Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json)
Hash identifier: /1zJrqnmNnjN8IkDk8rJRtP1fcIWJ3Ncv/Z/X9OmeU8=
Subject key identifier: 8A:5C:A3:54:9F:D3:A4:B2:37:F3:25:99:BE:2E:35:72:AB:7E:30:80
Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21
Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
Certificate serial: 0858
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
Manifest number: 0852
Signing time: Fri 28 Mar 2025 20:59:34 +0000
Manifest this update: Fri 28 Mar 2025 20:59:33 +0000
Manifest next update: Fri 04 Apr 2025 20:59:33 +0000
Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: zofc+zp7eQ1Hf3cnjG2OlDGoeyJUmFrPtFc2J0s02EY=)
2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: r8kplkUIga9YQn8b4xbaXWuaaJUEiwNgh+YYSbpeRUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC564
Validity
Not Before: Mar 28 20:59:33 2025 GMT
Not After : Apr 4 20:59:33 2025 GMT
Subject: CN=67e70db6-faf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:d7:7a:8c:bb:93:b1:3e:43:6b:ea:c2:16:
22:98:9d:b9:87:f7:da:67:bb:f8:c3:ba:d2:d0:61:
21:f1:89:df:5c:0b:40:88:1a:fc:f7:ee:5f:3b:fb:
57:e1:05:03:4e:7c:2a:f5:c5:eb:35:a8:05:ae:11:
c9:60:12:ee:74:39:6d:64:60:e3:88:13:24:2a:21:
ce:ff:d1:e8:4b:5c:97:3c:05:5f:8f:0d:ab:31:8a:
5c:9f:d3:05:be:da:78:ec:ed:e3:11:32:21:66:7d:
60:ef:6d:a3:f4:33:51:1b:78:e2:7b:de:cf:40:5f:
dd:81:5e:df:44:95:f0:46:0e:94:e3:f5:14:de:61:
1f:24:19:4d:09:3f:83:08:47:35:fa:29:40:f3:d8:
4b:97:99:57:21:18:34:75:e1:3b:c7:4e:5d:64:4b:
12:37:72:b5:66:aa:12:b5:c0:cc:55:97:55:55:81:
2b:2b:e8:99:0f:1f:d6:d4:6b:e1:49:d4:be:5c:6e:
b8:d2:6d:95:8a:e4:79:b8:c3:58:11:b9:d6:e7:e6:
8e:a1:7b:51:04:46:a5:4d:95:9f:c0:fc:ba:2a:3a:
fa:3c:42:5a:1e:c9:95:e9:b9:eb:8e:5f:53:d8:83:
5d:1a:4f:09:82:1b:b2:0f:27:be:58:f6:36:eb:a5:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5C:A3:54:9F:D3:A4:B2:37:F3:25:99:BE:2E:35:72:AB:7E:30:80
X509v3 Authority Key Identifier:
keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:92:72:49:01:c5:f0:0e:10:55:bc:7a:ce:47:6b:4c:07:90:
78:57:96:b0:36:a8:24:2c:b0:47:bc:f1:df:04:29:1e:cd:7f:
f4:22:16:a3:fd:55:1f:07:da:13:6e:64:bf:c3:a0:08:31:8f:
fd:95:be:6a:0c:52:71:3c:a6:03:d8:98:48:a9:d2:52:de:98:
ed:af:1a:0e:b9:ae:8e:39:10:b5:d0:a5:79:13:73:bf:7e:dd:
17:06:d8:68:c2:3c:77:c5:df:6d:d0:fa:fc:30:d8:70:6c:16:
83:60:e1:2f:8d:8a:4b:39:8d:99:7c:dc:2b:77:c2:19:7d:c9:
fb:3d:30:ec:46:7a:56:1b:47:23:c9:4e:6c:a2:55:10:71:6b:
d2:a8:6b:72:3f:dd:07:2f:9e:21:8c:75:59:7b:73:ef:a1:3b:
dc:78:b3:f9:ed:49:7b:b0:a2:a1:2b:f4:55:a0:46:97:af:73:
ff:95:11:b5:4f:21:c0:94:9d:5e:2d:a2:54:b7:ca:54:70:8a:
6b:90:08:75:8f:f1:dc:b1:b7:32:7e:b5:e0:3e:96:58:8f:6f:
65:3f:94:b5:81:d3:d4:92:92:1c:9c:62:0d:46:4b:22:9d:13:
76:f2:75:f7:44:27:36:c6:eb:13:50:0f:b3:5e:5f:6d:77:91:
09:7d:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:40:52 2025 by rpki-client