Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File: emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier: 0jaqxgWkIYBVd5eMLH/RKZvvf0MXfUCC8rb+cHG0sG4=
Subject key identifier: 1F:88:41:1E:55:B6:29:F5:0F:6A:BA:2C:85:A8:04:88:55:55:5E:91
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer: /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial: 0302
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number: 02F9
Signing time: Sat 29 Mar 2025 01:56:43 +0000
Manifest this update: Sat 29 Mar 2025 01:56:42 +0000
Manifest next update: Sat 05 Apr 2025 01:56:42 +0000
Files and hashes: 1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: BAf/7h5m7TMDMk9HKrKXxmeDdfZeox/VpQvmKjUfdDc=)
2: 387AE648938B11EEA552D487C4F9AE02.roa (hash: n2JnUjdK1G3DKEtjobXUa5tJlDzoU7ugVziN4/cf1hI=)
3: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: Z/v2dPSlVHtaS2gXVPwHt6zhX6qyLYHvPRCOMkLkMrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0935
Validity
Not Before: Mar 29 01:56:42 2025 GMT
Not After : Apr 5 01:56:42 2025 GMT
Subject: CN=67e7535b-927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:d2:56:32:2e:27:e6:7e:6c:c0:1d:8a:07:
21:05:ce:b2:b1:d3:86:a1:63:f1:c2:97:61:85:cb:
55:75:d0:e5:1d:6f:7b:6b:34:be:bb:93:9c:a5:6a:
1d:d1:e7:a2:24:93:90:50:d3:d1:39:bc:2e:1e:0d:
01:46:06:50:28:ee:53:de:1d:31:5c:22:80:06:c5:
ce:a8:30:85:2c:99:ec:d4:b6:38:fa:15:06:7c:7e:
47:53:fe:9a:41:8f:85:8e:6a:73:8e:c3:31:4f:c2:
56:34:8e:6c:13:75:0b:45:19:c1:c6:3c:cb:f5:00:
ee:55:d9:96:2f:65:53:40:4e:9f:8e:8f:e1:dc:8b:
22:81:89:55:0e:f9:65:45:8b:3d:92:b8:e7:46:07:
6d:b5:8c:6e:c6:9a:f3:dd:8b:9d:0a:84:4c:c0:ed:
d8:b7:1d:ec:42:a1:71:6e:cd:37:51:d3:3c:f3:99:
47:c6:a6:0e:0f:8b:b0:8a:91:20:68:27:3b:dd:12:
0a:99:fc:c1:a6:b3:79:6d:7f:1c:f5:6b:e9:c1:6a:
a2:3d:9e:d5:84:cc:a2:36:8f:56:6d:2e:7e:3a:84:
51:4d:54:e4:40:10:63:df:ed:c0:07:a2:b2:ea:cb:
fc:15:00:f8:37:ad:95:9f:1c:e8:07:65:b2:69:8f:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:88:41:1E:55:B6:29:F5:0F:6A:BA:2C:85:A8:04:88:55:55:5E:91
X509v3 Authority Key Identifier:
keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:88:a1:90:9d:fc:94:0b:06:cd:c6:f1:bd:d4:cf:2f:b6:2c:
ab:ce:81:7b:46:b2:0b:8e:b4:54:32:0a:ec:79:8e:ae:58:ce:
23:cf:be:19:1f:2c:f6:00:bb:24:00:14:0e:a2:d4:44:a1:1a:
42:09:04:1c:21:bd:f0:4d:a5:1a:dc:61:c0:52:09:3d:25:a6:
6a:5f:27:20:75:1d:46:6e:99:0c:5d:38:ae:25:22:9c:bc:0f:
1c:2e:4d:3c:12:fd:c5:ef:3a:c0:64:e5:b7:e0:40:b7:06:9a:
61:ca:70:5a:8a:2c:13:a7:47:ad:a9:ab:47:86:51:8b:41:e9:
ac:10:07:17:8b:e3:73:c5:bc:f5:d3:a7:50:c4:6e:fa:aa:93:
ed:75:50:5d:01:df:72:25:d5:97:c4:24:30:63:29:be:5a:e5:
fc:75:61:70:9b:be:f5:39:36:4e:33:1c:d3:d4:cc:97:91:b2:
a2:44:eb:52:77:56:37:4f:e0:62:01:c8:7e:19:d0:1f:5c:5b:
a5:94:74:9d:91:3b:f8:ac:5b:0b:77:45:56:63:0c:27:f8:42:
86:3e:c3:4d:5c:78:af:15:59:24:bc:82:b6:04:80:4a:4e:83:
d2:96:9e:ae:a4:38:08:9c:24:70:b1:76:bc:dd:83:20:b1:72:
90:ed:5a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:16:57 2025 by rpki-client