Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json)
Hash identifier: XB7Lo+cf2HORvg3IvMC4Us8VbOeEPq9l+1ZSSEFb/mE=
Subject key identifier: 09:AD:17:25:32:37:E1:DF:63:43:E7:B1:E2:79:8F:59:B1:BB:92:25
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial: 61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
Manifest number: 60
Signing time: Sat 29 Mar 2025 06:21:48 +0000
Manifest this update: Sat 29 Mar 2025 06:21:47 +0000
Manifest next update: Sat 05 Apr 2025 06:21:47 +0000
Files and hashes: 1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: vzsU1DALepOh2lWv0YQOx3Qwb5OVusFTRwpIyF8lLBU=)
2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: aGiRG+xUGgWwAx/G6pVvTX9ourgHUuGhOXJQLlTyA9Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE4E
Validity
Not Before: Mar 29 06:21:47 2025 GMT
Not After : Apr 5 06:21:47 2025 GMT
Subject: CN=67e7917c-5e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:8c:d7:dd:6a:f6:60:49:b9:ee:72:68:37:
12:fb:0e:0d:82:72:12:eb:0c:35:58:7d:1e:cd:c1:
6e:e2:24:88:e2:2b:e2:9a:a0:e5:1a:2b:1b:aa:8d:
cc:05:b4:53:8b:c3:9b:14:22:f2:9e:ca:10:47:4c:
1b:9b:b4:b9:53:71:c8:29:a2:33:51:95:0f:a4:4b:
5b:40:30:ff:0e:07:d3:9f:d0:50:e9:72:28:26:e3:
15:c3:d4:38:fe:f0:29:3a:c7:5f:73:47:10:d1:ee:
a7:a3:7c:07:09:eb:10:bc:bf:7b:5a:85:db:ff:f6:
19:01:41:1e:f0:85:ec:5c:61:2b:4b:9c:cc:61:c2:
fd:56:8a:20:71:24:d9:49:8b:1b:71:a7:f2:30:a0:
ef:b6:c7:e6:f3:8f:de:7f:51:41:14:6f:76:fb:37:
57:7e:43:86:ed:36:89:0a:53:84:16:5f:0b:a9:6c:
6c:c3:24:0b:b7:0d:47:71:8b:65:55:5c:05:02:e4:
34:85:d1:5f:f1:a4:43:fe:0c:71:e6:27:94:b5:05:
6c:3a:c0:ff:11:c3:3f:a3:d3:00:e8:16:c8:c1:4b:
92:71:b2:5e:a7:cc:d3:ea:ee:98:7d:bb:53:82:d1:
46:99:7f:d4:3f:0c:27:86:73:a8:6b:81:ed:33:95:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AD:17:25:32:37:E1:DF:63:43:E7:B1:E2:79:8F:59:B1:BB:92:25
X509v3 Authority Key Identifier:
keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:f1:25:49:b8:62:e2:f8:93:f9:c5:3c:a9:b9:ec:c1:e4:77:
e8:41:c1:7d:b3:e3:95:17:d2:95:e1:18:28:aa:28:ef:3f:32:
39:99:1d:0b:16:85:dd:c5:a4:42:97:84:4a:cc:10:8b:60:c2:
6f:4e:7d:77:f6:03:4f:4a:93:5b:56:79:90:07:db:a8:1f:e1:
2a:86:83:2c:ff:fb:e5:d4:3f:5e:96:67:35:e8:5d:f5:79:d1:
fb:58:b6:12:aa:3b:38:49:35:31:9c:14:72:00:14:98:a0:82:
af:5f:dc:74:90:82:2b:c7:6b:42:9a:1a:8d:6f:65:54:b4:37:
ae:68:3d:f6:5a:7c:c6:28:f8:8f:91:2b:bf:60:57:08:51:88:
40:b3:f0:78:31:33:8c:a3:66:a7:5f:9a:39:60:e3:f1:77:d3:
7d:e4:d4:46:49:da:e1:cd:3b:72:4f:36:7a:75:ad:0e:97:f2:
ec:02:74:49:21:d9:d4:4b:d9:59:22:3b:c5:96:26:3b:77:73:
07:3d:f2:6c:62:37:c1:ff:86:5a:36:67:25:ef:ec:b7:68:1a:
3c:2b:a9:c1:51:7c:00:3c:fa:d7:b1:ab:a2:36:8b:27:cf:5f:
8a:63:7d:f0:2f:cc:ff:01:53:d7:f1:25:a7:7f:b6:38:0c:5e:
51:5d:86:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:10 2025 by rpki-client