Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json)
Hash identifier: nSBkjzfPcJoyMC4RGS+eYEPUOisApy/daIEPUT2/7OI=
Subject key identifier: CB:5A:71:91:7C:1C:37:D0:D2:94:6D:FF:B3:34:30:7D:55:9C:4D:63
Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
Certificate serial: 0EC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
Manifest number: 0EAE
Signing time: Fri 28 Mar 2025 17:48:20 +0000
Manifest this update: Fri 28 Mar 2025 17:48:19 +0000
Manifest next update: Fri 04 Apr 2025 17:48:19 +0000
Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: HC0T6P4ll1cJy09jP819HHoKsFveWx/KdRJrYKujsRA=)
2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: dWOEO8pwtx9hi9faa2fgwj2lHG7eHOgZT5KAz1c3Ctk=)
3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: TcpjWImJ/6OMJ2cd8RP+FJqzHMIXrQ0AmNStUKst97g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3780 (0xec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBF7F
Validity
Not Before: Mar 28 17:48:19 2025 GMT
Not After : Apr 4 17:48:19 2025 GMT
Subject: CN=67e6e0e3-d506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:4b:75:8c:d4:6e:1e:63:55:06:3a:a3:37:
f8:5a:1d:8b:f5:98:0f:5d:5d:2e:db:52:7a:6f:4f:
0b:4f:d0:a5:e2:0f:ea:35:b7:16:a2:94:0a:d2:61:
e6:40:05:8f:03:61:84:74:96:95:d6:79:1f:1a:89:
aa:d9:54:bb:be:bf:33:84:27:fa:6c:46:bd:4d:87:
fe:c9:b2:bd:e8:40:73:7e:38:6d:8a:73:c7:5b:73:
24:2f:d1:5f:16:e4:97:0b:e9:09:86:ab:af:16:9f:
b4:23:59:f4:97:f1:4f:02:fd:a1:11:61:e6:fd:a3:
f2:9e:61:1c:cf:ac:36:3a:f2:1f:7f:31:be:8d:44:
3c:5a:07:bc:a6:89:fe:dd:44:85:e3:b2:1a:bf:d3:
3e:84:74:c5:86:37:ca:6a:34:e0:31:1c:c8:9a:99:
fc:90:bb:12:72:d3:32:cf:ee:14:ce:ed:ac:d0:b1:
85:f2:bc:d1:03:1a:a7:55:a1:2e:50:62:2f:84:c4:
51:2d:c2:b4:83:fb:aa:f9:07:54:d9:fb:81:e7:29:
f9:b0:00:b6:a7:4c:09:58:2c:a8:58:b6:b0:25:ec:
29:52:ea:6d:21:4e:4e:10:dd:bf:0d:68:81:81:e4:
30:9b:80:88:cc:97:c9:f4:c9:d6:3c:1c:b6:4f:0b:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:71:91:7C:1C:37:D0:D2:94:6D:FF:B3:34:30:7D:55:9C:4D:63
X509v3 Authority Key Identifier:
keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:9f:98:35:e2:ab:8c:d8:8d:ab:88:08:36:97:64:1a:2a:25:
1d:de:5b:60:55:b8:37:df:12:04:58:f9:c6:7f:4b:d8:20:f3:
03:4d:85:bc:62:46:fc:89:03:03:aa:00:3d:de:14:f7:cd:a1:
ec:9d:99:6b:89:e7:a5:e8:bc:9e:71:1b:f0:92:10:45:b9:2b:
51:0a:90:19:e7:e3:56:cd:25:81:1d:aa:97:13:a2:50:00:68:
36:6e:87:01:70:fc:38:6c:05:79:e7:19:56:5c:19:5b:56:ff:
64:fd:45:ee:71:c2:06:e7:30:64:59:46:d6:c8:d0:c7:56:91:
b4:24:27:55:f1:62:15:37:e3:d3:df:f0:64:8c:d2:0f:3b:24:
72:f8:28:0c:36:16:a7:5c:b8:44:0e:35:92:22:6b:07:ca:84:
69:11:a9:16:f4:2a:94:f3:38:b7:ee:af:09:74:99:a4:b6:88:
d0:b2:ff:8d:45:51:51:19:82:a5:ea:bd:bc:1e:a9:e4:5d:fe:
39:a1:46:7d:68:22:40:32:d0:5e:74:c4:77:65:63:25:ea:d2:
f6:0b:a4:68:0c:58:31:0b:61:36:0a:2d:b4:bd:34:1c:ae:dc:
be:03:3e:b1:d3:9f:be:08:9b:f7:dc:10:e3:89:7f:29:db:4f:
7f:88:cd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:07:11 2025 by rpki-client