Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json)
Hash identifier: t2+YqYRSUOC7w2+tD9pFeuSs7H7LbjUy7Uz4m2EXu6k=
Subject key identifier: 78:F5:F3:4B:35:27:EA:0A:22:72:D3:36:29:BD:15:13:48:ED:84:C7
Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
Manifest number: E6
Signing time: Sat 29 Mar 2025 04:49:59 +0000
Manifest this update: Sat 29 Mar 2025 04:49:58 +0000
Manifest next update: Sat 05 Apr 2025 04:49:58 +0000
Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: vxzLlHpOKHiMFs5BSjibBrWaTGoAKM9dSGW+CkC9fo4=)
2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9008
Validity
Not Before: Mar 29 04:49:58 2025 GMT
Not After : Apr 5 04:49:58 2025 GMT
Subject: CN=67e77bf7-74a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:fd:73:99:ca:1f:6a:8f:1e:bb:47:7b:9e:
35:e2:e3:32:a0:f5:be:cf:ce:17:36:61:d5:19:3c:
66:11:fa:e3:b4:72:70:cd:f5:46:1d:b3:d9:1c:33:
54:c9:68:83:12:2c:8b:7e:4e:2f:bc:9b:78:4d:d3:
1b:1b:5c:65:87:58:6b:99:e0:75:48:d6:f3:12:ff:
22:6e:e6:31:25:0f:a4:13:17:87:2e:bc:63:48:15:
fe:9e:65:8d:ad:c6:86:0f:05:61:ca:d2:18:21:88:
f6:c3:06:3e:0b:15:65:01:d2:50:20:55:fd:01:ec:
ac:66:f9:8c:85:ae:e3:e7:31:3c:cd:63:af:91:df:
30:b2:27:33:f2:fa:04:42:c9:46:71:24:93:fb:86:
a6:a3:df:8f:b1:30:ca:77:b9:2a:da:c8:c8:5b:f2:
ac:60:8a:2b:3a:13:94:0f:ca:6a:20:b4:51:4a:e7:
6a:89:bc:39:17:e2:17:00:6c:94:31:3d:d8:11:75:
f1:63:9b:da:86:e5:8c:94:c1:39:90:b0:8b:59:11:
56:57:38:bc:92:36:2a:36:28:ff:f6:db:29:12:7f:
ef:4c:72:34:a8:11:17:3b:e7:dd:65:c0:f6:14:18:
41:2b:61:88:24:d6:96:b1:0f:a5:01:ed:df:c9:c5:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F5:F3:4B:35:27:EA:0A:22:72:D3:36:29:BD:15:13:48:ED:84:C7
X509v3 Authority Key Identifier:
keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:d5:48:92:45:f2:d1:3b:a7:4c:a7:ca:1b:c9:8f:89:8e:fd:
80:34:c5:c6:18:06:c6:92:39:d6:85:40:fb:44:89:b1:03:ba:
dd:5d:cc:6a:0a:98:06:36:a2:21:06:de:16:4c:b6:cc:79:df:
4a:d5:15:55:a7:03:2d:95:96:30:d6:74:49:be:26:6c:4b:d7:
db:98:18:70:56:75:97:39:7c:30:83:38:23:f0:09:4e:9d:19:
ed:28:29:7f:e7:33:93:7f:b6:eb:b8:03:7e:7e:02:51:76:cc:
8d:b5:2d:e3:97:85:ee:f4:09:57:96:66:45:ba:af:30:69:f4:
02:62:4a:7d:08:6e:f7:ba:ee:24:48:5b:43:46:d6:be:b3:1c:
7b:0b:6a:32:4b:44:9f:36:29:2b:da:d7:45:ff:17:de:97:21:
5b:8d:8c:5c:45:ff:bd:a4:fe:b8:a4:14:9d:5a:47:6f:93:fe:
54:0b:97:56:5f:35:e0:23:6d:c3:6e:93:95:e6:48:58:26:df:
b1:85:ca:01:83:7a:3f:90:43:1c:d3:87:94:50:1a:3d:7c:4b:
8b:06:0f:36:ec:80:5d:d2:53:ef:4c:35:54:ff:44:e3:42:4f:
13:f4:76:90:70:24:ab:05:48:ff:38:70:5c:50:f7:fc:e2:ea:
41:d3:31:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:34:52 2025 by rpki-client