Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
File: Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json)
Hash identifier: LwAMpvQhGCe/dMA7/gPL+ysodiXs9aUpfqLhWOa3Bqk=
Subject key identifier: A7:E6:F8:29:8F:21:18:79:DC:B3:FD:56:4C:C4:4E:23:E2:11:A3:A4
Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
Certificate issuer: /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
Manifest number: 0269
Signing time: Sat 29 Mar 2025 01:57:51 +0000
Manifest this update: Sat 29 Mar 2025 01:57:50 +0000
Manifest next update: Sat 05 Apr 2025 01:57:50 +0000
Files and hashes: 1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: 75b5QpMHBBcOVTm3FZwMgbY3qVfZ9Q/mMqg6+71GXyg=)
2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: u8H4NSNtBcIg5GrlIWnmn+sl29NyMYEZMtRVlCln8c0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA044
Validity
Not Before: Mar 29 01:57:50 2025 GMT
Not After : Apr 5 01:57:50 2025 GMT
Subject: CN=67e7539f-a432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:82:87:86:9d:81:f9:8b:9d:ca:b6:10:cd:
56:25:99:52:ef:35:36:8d:07:66:54:2a:ac:8c:dc:
e6:ad:7c:34:a4:97:d2:3f:ff:55:1b:64:06:52:3d:
38:50:41:92:1c:d4:3c:39:a1:fc:d7:42:35:a3:ea:
09:75:d6:cd:c1:5a:a1:bd:54:a3:9f:aa:a0:e4:91:
82:0b:4b:7f:82:a7:d8:cf:2b:ee:8f:84:a1:16:71:
cb:be:79:4d:3b:f8:7d:2a:d1:8d:91:4c:4a:f5:f3:
a8:8f:44:57:e6:13:0d:f4:8d:14:4e:98:6f:d4:7a:
d7:e8:e4:f9:0e:0f:d0:42:35:73:13:33:01:84:cd:
a5:ad:5f:c7:08:bc:7d:ad:2a:49:9b:2e:af:e0:5a:
3e:8a:6d:ce:b7:e3:fa:78:99:61:39:50:5e:a9:fc:
fc:77:ee:56:16:26:1a:52:38:aa:d3:9e:a4:5d:95:
61:a2:26:01:c2:b7:78:03:72:ee:cb:db:e3:57:ce:
bb:91:59:b3:e9:d6:1b:d6:d9:14:fc:71:08:e0:7d:
5c:fc:59:36:5a:df:ea:6c:b2:ed:d7:01:a1:8e:bc:
35:02:b5:9a:74:00:68:49:f0:87:d4:e6:70:63:4a:
bf:a1:ab:42:d9:a9:59:14:54:21:a6:27:9b:e2:eb:
97:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:F8:29:8F:21:18:79:DC:B3:FD:56:4C:C4:4E:23:E2:11:A3:A4
X509v3 Authority Key Identifier:
keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:6a:0a:be:77:06:f9:f2:c0:c8:24:42:cf:d0:49:35:d5:
73:13:85:7b:df:99:99:cc:6d:c7:bf:d2:04:cb:c5:de:3e:4b:
00:f7:d8:fb:2b:e1:5c:3e:be:14:77:dc:fe:5b:eb:62:ed:36:
d3:63:3f:99:71:5c:c7:64:d6:bf:cc:8d:46:9d:fa:6d:93:2c:
93:cf:73:12:d3:72:df:e4:46:fa:0c:b4:62:86:cb:fa:22:11:
a1:2c:c2:51:3a:14:3f:e9:fe:ff:5b:f3:c6:40:a7:aa:71:c5:
3b:bf:a0:f6:f8:12:77:95:ce:e8:cd:1e:9e:2e:f7:3c:f6:15:
d8:48:57:dd:e8:34:59:3a:f3:53:cc:0a:1a:7c:76:bd:1f:ee:
33:2f:03:43:05:b2:6d:12:10:87:34:ad:79:9c:6d:ee:4e:74:
59:aa:be:dd:09:6d:11:17:74:4e:37:2f:1f:81:d8:d7:ba:4b:
b4:19:fe:dc:b9:13:f8:02:fd:0d:a3:cd:17:4f:5b:66:f7:bd:
42:50:b0:96:a9:1e:3a:7c:d2:b7:de:10:ba:18:22:fc:fc:28:
2d:62:d6:e9:14:e8:6a:ec:f3:9a:d4:ef:87:a0:f2:8c:28:b9:
00:ac:d1:24:55:37:e0:6c:3f:a3:b2:c2:c5:81:cd:05:bd:1a:
97:28:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:43:40 2025 by rpki-client