Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json)
Hash identifier: FJFN+wrOz4laCF6tTilMrPB5c8F3QTRt4qErTCATeC4=
Subject key identifier: 61:25:3D:1C:A4:57:7D:17:2E:F5:B1:50:0D:57:4B:F5:D3:F6:71:B5
Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB
Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB
Certificate serial: 1066
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
Manifest number: 1056
Signing time: Fri 28 Mar 2025 17:29:41 +0000
Manifest this update: Fri 28 Mar 2025 17:29:40 +0000
Manifest next update: Fri 04 Apr 2025 17:29:40 +0000
Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: 2iPJPgoifnJuIhIRJxIAiMjY6DVCRGm7YWo+p/zkrY8=)
2: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: pBAdtg5q7fupj3C2NkgZi3lj80AO2X+XBbLJrZHCCV0=)
3: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: wC4P834uMCwewPqC4AzB3L42gf9vs93AMppygyyTSdg=)
4: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: Zx75smDZoCLc3BQeMy0zIEYFPQvHS5X5/v68oiFszVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4198 (0x1066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF285
Validity
Not Before: Mar 28 17:29:40 2025 GMT
Not After : Apr 4 17:29:40 2025 GMT
Subject: CN=67e6dc85-92c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:da:6a:43:1b:67:05:5e:a7:3a:6a:07:aa:1c:
f6:ae:bb:70:b0:2f:91:b4:00:12:62:f6:6f:29:90:
53:c6:42:20:3d:c6:ab:01:67:cd:8f:9b:70:db:3e:
e7:6a:96:24:be:84:40:c3:e7:19:db:71:a4:6b:9d:
29:c9:53:62:3c:2d:e3:86:5e:74:3d:8c:5f:58:34:
6e:9f:7b:e5:aa:85:86:b4:f9:85:a6:40:aa:81:79:
47:f8:c5:b4:42:ba:29:36:19:a4:fb:20:00:b9:d9:
51:ef:04:f1:42:00:39:ea:dc:76:12:ea:11:2f:ac:
59:a7:22:49:aa:4d:ad:a4:8f:a7:59:3e:43:2a:70:
c9:eb:f4:91:32:7b:0c:7e:cf:82:3f:16:1f:46:af:
db:42:ff:40:68:18:a9:16:fc:f9:d5:90:06:e6:d7:
37:1f:a4:36:3a:30:f1:76:ac:14:2c:ef:9d:ce:08:
6e:43:63:3f:b1:59:b4:9b:6e:c9:5d:05:b6:d7:70:
72:84:4c:53:ef:42:65:1b:fe:c0:33:6d:eb:27:4a:
8a:54:05:ae:18:2b:c3:e6:c0:a2:ce:9e:84:f2:62:
50:65:1f:17:9d:8c:4a:bf:6f:a6:b1:e2:10:4d:6a:
73:bb:f4:55:91:22:8c:43:9a:7f:91:60:65:1d:49:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:25:3D:1C:A4:57:7D:17:2E:F5:B1:50:0D:57:4B:F5:D3:F6:71:B5
X509v3 Authority Key Identifier:
keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:44:5a:b3:9f:1d:93:04:e8:3f:86:e8:23:ea:e6:b5:5e:4a:
5e:a8:c9:f8:d9:94:54:d4:bd:49:cf:95:44:d1:e5:81:fd:bc:
fd:3d:11:2f:a2:10:12:7d:67:5a:53:41:e6:dd:2b:7a:32:26:
ba:95:3c:24:05:4a:15:de:2b:a7:a2:83:28:68:11:85:64:f8:
70:78:9e:38:4b:8a:bb:8f:c3:63:25:c9:8a:f2:f0:7c:34:5f:
a3:6b:05:ca:06:3d:4d:57:4b:3d:c8:59:da:de:71:44:cf:10:
44:fc:e7:be:eb:89:3d:09:fc:dc:9e:0e:1b:9a:81:1a:03:f4:
a6:c8:ee:5e:cb:34:42:85:b0:af:19:53:88:50:a5:ac:96:83:
d8:74:b2:f2:f8:b0:b4:b8:1e:c4:6e:b8:8a:46:88:5c:74:84:
cb:59:b1:bf:2f:3e:a6:d4:b4:b5:5e:32:ad:b5:7c:ed:af:74:
3a:3e:b7:0e:8a:ac:df:a2:49:36:ed:42:d2:b7:6f:50:31:3a:
ae:c8:e2:bb:d1:b7:3a:1d:4f:ed:1d:ad:36:66:27:0a:5c:c0:
30:47:47:74:e5:f8:84:24:1e:f4:0f:03:8a:d5:48:ca:25:64:
42:f0:48:27:02:7c:4c:51:f1:53:72:77:87:14:9a:b8:46:2e:
8d:ae:fd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:36:13 2025 by rpki-client