Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
File: CJy1orM7eG11SgfWgKnElBQmGeE.mft (raw, json)
Hash identifier: sufwIUGIh3YZpyJP2ZdsdOpLv4gAT8+InGDFxX9nZT0=
Subject key identifier: AE:DD:2D:46:1F:66:B6:39:20:DC:5E:64:FD:BA:A9:17:24:58:B9:48
Authority key identifier: 08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
Certificate issuer: /CN=A91D0C18/serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
Manifest number: 6F
Signing time: Sat 29 Mar 2025 06:11:05 +0000
Manifest this update: Sat 29 Mar 2025 06:11:05 +0000
Manifest next update: Sat 05 Apr 2025 06:11:05 +0000
Files and hashes: 1: CJy1orM7eG11SgfWgKnElBQmGeE.crl (hash: bhUMYMwKDdnAAjPUZ1Au08vce1uEHLnTTnyNQe7YMOs=)
2: EEE0092A646611EFA25D167EC4F9AE02.roa (hash: PB6LRHoIMyYv1uIUIe4A3HeqPVxI7OtzvXNUbqHxj3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C18
Validity
Not Before: Mar 29 06:11:05 2025 GMT
Not After : Apr 5 06:11:05 2025 GMT
Subject: CN=67e78ef9-dc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:7a:eb:14:d2:fc:7e:bf:9e:0d:8b:b2:a4:
0b:9a:a1:2d:75:98:a7:e6:81:14:94:98:65:84:41:
e8:50:08:b9:3f:24:ea:a4:12:d2:80:87:9f:9f:8b:
43:49:2f:89:04:14:45:95:3f:3a:68:2f:bf:2b:44:
7e:10:4f:59:71:6c:4f:3f:a4:0d:da:bf:ed:dc:74:
80:77:75:9e:d3:1a:a5:8d:1b:95:e7:30:a4:89:e3:
59:c3:5b:4a:6c:e7:11:66:32:0f:07:50:ed:1b:68:
fd:f5:d8:3c:e0:ea:6e:29:b4:76:42:5b:8c:b0:5f:
6e:de:54:43:7e:4e:2c:14:f9:e3:70:ae:e8:9f:ca:
ab:81:e9:10:30:07:ad:16:60:87:8a:10:64:a7:4f:
b2:17:cb:b6:b5:b2:f6:74:ed:ba:f4:a4:9d:d0:0e:
c4:43:8f:3e:9b:e2:d8:41:b3:00:f0:5b:d6:f5:fd:
04:fc:56:4e:64:3f:b4:19:0a:79:e5:87:e5:d0:7c:
38:bb:1b:d4:0c:2d:ad:7b:83:94:e7:34:45:bb:54:
75:05:7c:08:52:07:f7:32:92:36:f6:ce:df:45:2a:
e0:b9:8b:d9:19:96:f7:82:0a:1d:78:a2:b5:85:fb:
12:15:f9:98:d6:4d:8e:cf:e5:7c:b7:7b:a6:7b:7f:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DD:2D:46:1F:66:B6:39:20:DC:5E:64:FD:BA:A9:17:24:58:B9:48
X509v3 Authority Key Identifier:
keyid:08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:57:05:7c:3a:96:46:80:bc:c4:50:34:da:58:5a:cb:32:90:
75:b1:14:ae:30:3b:ed:bf:a1:f4:54:75:92:18:e9:da:65:8d:
f7:a1:3f:08:f5:73:c0:69:fc:48:bd:77:58:d2:9d:84:5d:f3:
c5:8d:5e:39:9c:41:12:77:13:b0:32:a8:c6:67:ed:65:91:7d:
1f:f0:a3:0a:d9:d9:b1:62:f3:28:64:e9:b1:1f:b3:1a:91:1f:
a3:0c:ed:b6:53:e0:79:c3:fd:87:8d:a1:92:79:a7:4a:f8:e3:
88:aa:3a:a0:98:69:86:b8:18:fe:3a:08:5b:6d:a6:94:1e:d8:
5d:16:69:39:7f:48:ca:bd:aa:1b:c1:31:01:c0:55:fd:d4:55:
7f:9d:80:81:d0:4f:6d:c0:b5:6a:62:5f:a1:41:70:96:53:30:
5c:30:82:a9:92:da:44:4b:31:a1:e6:f5:3e:84:5b:a4:a1:32:
2e:f7:49:76:ee:7c:df:a6:e8:34:88:37:dc:2d:86:89:36:e6:
42:60:3a:6e:ea:97:5b:2b:9a:6a:07:c5:e6:45:a7:a0:68:92:
7f:82:31:5d:f7:60:96:a1:c0:dd:1e:ee:1c:3a:ed:34:28:f5:
15:31:b1:bc:b1:be:98:31:91:a0:15:24:54:29:42:40:b2:5a:
0f:fd:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:26:33 2025 by rpki-client