Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier: TTxL6x/vN0iY24kRw2Hq3GJl1qtIKyJLtB99kn0eSpc=
Subject key identifier: 2E:99:CC:42:41:70:54:7D:55:6C:83:CF:B5:78:35:33:97:8C:72:5F
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial: 1E19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number: 1DFA
Signing time: Fri 28 Mar 2025 16:12:28 +0000
Manifest this update: Fri 28 Mar 2025 16:12:28 +0000
Manifest next update: Fri 04 Apr 2025 16:12:28 +0000
Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: DCv1WTaEFxF9q4jA/OVn54cCTjrplkNucULI+YAEY2c=)
2: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 3kkH5EW9k5TTFg+XHHqI2feA7kJawsJC4SpKye1S2b4=)
3: BD314CEA619711EE81211277C4F9AE02.roa (hash: pyylUNX9LlmDbhjQ7Mn/l8NCaA1ACQcAW5FWWwcceq0=)
4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: 01F6A8KAEiWwfIj9UacQjLscVPBcvyK/XHWq85nJWZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7705 (0x1e19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCB6
Validity
Not Before: Mar 28 16:12:28 2025 GMT
Not After : Apr 4 16:12:28 2025 GMT
Subject: CN=67e6ca6c-9f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:b1:fc:53:4e:e9:2e:00:89:8d:ee:0b:de:
bf:9d:06:98:a5:d7:a8:e2:36:eb:6c:5d:70:59:0c:
5a:5e:69:aa:8f:01:8f:da:cc:40:7e:11:61:a4:6f:
74:09:28:1e:fd:e7:22:ee:09:5d:f7:42:84:03:c5:
0b:7a:bf:4a:66:e4:a0:c0:44:c9:bb:cc:26:a5:fd:
18:7e:de:5e:c0:75:61:c1:35:9d:ad:d8:82:41:12:
6b:0c:a8:3c:fd:b3:a0:fe:50:e3:a5:6b:e8:23:cc:
28:d3:d9:36:c6:5e:14:5a:c4:c5:bd:0d:b6:ef:2f:
fc:31:b4:b9:cc:0b:50:d1:3b:f4:7f:22:75:f3:11:
e9:bf:c8:f3:ac:83:af:c7:eb:8d:b9:64:47:d8:a0:
67:ce:14:78:c9:26:b8:41:f4:32:82:4e:f5:46:53:
58:40:7c:39:49:5c:94:e4:7c:2b:18:89:9f:20:89:
ec:42:47:fd:3b:29:08:a2:16:ff:a8:c2:72:7a:da:
03:39:b7:0f:79:83:7a:7d:07:7c:c8:13:a5:3f:b0:
c7:37:b4:ae:55:d7:d9:94:47:1f:75:8f:51:ff:a2:
16:55:ae:10:1d:f6:80:7f:c1:2d:c1:d6:ab:cf:5e:
ba:e0:89:9e:51:99:31:23:c9:81:20:f8:6b:1f:7f:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:99:CC:42:41:70:54:7D:55:6C:83:CF:B5:78:35:33:97:8C:72:5F
X509v3 Authority Key Identifier:
keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:01:62:3c:4e:bb:f0:f9:60:97:c0:f3:3b:f8:c2:ec:ec:31:
7e:32:d0:9a:c5:9a:d4:3d:18:18:db:57:52:40:91:58:6b:99:
43:0b:f7:64:96:c8:a3:cc:cd:e3:38:f9:20:36:33:96:31:50:
cc:bb:9a:a1:40:52:91:aa:55:fb:aa:3a:80:83:9e:9a:5b:59:
da:e1:9c:38:6b:da:e8:6e:f0:48:c8:10:8b:dd:39:17:1d:3a:
bb:57:0d:fb:6b:72:eb:52:20:d9:d1:ea:3a:72:09:cc:ce:21:
14:ca:bd:77:3b:b5:53:13:25:28:ff:79:30:a5:ad:77:c8:f0:
8f:22:f1:89:71:6a:b8:b6:ca:e8:5f:cc:6b:2a:6f:a3:73:83:
95:91:d2:a4:18:24:12:ad:af:3f:2a:02:1e:26:b0:5b:37:0d:
e3:c4:f2:6a:16:37:d6:a4:e3:bf:bb:ec:b5:15:83:47:d8:d0:
19:8b:ab:14:64:af:48:ae:06:ed:00:98:cf:90:8d:74:cb:93:
46:a0:26:8a:d0:c3:61:b8:25:a6:6a:f8:8b:06:54:d0:07:3d:
bc:70:ce:df:5f:86:2c:42:ff:34:e6:05:91:d4:bd:41:16:42:
97:de:b7:0f:45:c2:ad:b7:68:cc:4b:73:e1:54:7e:55:a9:63:
00:73:ad:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:42 2025 by rpki-client