
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json)
Hash identifier: E110pi4ybupwtf6cX4jYtghvb+7/BhUskhjIJPf1LMU=
Subject key identifier: 11:1B:F5:BF:E9:5B:5D:FE:7E:0C:D9:64:EA:78:8F:4D:F8:15:69:BB
Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602
Certificate serial: 14B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
Manifest number: 14A7
Signing time: Fri 28 Mar 2025 16:58:19 +0000
Manifest this update: Fri 28 Mar 2025 16:58:18 +0000
Manifest next update: Fri 04 Apr 2025 16:58:18 +0000
Files and hashes: 1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: T90LjFouj4viGkjER2q7fYHTRzIrFWiE9ll/mEX3XnY=)
2: D056896E592A11E889035A70C4F9AE02.roa (hash: tFV3sDzQ0MzS9JiFtiotNFf8xUZyC7UxkWA8BrQBeiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5297 (0x14b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3EF6
Validity
Not Before: Mar 28 16:58:18 2025 GMT
Not After : Apr 4 16:58:18 2025 GMT
Subject: CN=67e6d52a-cf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:74:ff:41:a4:a6:67:cb:3c:b9:e0:d3:46:
5b:b2:af:5f:b4:5e:5b:42:1e:d9:71:3b:ac:54:0d:
14:8e:18:5f:a4:d4:43:91:dd:2c:f1:0d:76:33:51:
45:1c:8d:83:7d:8a:04:bb:85:aa:cc:75:82:e0:61:
9e:b2:07:89:6b:d6:46:19:2e:e4:c7:f1:57:42:53:
d8:72:cd:b5:ca:2f:b0:1b:48:9f:5c:13:ab:c2:47:
f2:f8:92:76:45:36:6f:2f:bf:08:9a:a6:f5:d3:1c:
22:6b:94:18:d7:00:0f:1f:a7:e6:07:a4:3a:a9:4e:
9a:c3:c8:3c:38:a2:ea:c9:13:99:1c:97:b3:b8:13:
c3:9b:d8:a6:19:97:0e:d3:80:d0:4a:a2:5b:08:62:
c0:04:7e:20:07:28:15:b4:12:72:4d:2e:08:51:6f:
80:e8:a8:4d:fd:b6:fd:39:89:02:b2:91:18:3f:c3:
47:35:92:6d:73:2a:1b:17:0a:ee:50:7d:53:7c:62:
a9:6b:0e:fd:2f:ed:09:71:b5:c2:c5:96:86:77:e5:
8f:50:25:e1:49:32:81:07:12:d4:45:1c:e6:c5:ff:
fa:d0:07:59:08:dc:b8:30:5c:47:46:f0:08:14:17:
69:4e:eb:f7:e3:86:ac:bc:cc:ad:2b:b3:08:e3:9f:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1B:F5:BF:E9:5B:5D:FE:7E:0C:D9:64:EA:78:8F:4D:F8:15:69:BB
X509v3 Authority Key Identifier:
keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ec:bb:b3:04:bd:33:c5:fe:01:c9:df:f5:8a:67:49:f5:e8:
b7:3f:1a:e5:2a:ba:09:54:e9:4f:3c:8c:93:07:13:d5:97:5c:
21:b4:2c:e3:51:24:47:93:56:33:c3:55:7b:ca:53:8e:56:18:
20:13:b9:4b:ca:75:e0:99:3b:fd:06:0e:a1:7f:f8:29:c5:8f:
87:6a:98:c1:88:96:ff:9d:01:b4:36:6b:d1:13:e4:bc:d1:be:
d6:72:e5:5f:93:ec:71:d7:7b:4e:28:75:c4:3f:09:ca:bb:b4:
21:d3:db:e6:02:71:de:86:21:1a:6b:cb:cc:bf:79:08:f7:5f:
b2:a0:72:81:2d:f0:9a:36:eb:c7:72:7f:4c:6f:ff:c6:0a:ff:
75:cf:d8:7d:8a:6f:6b:87:de:8e:54:b1:a2:e3:c0:12:2e:c4:
b8:be:06:d0:0a:8e:6e:8b:e1:6c:61:bf:ec:5b:7c:8b:b3:07:
1e:8d:04:44:4d:bb:fc:5f:a5:c3:18:30:18:3e:49:bc:c1:72:
52:de:8e:3e:99:c3:cc:b4:2e:a9:8a:d2:48:1f:00:d5:b4:c3:
f3:24:99:70:a5:15:0a:b1:53:57:6b:1e:66:2d:9d:7f:e5:68:
b0:73:8b:b7:d7:d2:95:43:e2:24:16:4c:c8:5b:ad:09:7d:50:
51:ce:34:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:22:29 2025 by rpki-client