Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json)
Hash identifier: FbHc6Ncn0chfRFFjQ17qZkVGCJ0Dhve5iO1VKWFmMN4=
Subject key identifier: B0:5F:68:47:42:E6:B6:F4:3F:EB:8A:12:FE:3C:93:1E:06:30:26:0F
Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Certificate serial: 21AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
Manifest number: 218B
Signing time: Fri 28 Mar 2025 15:59:30 +0000
Manifest this update: Fri 28 Mar 2025 15:59:29 +0000
Manifest next update: Fri 04 Apr 2025 15:59:29 +0000
Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: XP1ZM35+DoVAyFe7NYM+tVwuB5f+Rz/JKSoWJUUjCTQ=)
2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8620 (0x21ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5BFB
Validity
Not Before: Mar 28 15:59:29 2025 GMT
Not After : Apr 4 15:59:29 2025 GMT
Subject: CN=67e6c762-3eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:6e:0e:a0:94:47:37:21:32:ce:84:e8:18:
b7:38:cf:7d:ea:31:dc:74:05:b1:21:05:fe:5a:ee:
2b:90:e5:e3:a1:c0:b4:8a:51:45:43:62:fb:0e:71:
17:e8:da:0b:b6:48:51:15:7b:aa:02:c8:69:e4:68:
8b:f8:b4:bd:ab:d7:7b:32:d2:5d:3c:b7:05:19:91:
77:33:0a:d6:ed:8d:b2:08:ca:20:19:80:55:87:f8:
50:49:99:d5:20:f2:11:9c:75:cb:2f:a8:3d:8c:e5:
d3:5c:2c:4a:6c:e5:15:5e:40:e6:47:3f:7a:5f:61:
73:0d:99:1e:b9:15:ea:2d:05:f9:82:1c:cd:43:d4:
e3:2a:57:63:c2:0b:a5:91:f7:4a:79:7e:44:f8:7d:
15:ce:3c:91:5a:49:90:b6:2d:8d:3c:88:d1:7e:6d:
c9:c0:82:ca:d8:c3:e7:ea:9c:02:42:41:b6:94:a0:
c2:6f:a6:4f:b7:b0:df:3e:0d:be:fe:05:93:39:72:
95:39:91:ff:9f:08:03:df:df:4e:0f:2e:25:dd:7e:
37:f6:7c:f5:4e:a8:a3:2f:a1:c0:9c:66:6b:b0:1d:
76:7a:15:58:64:32:47:21:72:b8:f3:3e:4f:3c:8e:
0a:0b:a5:b1:5d:61:f7:99:b9:a6:04:69:32:7b:3a:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5F:68:47:42:E6:B6:F4:3F:EB:8A:12:FE:3C:93:1E:06:30:26:0F
X509v3 Authority Key Identifier:
keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:58:25:5b:dc:88:68:e3:ab:f2:e4:76:6c:0a:ba:0f:d1:da:
c3:d8:ac:1e:a9:26:6f:1d:c0:d7:b7:e4:bf:a7:8a:22:fb:1e:
99:c1:b3:92:b8:2a:df:65:60:55:41:02:31:59:99:d1:88:5f:
07:d8:88:4e:e3:4b:e2:79:91:17:bb:96:c6:13:45:c7:78:0f:
e7:95:b6:73:20:e2:91:de:f1:f1:b7:7b:11:65:21:b3:86:83:
95:8a:8a:d7:f0:94:f5:4a:7e:ea:9d:79:95:20:42:4a:72:86:
7c:2c:38:98:45:54:46:16:44:60:1e:0c:a2:19:61:e2:11:eb:
4f:30:14:d9:fa:8b:7e:29:6e:f9:97:82:dd:a1:e7:48:70:e4:
2c:23:cd:ad:08:51:a2:c4:62:84:1a:ad:40:1f:d3:72:17:7c:
82:5c:f8:2b:2f:44:de:46:5b:4f:4f:50:41:ff:71:3d:cd:2c:
c6:25:db:83:a2:84:37:39:a0:8c:91:ba:ee:b5:7f:4f:23:7f:
40:6b:fa:04:6c:67:cb:e4:0a:4f:e2:26:2f:7a:a0:ec:27:6a:
dc:27:15:ff:e3:20:bc:6e:a7:d6:e4:14:56:3d:fb:f5:1f:6a:
c2:9e:a6:cc:c1:ab:7e:ba:4f:0c:3d:c2:b3:88:1e:0f:36:a9:
a5:6a:2b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:44:22 2025 by rpki-client