Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
File: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json)
Hash identifier: UKiXcyEw83Zt5EZyqeK4AFh/k5j/ZS/taVfVX51rDSg=
Subject key identifier: 03:2D:C4:59:52:82:11:3A:D8:F3:A1:1D:55:15:BE:A3:02:C3:FE:DA
Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Certificate serial: 0D7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
Manifest number: 0D75
Signing time: Fri 28 Mar 2025 18:06:48 +0000
Manifest this update: Fri 28 Mar 2025 18:06:48 +0000
Manifest next update: Fri 04 Apr 2025 18:06:48 +0000
Files and hashes: 1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: 6nYq4EuNj99D6MGKmPEgLFee1Yu9lKf2tWWfqxFx7vQ=)
2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: Z6lmT51OP+45EouSJ7OPnhCtkGwpN+kuXARe/mt1yM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3451 (0xd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0367
Validity
Not Before: Mar 28 18:06:48 2025 GMT
Not After : Apr 4 18:06:48 2025 GMT
Subject: CN=67e6e538-7032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:75:18:f4:af:a2:b8:a9:b3:3b:cb:06:4e:
d5:86:84:7e:48:c8:80:0c:f6:8e:59:13:3d:a1:98:
fa:37:a7:f7:9d:9d:a3:84:4c:5e:59:21:f4:42:cf:
3a:36:87:80:bd:2c:71:21:93:03:9a:b6:bb:85:3a:
84:45:80:8f:6b:e9:e9:45:70:eb:23:6c:7a:91:ee:
1b:07:94:f0:73:48:ff:1f:7d:2f:c8:15:14:c1:30:
77:c9:04:af:4b:e8:f7:c3:50:ce:3f:cb:a2:d5:89:
70:2f:c2:d0:23:0f:52:72:e7:1e:be:32:ad:3f:97:
ce:e4:7b:ec:6a:32:f0:89:96:8d:22:d0:e7:7b:6f:
1b:bd:23:7b:f3:4e:4a:f4:2d:02:38:af:ff:45:89:
d1:46:72:52:8f:9f:c9:62:db:36:91:3c:69:a4:3d:
06:2c:c5:1d:92:a4:cc:61:03:6d:d3:e1:c5:0d:ef:
d8:dc:f5:53:f1:e8:4b:58:03:fb:d3:4b:82:0b:02:
4f:32:2b:9b:71:90:86:c0:d4:06:db:23:67:11:68:
f3:aa:db:23:cc:6b:a2:f8:81:f4:f9:11:e3:1f:3e:
10:80:f2:2f:47:27:13:71:ed:9c:09:8a:fa:1a:25:
a9:c0:93:f0:33:7b:37:c4:b9:d2:39:84:6c:33:7d:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2D:C4:59:52:82:11:3A:D8:F3:A1:1D:55:15:BE:A3:02:C3:FE:DA
X509v3 Authority Key Identifier:
keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:97:15:11:d0:ef:81:78:2f:1e:42:df:61:bb:cf:d2:57:03:
51:b0:b7:37:fd:db:ac:71:c5:5d:9f:56:cf:71:08:e5:7d:15:
40:7c:87:a6:ed:e1:44:4d:f2:0c:32:7d:cf:60:0c:2d:f5:8d:
14:d1:31:1a:4d:7e:70:59:d4:68:5a:76:48:be:47:0e:09:be:
d8:3d:8d:e1:32:98:af:c2:65:61:79:af:49:55:62:94:7b:b6:
50:9a:d4:5e:a4:6c:f0:95:f1:ff:da:03:f0:df:d3:36:f0:3b:
68:50:7d:73:f9:af:df:e7:0f:dc:b9:47:76:cb:53:1f:8b:b5:
a2:ea:51:d4:ef:67:59:ca:a3:71:50:6c:9b:46:30:ba:42:49:
93:77:24:b5:80:a9:c5:62:90:25:5e:6d:d7:07:66:fa:e4:d1:
85:bc:03:85:b7:6c:64:6a:52:8b:26:3b:27:c6:0e:b7:74:ba:
b1:ee:ed:74:59:fc:de:22:a5:19:80:2f:70:0e:a4:99:9d:c1:
24:5c:ea:61:c5:0d:ce:cc:07:d4:21:bb:13:87:96:f6:3f:84:
be:d6:a0:1a:b1:93:96:e2:2c:ed:a4:87:25:44:d7:00:63:3d:
fe:c7:7d:fd:8d:4e:2f:27:4c:83:d6:92:77:5c:33:a3:f3:8d:
f8:39:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:52:17 2025 by rpki-client