Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json)
Hash identifier: 58PpsPGO2rrIsw13rCrVGiHM3JMXerukVoVqCpkIrOg=
Subject key identifier: FB:E8:1D:7B:2F:EB:36:28:A7:3B:36:98:DE:79:49:AF:8E:B2:BF:1C
Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Certificate serial: 0B8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
Manifest number: 0B80
Signing time: Fri 28 Mar 2025 19:12:41 +0000
Manifest this update: Fri 28 Mar 2025 19:12:41 +0000
Manifest next update: Fri 04 Apr 2025 19:12:41 +0000
Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: YOfV2Hl7w8+RUbsQxjDFQ7fl6WDYXuHaCOeugwsiHM4=)
2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: RnlpXPDYIPfGNZjOgLnab/vPRagmWGYMa1TJEw32Q5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2955 (0xb8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6861
Validity
Not Before: Mar 28 19:12:41 2025 GMT
Not After : Apr 4 19:12:41 2025 GMT
Subject: CN=67e6f4a9-f504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:82:84:15:c9:44:31:dd:bc:4b:a0:c5:a0:
9a:df:8a:af:bd:47:32:42:9d:ec:00:75:dd:d1:d4:
91:54:94:db:a3:73:38:6f:4f:2e:fb:1a:04:dc:a2:
f9:d6:22:22:fd:d0:da:7b:d5:ec:99:ac:37:59:0a:
9d:5c:d7:94:7b:bf:d4:78:d9:a9:a6:f5:16:eb:f6:
46:af:08:82:89:03:ab:46:40:73:a6:58:89:07:94:
c3:08:62:a8:39:eb:dc:11:7b:8a:ba:9a:22:65:35:
2b:a1:04:29:a5:ca:98:1e:f6:2a:67:84:79:36:18:
02:13:eb:03:4e:02:8a:1b:a8:63:4e:d4:0b:16:1a:
ca:73:37:9e:e6:35:7c:85:1c:88:ca:b5:dd:ac:cc:
32:40:88:a3:1c:bd:f7:2e:5d:3c:b5:5b:f9:9b:a9:
d1:cb:49:80:cd:c7:12:a1:9c:09:54:e2:07:85:49:
9d:65:63:c3:9a:1d:c5:63:d0:e7:e2:11:de:41:30:
66:33:39:5d:47:bd:4d:79:32:9f:82:3a:50:e9:76:
60:f0:e9:af:cb:cc:b8:f0:92:3a:a8:fa:ad:2b:af:
8b:be:3c:d3:75:31:f1:d1:5d:0b:fc:f4:b1:61:0a:
e3:75:43:29:79:6c:25:80:ab:77:52:2a:40:26:05:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:1D:7B:2F:EB:36:28:A7:3B:36:98:DE:79:49:AF:8E:B2:BF:1C
X509v3 Authority Key Identifier:
keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:d5:3b:ab:ab:a7:ed:61:30:27:44:98:9c:56:79:77:2f:0b:
92:eb:d2:16:39:bf:6c:77:32:8f:ae:e3:52:fc:2e:75:20:89:
f5:ed:12:94:e6:c4:b5:77:09:56:ef:9d:48:bd:be:c0:ed:f8:
3b:1d:6b:9b:e2:19:80:aa:53:10:95:d3:f5:cd:8e:7f:99:76:
a7:75:06:01:eb:80:97:3c:04:dc:06:27:5a:95:98:00:29:98:
ce:d1:49:bb:8f:51:d4:d7:65:6f:4c:4c:d6:fd:f1:89:bb:1b:
4a:74:0b:ae:df:8b:6f:db:ca:f0:2f:33:8e:32:68:4f:64:0b:
75:5a:52:9a:7b:f1:60:dc:50:29:63:9f:93:2e:d3:31:f2:eb:
bb:bd:ee:ac:28:a4:5d:85:9f:e3:0b:a5:bc:8c:a1:fb:7e:aa:
34:37:cc:33:ac:32:bc:c4:95:e3:d3:ce:78:83:03:cc:77:a7:
ea:bd:d3:99:99:20:0d:44:41:67:d5:58:7e:0a:07:c9:58:32:
89:92:2f:5d:5f:9a:8f:e3:bd:52:9c:12:55:12:e2:f9:54:70:
76:e8:d9:2a:ee:9e:12:f3:33:ab:88:78:15:74:38:16:9b:00:
3e:e3:07:e2:4d:c5:f5:a0:87:26:de:48:3a:56:9b:a1:0f:08:
99:4f:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:51 2025 by rpki-client