Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json)
Hash identifier: x5uXtLypshEdGUP/oAv19lGvyMJ1DOTy4AsM6Ldh8JA=
Subject key identifier: 52:0C:CE:D0:07:EE:F8:C2:0E:6A:2B:42:55:33:C4:CA:96:3E:61:05
Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Certificate serial: 0C26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
Manifest number: 0C1D
Signing time: Fri 28 Mar 2025 18:44:57 +0000
Manifest this update: Fri 28 Mar 2025 18:44:56 +0000
Manifest next update: Fri 04 Apr 2025 18:44:56 +0000
Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: mMfW2Zjo1d7J54TgBUtQL1tJ6RnZQTxXl4jZSEVuhSY=)
2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: fzV6mKN4RsRKk9FHAZNWKpTQRTVNAoWs1ftj78Q3KMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3110 (0xc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50FB
Validity
Not Before: Mar 28 18:44:56 2025 GMT
Not After : Apr 4 18:44:56 2025 GMT
Subject: CN=67e6ee28-c7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:b1:96:ee:22:6d:d6:68:3a:3d:cb:07:ba:
ab:55:7d:83:7b:26:b1:8f:fd:c1:2c:90:59:5e:54:
20:19:c5:b3:48:10:d5:cc:90:5e:8c:7a:3b:90:fb:
86:6a:e8:7e:c5:41:46:d1:62:84:5e:8c:db:96:d5:
20:cd:21:18:29:69:91:78:b6:4d:7a:03:4b:a7:8f:
2a:4e:34:ad:f6:3c:36:c3:2d:57:aa:f6:b8:eb:a8:
9c:15:85:65:92:b1:4d:91:db:8e:94:67:b6:87:1c:
a9:01:e1:0e:0c:d8:9a:a5:98:34:0f:26:04:48:e3:
2e:8b:07:b8:c7:c6:1e:e0:23:e0:9f:92:cf:7f:c0:
a1:5a:bb:92:90:cd:b2:19:b9:1f:b7:09:a8:9f:41:
49:82:1e:aa:fb:b7:f3:f4:11:2b:44:fb:23:83:a0:
cc:0d:ff:56:c9:5f:91:c5:dc:72:c0:c6:0b:9e:8b:
a4:6b:9f:41:2d:7b:47:02:df:94:0f:b5:ad:b1:9d:
8b:3b:6d:f7:7a:98:26:0e:4f:5c:7b:76:d3:a8:e4:
7e:1f:80:2c:85:35:50:42:f8:b2:fe:fe:e7:32:44:
9d:55:f5:f2:1c:89:88:1b:dd:e9:6e:0d:34:db:bd:
05:cd:8f:6c:1a:82:c6:ae:c8:55:60:1a:6b:40:06:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0C:CE:D0:07:EE:F8:C2:0E:6A:2B:42:55:33:C4:CA:96:3E:61:05
X509v3 Authority Key Identifier:
keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:62:07:ee:2d:b4:a7:4c:36:4a:b0:4f:ff:66:28:30:cb:5d:
2d:46:fe:f0:34:92:4d:5d:af:39:e2:99:0e:99:c1:fb:48:7c:
e6:02:73:f1:16:d7:0d:66:72:1d:85:7f:11:08:79:00:f3:31:
d6:3d:0f:2b:80:c2:20:d3:00:a8:7b:31:07:19:c3:c3:80:e0:
f8:68:79:0a:2b:c7:a8:99:ef:9a:f7:ad:a0:6b:1f:f5:06:ed:
6e:72:e7:8c:c2:d0:39:50:34:97:10:a8:b5:0e:46:41:28:c6:
fa:94:5a:d3:5d:0a:17:44:10:a6:a5:10:ae:8b:34:7f:ea:d6:
59:bc:ec:4c:2e:9b:d2:cd:c9:c2:e4:b8:27:ef:83:e2:ab:07:
ec:4e:99:78:28:5a:43:e0:aa:99:38:08:8e:e5:8e:23:b0:23:
48:4e:a2:9b:73:79:58:e2:21:33:b8:26:a1:b4:68:83:ee:66:
6e:6a:e1:3b:8f:26:dd:2b:48:ea:77:cf:35:a3:fa:18:fb:fa:
13:6d:ef:35:33:b9:71:9f:62:a6:5f:f0:53:ef:90:b1:a0:7c:
ac:55:fa:bd:8e:33:0a:b2:cd:ab:fc:00:76:56:28:db:d8:9d:
91:ca:b2:0e:3d:bf:29:c0:f5:c6:31:c2:f9:7e:d5:08:7c:a7:
86:25:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:44:01 2025 by rpki-client