Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json)
Hash identifier: FEs9AqO7pvVjyivOiWAMWHYLXbbfdGq2dfXNW+OmdWQ=
Subject key identifier: 5C:95:28:23:B7:C9:48:5F:C3:F1:C4:CC:47:1F:3A:74:F4:F1:CC:40
Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Certificate serial: 08A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
Manifest number: 0896
Signing time: Fri 28 Mar 2025 20:52:13 +0000
Manifest this update: Fri 28 Mar 2025 20:52:13 +0000
Manifest next update: Fri 04 Apr 2025 20:52:13 +0000
Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: /SgDegG4tceoXjwa1aDz0mXrGzm47og6UQjkuCf5ER4=)
2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: 23ndFVCcLg+/bCNKhL706A7YBuPjvG2i31lg9YjdTYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215 (0x8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA
Validity
Not Before: Mar 28 20:52:13 2025 GMT
Not After : Apr 4 20:52:13 2025 GMT
Subject: CN=67e70bfd-d4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:9b:06:4b:40:11:b1:7c:e1:70:3c:41:ba:
c0:87:27:b8:84:6c:08:2e:bd:b1:9a:6d:27:20:de:
3b:b4:ba:ef:65:9d:19:f8:1b:e6:07:61:f2:c4:19:
77:e9:1a:88:a4:f6:1b:fb:16:65:71:0f:c2:99:54:
7f:79:2e:f1:f6:a9:fe:c2:21:7e:b0:17:8c:b6:fa:
7f:47:e1:8c:80:e4:29:6e:ce:02:23:6b:e8:7d:50:
39:12:a3:41:cd:7a:b3:80:5f:c4:04:5b:88:31:e9:
59:92:0a:77:93:8f:dd:2f:3b:4a:42:a1:db:37:73:
8e:1f:ab:90:37:5f:d3:94:79:4d:6e:38:0e:f7:d9:
40:d4:78:98:56:6a:ad:5c:fb:6d:47:d3:2a:e5:a2:
49:0d:92:3c:b6:78:8f:b4:fa:14:31:c7:8a:65:63:
e2:af:dc:c2:b5:d3:51:89:36:26:2a:30:64:9c:a4:
49:c5:b5:fa:f5:80:ad:dc:3f:27:ed:eb:9c:6e:09:
0f:4e:b5:1a:d2:72:dc:b9:d5:3d:1f:67:6a:b3:ce:
88:b5:57:32:ef:ec:c8:67:e1:ec:d3:8d:9d:53:24:
be:0d:b4:66:ff:0a:9c:1e:68:4d:1e:da:53:a4:cc:
d7:dd:6f:f9:a4:51:95:e2:41:21:11:84:ee:54:49:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:95:28:23:B7:C9:48:5F:C3:F1:C4:CC:47:1F:3A:74:F4:F1:CC:40
X509v3 Authority Key Identifier:
keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:b9:b0:16:a6:aa:bd:e6:85:e7:80:28:a1:1a:89:4a:c6:52:
80:2c:c1:5c:4e:80:d9:88:0a:33:76:0c:ba:b1:79:1f:a5:d4:
4c:14:1e:aa:86:12:01:6a:19:8a:2d:06:45:40:eb:09:d0:47:
30:80:b5:1c:cd:9c:5f:2b:99:9d:83:53:75:40:1c:17:20:cc:
ed:22:cc:a9:cb:9d:0b:c6:27:56:91:c8:6b:c2:f0:d3:b2:d2:
f4:6b:6e:a2:7c:32:8c:f2:c6:80:24:88:18:7f:3e:8f:88:c3:
e8:b8:cd:91:2b:56:6b:2f:09:39:c6:c5:a4:9e:d8:0b:a1:b8:
08:0e:af:94:15:11:7d:81:17:5a:57:c9:12:c1:f1:19:15:bc:
9d:c3:73:68:78:37:26:74:eb:49:44:06:de:6d:19:d8:b4:c6:
5c:99:66:f6:8a:a4:ef:ce:e3:08:7c:07:b5:fd:97:d3:eb:71:
e5:37:a0:11:00:02:78:9d:6d:7e:c6:7b:45:bc:c8:2f:80:54:
0c:f7:0f:c5:01:ea:9e:08:39:72:e5:dd:7d:d8:ed:55:3b:df:
c4:18:90:c0:ea:c9:03:9c:84:02:d5:0a:34:8b:c9:8f:80:b2:
59:23:ad:60:1d:ed:5a:0e:eb:b7:d2:5d:82:c8:2d:55:26:7a:
36:79:c7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:58 2025 by rpki-client