca:f4:23:28:25:7c:4b:19:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:17:C7:B5:5F:3E:7F:62:EC:E4:C1:DF:84:99:88:AB:37:22:0C:5C
X509v3 Authority Key Identifier:
keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:34:1c:3d:95:d8:d7:9e:cf:0f:93:52:75:39:88:37:79:d7:
87:b8:1d:35:02:3e:96:91:09:d4:cc:fa:14:f7:ef:56:36:5f:
f3:e8:ac:4e:00:95:db:1f:c9:ee:2f:76:17:0c:a3:b1:f7:2a:
67:f5:b6:ae:d9:36:6b:93:d7:07:e9:fd:b9:cb:71:79:fb:d6:
ab:b2:e2:71:03:60:3f:7d:dd:70:cb:0d:b2:83:72:ea:28:4b:
c9:45:09:58:78:5d:cb:cd:c5:15:fe:71:45:e1:09:ca:e1:7d:
bd:46:8c:10:85:c9:e0:1c:01:44:79:79:36:1f:f5:5a:6b:8d:
a6:7e:8b:00:73:6d:ab:32:b8:4c:d3:11:13:4b:d0:79:37:d3:
6e:a1:e4:13:f7:c6:07:c5:7d:ea:04:63:cc:a7:5c:fd:7a:87:
bb:1a:1b:ef:4c:87:c6:0e:88:fa:25:88:86:eb:51:37:b7:e2:
0a:64:aa:6f:64:5a:00:fc:84:be:4e:c8:cf:99:e1:ba:d6:a9:
3b:be:52:0a:d2:55:03:d4:33:45:20:d9:f8:dd:94:78:3b:db:
dc:64:7e:ad:0c:ed:26:75:26:e9:49:34:ce:08:ba:21:63:6a:
52:f0:2e:52:d9:dc:73:32:22:12:7d:15:0d:31:31:f8:fc:54:
d6:e4:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:53:41 2025 by rpki-client