Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json)
Hash identifier: N5sAEnTWCunXvOx3U7gUDOf7FBFJdyEa7yVgt9ti+kc=
Subject key identifier: F5:45:B0:EB:11:FE:34:11:D8:78:4B:80:D5:13:45:74:CF:45:40:E7
Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
Manifest number: 018D
Signing time: Sat 29 Mar 2025 03:28:49 +0000
Manifest this update: Sat 29 Mar 2025 03:28:49 +0000
Manifest next update: Sat 05 Apr 2025 03:28:49 +0000
Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: zlGBKSA921b72mOjzGUtXY2vBOZOpSIPJga18pEB0II=)
2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: 9PFfWoEAx34K/EBsgtnvK29zGTSC+viKRrz9B+FgvaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE28E
Validity
Not Before: Mar 29 03:28:49 2025 GMT
Not After : Apr 5 03:28:49 2025 GMT
Subject: CN=67e768f1-c92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:3d:a7:af:11:5a:aa:19:50:e8:6f:6a:65:
01:6e:fc:fb:46:74:32:7b:22:cb:d2:84:e2:b5:cd:
e6:b8:20:58:d0:1c:8d:0a:50:e1:47:42:e9:2b:4f:
20:0b:4a:d0:10:e8:9e:30:a7:68:bb:6b:7d:4e:70:
12:da:97:ea:49:c4:49:e9:4a:1f:2d:2a:f9:65:c2:
c4:44:7f:af:57:15:6a:bd:c9:00:b6:71:e4:ab:44:
d3:7f:7d:dd:cf:c7:41:78:98:99:af:29:83:d3:80:
fa:4f:44:e5:01:50:ab:5f:c7:82:e2:d6:73:9b:e6:
46:a0:63:76:f9:f2:31:a5:0f:c8:31:03:18:3c:92:
e2:e1:48:70:12:69:fa:a2:c9:a9:47:ba:f6:dd:60:
b0:4c:a2:55:36:00:33:0e:42:74:d3:d0:09:cf:92:
ca:c2:36:14:ed:5b:f9:04:d8:2a:72:8f:e2:25:aa:
b4:e8:3c:51:a3:ed:94:0c:2b:3e:2f:2b:2c:28:31:
96:d6:83:40:ed:78:f7:2a:66:57:5c:3f:1b:fa:34:
11:37:f9:be:31:36:f4:fa:00:80:75:bb:cc:ab:56:
14:20:0c:ef:40:fc:2d:2a:1f:2c:6c:68:8d:89:ac:
63:da:0d:94:3c:45:2e:4a:68:ea:09:34:7b:5b:48:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:45:B0:EB:11:FE:34:11:D8:78:4B:80:D5:13:45:74:CF:45:40:E7
X509v3 Authority Key Identifier:
keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c8:05:54:c7:a1:92:54:95:e2:2e:b1:02:f3:19:b2:39:97:
1d:a9:0b:bc:0b:76:69:1b:c4:9e:0e:e3:e0:3d:96:d1:15:ca:
4b:e5:69:fe:ef:c6:92:42:57:58:08:f6:4a:56:0a:63:a5:f7:
c5:6e:28:d8:3f:94:e7:7b:da:79:a7:7c:6b:fd:2d:58:88:e1:
d7:33:bc:31:92:b0:56:92:a9:c5:6d:11:0a:7b:b5:11:e1:d7:
6c:4a:03:65:8d:b7:81:fd:6b:a6:29:47:80:5e:9a:10:35:8b:
de:c9:2c:9d:41:93:cc:33:ef:42:9b:14:f8:f4:37:2f:9b:05:
37:0b:c7:8b:e7:a8:eb:43:49:8f:74:7f:62:8c:48:a1:c9:8f:
60:15:1b:0e:0d:55:7e:f7:59:62:d0:d6:fb:87:68:89:74:17:
fa:1b:36:82:34:ec:c2:49:60:e0:38:47:27:e7:38:ac:88:83:
dd:2a:d3:df:79:f1:ce:21:4c:4a:64:8f:67:4a:6f:7f:ad:76:
5e:5f:40:5b:bc:db:2d:e4:fa:54:37:32:6c:1b:79:25:99:aa:
bc:2e:ba:df:e1:8e:ea:7b:bb:1a:67:28:0b:b4:a5:61:a2:fa:
48:c1:57:39:e9:5b:2b:73:e3:02:54:e0:6a:61:f3:70:2f:9c:
69:81:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:50:54 2025 by rpki-client