Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json)
Hash identifier: 8KuK7nUvYwNLYAMskXPe3uxMpUKDJfoKUbJ6rJHkF1A=
Subject key identifier: 48:5C:9A:BB:31:25:E2:ED:27:CD:9C:51:16:DA:A0:25:3B:3D:51:04
Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32
Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32
Certificate serial: 0448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
Manifest number: 0439
Signing time: Sat 29 Mar 2025 00:37:15 +0000
Manifest this update: Sat 29 Mar 2025 00:37:14 +0000
Manifest next update: Sat 05 Apr 2025 00:37:14 +0000
Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: fl8D6gOxI22+XfGUwZHcmy/OyMTFKWRPH0cR+81qxA0=)
2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: roXdyWanhEz1VmVRl+7k+hRwHYExNJ739SbYutF/VAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC
Validity
Not Before: Mar 29 00:37:14 2025 GMT
Not After : Apr 5 00:37:14 2025 GMT
Subject: CN=67e740bb-ac09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:64:27:ef:33:81:15:fe:ce:cd:00:6e:99:
cd:ef:07:90:0b:88:0d:6d:de:08:f7:66:02:76:16:
6b:c5:af:92:58:47:b8:fa:b6:12:76:c2:a7:d8:2b:
21:bb:fc:77:af:be:dd:5d:bc:b7:0d:c1:eb:9a:a1:
3a:50:42:76:b1:e6:63:38:bb:3a:8b:72:72:d4:ad:
b0:42:f3:eb:43:0d:13:41:e8:a7:11:55:ae:ff:fc:
6b:28:a8:8d:f8:bc:5f:03:c6:3d:57:f7:f2:53:37:
a5:7d:3e:1a:12:8a:0b:44:7f:38:0f:5c:8e:39:7a:
4d:77:04:b8:af:f8:e0:0d:cb:26:55:e2:b1:a2:f9:
07:59:fb:4b:38:d6:73:bf:f5:30:c7:d8:12:10:88:
a4:d4:d2:09:47:15:2c:31:c7:47:40:36:55:4d:17:
26:b7:52:dc:23:4f:26:4b:2b:92:ac:5f:71:7b:3c:
40:f6:d4:ed:a6:65:8a:5c:f9:03:2f:94:60:3f:c4:
a8:1a:2c:0e:4a:fe:03:04:e4:e8:f9:f1:6c:ba:da:
f2:95:aa:1b:0b:f8:60:4a:cf:2b:88:11:05:4b:06:
c9:a1:ea:74:8e:42:f1:69:14:f1:57:ef:84:18:16:
2e:2f:c3:e4:8e:2e:c9:1d:d8:67:5c:1b:19:cf:f1:
67:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5C:9A:BB:31:25:E2:ED:27:CD:9C:51:16:DA:A0:25:3B:3D:51:04
X509v3 Authority Key Identifier:
keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:60:55:da:11:48:e3:fc:18:af:77:e5:dc:b7:ca:f3:d6:5e:
f1:34:02:fd:16:82:97:73:45:97:6b:ad:b7:40:bb:7e:7f:07:
05:97:9c:eb:c3:69:35:56:3a:dd:b7:fa:01:27:99:16:71:70:
52:42:37:a3:f8:27:ca:5e:c7:a5:62:92:04:be:1a:59:a2:80:
d0:3d:b9:2b:02:f7:76:7b:10:b5:4d:3f:07:53:c2:de:c3:1e:
28:1e:49:41:e7:af:f7:8d:2b:96:e7:4c:57:4d:e1:28:2c:b4:
75:fe:27:ef:12:be:4d:85:fb:5f:48:df:b2:ad:38:d2:e7:e1:
a2:68:82:a9:ec:78:d7:b0:c6:b7:47:9d:8a:43:8f:1c:3e:04:
01:cb:ce:ab:c8:55:34:5e:4c:19:05:ad:02:d9:b5:58:70:4d:
09:46:bd:88:f5:db:4a:41:a7:23:bd:60:71:f0:f2:5c:19:fb:
34:00:70:b5:b1:e6:31:a3:de:81:93:ff:6d:63:2e:d6:5e:0e:
4a:82:41:cb:26:f4:1c:b7:8e:11:4e:39:82:26:45:c4:e6:6f:
50:e5:b1:2a:7b:14:31:7b:52:a2:31:0d:9b:2d:08:66:d0:3d:
5a:f0:83:e6:16:c1:f3:18:c7:e3:c3:24:4c:bc:d9:e0:a9:1f:
cd:14:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:25:02 2025 by rpki-client