Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD40B/741A1E2C855B11EFB0576D40C4F9AE02/aLMj2oThIFRmzrWv19YHcmdbBTE.mft
File: aLMj2oThIFRmzrWv19YHcmdbBTE.mft (raw, json)
Hash identifier: 8e4+A2vmG+vtSP+9BMW/FzhcP3qm4aQZKQDsX9rzCqg=
Subject key identifier: AC:65:C4:D9:01:9B:45:35:8C:85:01:E4:4F:1B:42:3B:42:30:53:1C
Authority key identifier: 68:B3:23:DA:84:E1:20:54:66:CE:B5:AF:D7:D6:07:72:67:5B:05:31
Certificate issuer: /CN=A91CD40B/serialNumber=68B323DA84E1205466CEB5AFD7D60772675B0531
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLMj2oThIFRmzrWv19YHcmdbBTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD40B/741A1E2C855B11EFB0576D40C4F9AE02/aLMj2oThIFRmzrWv19YHcmdbBTE.mft
Manifest number: 5A
Signing time: Sat 29 Mar 2025 06:26:10 +0000
Manifest this update: Sat 29 Mar 2025 06:26:09 +0000
Manifest next update: Sat 05 Apr 2025 06:26:09 +0000
Files and hashes: 1: aLMj2oThIFRmzrWv19YHcmdbBTE.crl (hash: H2WzfPZLCkG74EJSUMWAroydNz1ke8XSsxsTA0kxlD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD40B
Validity
Not Before: Mar 29 06:26:09 2025 GMT
Not After : Apr 5 06:26:09 2025 GMT
Subject: CN=67e79282-2c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bd:a4:e7:f1:cd:69:1f:98:6b:57:6c:0d:03:
50:3d:98:3d:07:5b:44:b5:cb:11:07:49:cf:8c:d2:
af:39:a3:9d:77:7b:d1:8b:d5:48:12:80:44:de:da:
eb:ea:64:7d:55:9b:ac:41:72:75:a6:ee:57:b4:30:
f4:9f:cc:12:33:97:15:af:7c:d4:10:01:2c:11:34:
e5:35:06:f3:1c:77:e3:c2:64:f4:f1:3b:26:6a:0f:
d5:72:bf:06:e3:c9:57:cc:3d:57:a2:21:ac:f6:59:
fe:86:62:d8:1d:20:93:18:f0:56:b2:f6:8b:f2:17:
0e:7e:d2:11:00:8a:f5:62:7e:5b:0c:c6:ea:0d:fb:
4e:5e:e8:5d:06:68:27:6e:57:27:d8:16:69:01:f2:
60:08:ee:5f:33:53:82:20:94:0e:66:0b:77:9d:a4:
3d:65:22:34:7b:92:5e:b4:b5:c6:e7:79:3c:9c:f5:
b3:a6:2d:08:d6:ac:44:a7:20:7e:f0:58:a1:2b:2c:
e5:55:0f:4b:8e:4d:75:c8:d5:c9:ee:cd:30:a7:39:
e2:7f:2e:9b:6b:69:66:25:86:82:51:ba:1c:4d:b7:
a8:16:d3:f6:6d:4c:ff:dc:b6:14:7b:d1:07:49:67:
f7:e2:26:c3:bb:5f:ea:c5:73:51:89:28:2b:91:1e:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:C4:D9:01:9B:45:35:8C:85:01:E4:4F:1B:42:3B:42:30:53:1C
X509v3 Authority Key Identifier:
keyid:68:B3:23:DA:84:E1:20:54:66:CE:B5:AF:D7:D6:07:72:67:5B:05:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD40B/741A1E2C855B11EFB0576D40C4F9AE02/aLMj2oThIFRmzrWv19YHcmdbBTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLMj2oThIFRmzrWv19YHcmdbBTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD40B/741A1E2C855B11EFB0576D40C4F9AE02/aLMj2oThIFRmzrWv19YHcmdbBTE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5f:3e:14:75:f9:c6:3c:c1:dd:aa:49:4b:69:ce:9e:d1:49:
8a:ad:d1:b2:35:b6:f4:5d:16:1f:5c:bc:11:b5:cb:81:ba:26:
0b:91:34:5b:c5:f6:9d:30:8a:e2:de:75:58:08:7c:2f:c4:d5:
bc:4e:bb:18:c1:64:c7:78:07:75:43:85:d7:f1:2e:12:48:7a:
e9:ea:b8:9a:46:ad:41:bb:f2:f7:02:b3:89:e0:62:46:58:cd:
c1:d3:9e:4a:68:52:47:42:c5:c0:89:04:2e:cd:07:7d:c0:ed:
d7:04:50:f9:b4:d4:ea:09:1c:bb:6e:20:a6:f3:4e:4b:c4:67:
3d:43:d5:73:5d:70:a5:28:2b:b7:70:b7:91:49:ce:05:c1:6e:
fb:82:ca:85:67:5e:b7:68:73:94:36:98:34:90:c6:5f:4d:9d:
32:4c:dd:9c:ab:15:14:ad:91:34:85:5c:fd:e8:3e:32:bc:98:
6d:ce:3b:0e:bb:dc:f8:5d:17:d2:7e:d4:70:e8:5b:31:1a:f0:
57:f6:2a:b7:84:24:fe:69:e3:d4:0c:47:86:9f:8a:22:1c:db:
81:83:83:8f:88:96:f9:fc:70:94:01:64:24:cd:ed:f6:e3:60:
f9:a9:9b:e7:12:a1:6a:df:1f:fa:5c:e2:f5:b5:2e:7d:45:42:
0a:c8:97:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:25:16 2025 by rpki-client