Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json)
Hash identifier: dawwRwIa37C+BJvEg4Fq5078pKlj8mVB8+WjfLFKctk=
Subject key identifier: 8D:BA:3C:F9:C1:92:8A:7A:17:DC:2C:9E:B2:4A:16:BF:17:C7:C5:B6
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial: 08FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
Manifest number: 08F6
Signing time: Fri 28 Mar 2025 20:38:02 +0000
Manifest this update: Fri 28 Mar 2025 20:38:01 +0000
Manifest next update: Fri 04 Apr 2025 20:38:01 +0000
Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: EKSwsCvpCbX0z0JAidwfhHHoOT9X1Af1yI+TYNydtbY=)
2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: y624BzVkuEiikHslOtq6hgxDkVhcX1eWu3QlNuMQNRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300 (0x8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0FCC
Validity
Not Before: Mar 28 20:38:01 2025 GMT
Not After : Apr 4 20:38:01 2025 GMT
Subject: CN=67e708aa-2b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:33:9c:fc:19:d7:76:e6:43:82:e6:53:8b:
57:23:e1:4c:16:1b:00:54:7c:97:6b:b3:54:f0:6f:
2e:f5:78:2d:f0:c0:98:67:b1:c2:50:a7:5b:e4:f0:
03:88:b0:7f:28:32:a4:47:87:da:f3:08:e6:04:fe:
14:c3:b7:5f:2c:66:46:24:7e:4f:16:0e:4a:47:39:
13:0c:59:47:4b:37:53:76:2c:27:2c:e3:56:24:97:
b1:f2:1b:52:fa:68:bb:18:44:18:f1:c1:f3:94:29:
bf:59:5d:34:46:e7:1e:75:a0:60:b3:8c:fc:30:c2:
5e:7c:1b:ef:67:20:c9:6c:60:8f:6d:f4:ef:65:ef:
16:40:1a:cd:ad:62:2d:4a:01:a8:b8:ae:d8:ae:c3:
31:52:45:8a:77:21:7e:87:58:27:2a:c9:cc:14:98:
d4:2e:c1:0d:70:8c:56:55:7f:f0:1d:82:4d:0e:92:
75:1d:ae:9b:ed:08:49:8a:a6:47:63:ef:cd:7b:38:
da:b8:16:f8:61:02:f4:5a:3a:81:22:18:94:31:03:
30:9d:66:2b:78:91:53:c5:9b:8c:3d:95:67:29:c3:
6e:3c:30:1b:14:cf:a5:8b:42:56:f1:a7:0f:c5:69:
0a:ed:f2:84:11:3a:61:5d:af:1c:34:df:cc:51:f3:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BA:3C:F9:C1:92:8A:7A:17:DC:2C:9E:B2:4A:16:BF:17:C7:C5:B6
X509v3 Authority Key Identifier:
keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:5d:45:b7:91:a5:1a:c2:4e:cb:d2:5c:32:15:eb:c4:36:3f:
76:7b:78:9b:03:b2:42:50:21:ec:a6:b8:5b:6e:f3:30:4a:ad:
e2:e2:bc:71:8f:30:4c:8a:04:13:20:4e:44:da:d3:56:f3:22:
61:a8:46:59:ed:03:23:ca:0f:4d:8f:88:21:b6:78:29:9d:30:
1e:35:4f:c8:89:3d:c2:9e:03:02:e7:a9:eb:5c:90:4b:e0:e0:
3e:ca:be:cb:89:2b:21:37:5b:00:eb:f2:45:a3:bc:50:64:32:
5f:5e:75:67:7f:ba:44:8c:9d:20:3d:ec:80:3e:64:51:55:61:
84:35:64:9e:d3:54:40:69:35:26:46:af:68:27:58:7b:1a:98:
97:8f:9b:68:c7:46:85:e3:15:65:3b:bc:d6:c4:6a:d3:ff:ee:
ce:17:7c:cc:c4:4a:45:39:49:e5:7b:88:e3:af:8c:9a:16:52:
49:a4:d1:11:df:41:8f:9d:e2:1c:46:75:c0:87:99:24:ce:61:
b4:c7:31:e2:53:0b:50:a1:af:30:2b:10:19:8a:bf:63:09:49:
f4:30:66:e7:1f:20:79:dc:73:10:a3:6e:7d:ec:9e:d1:60:fe:
59:86:ed:e6:e1:65:33:cb:af:7a:32:8c:43:bb:07:38:8d:cc:
e2:9c:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:54:46 2025 by rpki-client