Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json)
Hash identifier: g091/1pRR4Y3482rnVB5gZFwT79wfe8g8vnevunw7Bo=
Subject key identifier: 29:80:D6:2F:72:53:FA:A6:1A:B6:4A:36:34:9D:49:4A:C5:72:2A:64
Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
Manifest number: BD
Signing time: Sat 29 Mar 2025 05:17:20 +0000
Manifest this update: Sat 29 Mar 2025 05:17:19 +0000
Manifest next update: Sat 05 Apr 2025 05:17:19 +0000
Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: pr8SxlHmWc2XMiMse3abxQCslQ0SMLFvhPqVgAEEQfM=)
2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: owuYl2f9BSGVA0/70enqvT/0aH6Gh7FL60SNuEqExK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4A3A
Validity
Not Before: Mar 29 05:17:19 2025 GMT
Not After : Apr 5 05:17:19 2025 GMT
Subject: CN=67e78260-735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d3:bc:1b:07:d9:d4:5c:0a:d2:65:be:6a:ed:
93:39:b6:5f:68:0a:0a:89:0b:29:62:b4:0b:cc:d9:
49:5d:8e:50:07:75:31:93:35:37:12:c1:16:55:a5:
bb:8d:6c:3c:7c:d0:06:b2:fb:24:78:72:2b:51:11:
c3:a3:a5:59:a5:84:85:da:70:6e:f1:5f:f8:fa:37:
06:0c:db:4b:2f:ca:a9:66:ef:d5:42:24:09:bd:df:
85:02:6c:1e:97:a5:4c:b0:a3:3b:f9:e8:b0:6f:ec:
81:41:3e:4c:c6:23:1e:4f:fd:37:ab:f8:eb:ee:f0:
61:f4:65:5e:48:0a:40:51:bf:4c:1f:d3:ec:c8:6c:
7c:27:55:a6:ee:99:39:41:7b:31:1e:59:0b:3d:f2:
a2:71:db:47:f2:a7:63:2d:7d:aa:ce:06:6a:e7:a3:
ae:2e:cd:a5:6a:be:58:39:e5:ae:03:ad:e6:76:52:
28:84:01:b7:7a:9f:24:71:88:6a:64:1d:af:dc:ae:
a3:f8:aa:3b:b2:32:f9:b9:d1:f4:cd:17:a6:8c:f7:
e7:16:b0:c2:e4:a5:fe:0d:fa:14:85:1e:2a:c9:26:
0a:a8:0b:e3:c9:16:8c:b8:c1:f7:85:63:a2:e9:6d:
37:9c:ba:a6:ef:a8:7b:21:3c:7e:e2:60:c2:33:7c:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:D6:2F:72:53:FA:A6:1A:B6:4A:36:34:9D:49:4A:C5:72:2A:64
X509v3 Authority Key Identifier:
keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d7:6d:0e:b1:73:5d:a2:06:92:1b:fc:61:12:76:03:b6:0f:
8b:39:a3:80:5b:6c:67:fb:71:44:62:a1:ca:1c:6c:09:77:ce:
eb:43:c2:4e:44:32:99:55:9e:c7:bc:80:79:cd:51:ef:d4:ac:
ad:e6:06:73:2a:19:50:74:5b:33:59:c9:44:40:ad:c4:5b:71:
04:fb:64:05:0b:2b:32:82:40:61:1f:f2:87:27:b2:c6:7d:b0:
6a:0f:5f:a5:3a:23:29:91:14:15:f7:19:b6:0d:c0:61:54:bb:
a4:fd:1c:d6:14:0e:18:d1:d0:9e:e2:b9:67:50:8e:bd:db:e2:
49:9f:00:0a:80:7e:28:de:dc:c7:f4:22:8f:79:18:52:34:27:
5e:f0:fc:88:db:81:e2:08:24:6d:29:41:94:67:32:40:d6:2d:
9f:32:58:61:3a:ea:12:ba:b7:dd:06:df:15:99:a4:80:ea:a9:
e4:b9:8d:fe:40:75:b2:c6:7b:a5:ed:ac:53:ef:26:f2:75:f6:
96:95:e2:00:0e:e0:4e:e1:8d:38:20:f8:3b:73:0a:8b:82:00:
0f:19:43:44:e0:cf:06:6f:1c:21:16:91:ab:8b:e8:eb:32:d0:
27:79:11:28:29:a5:d4:ba:ac:b5:23:75:31:a9:5a:96:03:84:
d9:bc:98:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:15:06 2025 by rpki-client