Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft
File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json)
Hash identifier: cCgIPXMWFE/jo+IMKcT5tla5UAmBpwL/G4kiENMIKrA=
Subject key identifier: D1:EB:23:D9:E2:70:9D:78:24:82:38:12:E9:DA:4D:BC:EA:B8:F7:E3
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial: 0991
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft
Manifest number: 096F
Signing time: Fri 28 Mar 2025 20:27:30 +0000
Manifest this update: Fri 28 Mar 2025 20:27:30 +0000
Manifest next update: Fri 04 Apr 2025 20:27:30 +0000
Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: ZJbqy41/PKiHLrnfat5Mmk1b0X7BSM8WTD9WY5v4PaI=)
2: 6569BF24997F11ECA6C7F481C4F9AE02.roa (hash: ihZ46zaKKgYFbsQZJpUcfwGNcLq0WYivOzEHAfXlcfs=)
3: 3818D9A09A9011EFB14F1729C4F9AE02.roa (hash: 2HuzCk6S18IuIuNY88Jnmogc9ez8HXD2AaJ8nr4dsM0=)
4: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: 2XvjAuC6Hirm3HWv88SHGUEeMWi9XgXjvYQVlXNxZVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23B3
Validity
Not Before: Mar 28 20:27:30 2025 GMT
Not After : Apr 4 20:27:30 2025 GMT
Subject: CN=67e70632-d2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:07:9e:7d:51:36:1f:ad:3d:63:27:5b:ad:
1f:9e:6e:09:0a:69:2f:b9:54:c2:0b:7b:72:b6:e9:
32:a8:b5:a2:5d:a5:db:1f:f8:6a:5d:e9:18:7c:08:
95:ae:46:be:65:39:84:fc:75:7f:81:71:66:89:75:
08:0d:1e:be:7b:65:52:f5:81:87:18:ea:2d:14:d8:
eb:05:3f:b3:0b:d1:50:71:df:42:77:2e:c9:a2:23:
ca:5f:a6:e2:a9:ca:50:ee:f7:6e:b2:1c:58:e0:0f:
c1:0e:11:81:d4:af:84:a0:81:02:b0:d9:2d:3f:50:
d0:3c:8e:76:25:ff:12:dc:d6:f3:7d:57:60:33:9d:
b2:2e:8b:cb:f4:f4:ea:68:3c:31:5a:cd:01:7d:0e:
0b:7c:98:f9:c2:ce:5d:ab:e4:81:ae:42:a1:15:3b:
65:4e:42:8e:4b:03:91:b8:31:e5:52:2a:c3:be:15:
fe:e9:e4:1e:c1:4c:b0:8b:fa:93:03:47:89:c0:ec:
31:f9:e2:b5:d5:96:a6:c0:c1:56:19:52:61:55:c1:
36:ee:a1:a7:14:6b:41:bb:21:7b:d2:99:7a:7f:d8:
33:ee:d8:4c:79:50:af:60:12:a3:41:b4:8d:f2:b3:
56:b2:cf:cc:ce:ac:fc:ca:00:86:84:7f:91:18:9a:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EB:23:D9:E2:70:9D:78:24:82:38:12:E9:DA:4D:BC:EA:B8:F7:E3
X509v3 Authority Key Identifier:
keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:31:f6:f3:81:47:32:30:67:f7:ab:f8:7d:b2:ab:c9:ed:b7:
4e:f1:35:1f:e2:93:90:1e:ba:33:c9:b7:62:36:80:c6:7f:17:
d9:ea:d0:fd:65:3d:29:f5:f0:12:89:13:ae:e2:ee:32:7d:fb:
d7:11:06:b7:ae:a2:60:92:98:23:13:0f:7e:3b:a8:0c:c6:bb:
14:95:4f:c7:0b:fd:90:95:8a:b3:08:82:04:ba:77:58:84:9b:
1d:2d:02:2a:5d:19:a2:b8:ca:af:f3:90:7c:a9:4d:7a:60:1b:
81:81:cc:32:63:79:bf:a6:f3:ee:56:4d:fe:65:1a:0b:62:15:
aa:86:b3:a1:de:15:7d:b3:be:1e:aa:10:2d:41:4a:ae:29:62:
b4:5b:73:16:54:1f:c7:ad:31:7c:1a:be:6f:3e:1d:49:dc:5d:
b6:16:6d:1a:5b:e4:ea:50:ba:b0:43:db:ef:17:e7:e5:49:88:
fc:b2:dc:41:90:d8:28:59:13:3f:09:4f:d8:e3:7b:2d:b4:97:
dc:76:a4:de:c0:1a:61:64:d4:ef:5d:ef:8a:31:72:d9:58:09:
2f:29:ca:1d:53:97:a4:70:ae:e0:b4:c0:e0:7b:42:af:c2:7d:
ed:4b:ba:58:c6:20:45:79:25:67:d4:9e:88:55:08:b4:5e:5a:
75:31:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:28:21 2025 by rpki-client