Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
File: MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json)
Hash identifier: W+ieYr38u5oJLkGR5k5qhZ4+gWCtKUquX5DnlVJoepM=
Subject key identifier: EB:C1:22:0E:BE:FF:D8:50:19:EC:70:8A:C1:26:2D:FD:C1:CC:CC:94
Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E
Certificate issuer: /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
Manifest number: 01E8
Signing time: Sat 29 Mar 2025 02:21:31 +0000
Manifest this update: Sat 29 Mar 2025 02:21:31 +0000
Manifest next update: Sat 05 Apr 2025 02:21:31 +0000
Files and hashes: 1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: WmAVKNxp4dLOejD4p0mHrPODU7NMfobb+P6QLeYVF7A=)
2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: 5RvSp27bzJLpaJnE9Vp9OHr3zH1Dq7i1O2ke5dqvusQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5D9F
Validity
Not Before: Mar 29 02:21:31 2025 GMT
Not After : Apr 5 02:21:31 2025 GMT
Subject: CN=67e7592b-6d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:c5:18:67:e9:e4:9a:4b:42:56:3f:aa:4c:
6b:1f:8b:e5:4e:b0:80:dc:b3:3a:c6:55:1f:81:71:
cb:56:d0:9d:79:56:70:79:c2:89:ee:be:61:62:33:
42:ee:53:f0:12:32:2c:24:97:0a:5e:6f:bc:83:5a:
d1:cb:b6:cd:b2:5f:a7:91:ba:47:10:a7:3f:51:b7:
aa:89:35:a6:d8:b2:06:05:17:f0:8f:da:fc:05:d2:
ff:25:e5:bb:68:5b:58:e1:32:0d:66:db:15:d6:f1:
52:cc:00:97:ee:bc:07:c5:2b:85:f9:59:f2:07:5a:
07:8f:f2:ce:d3:78:6b:dd:ee:71:f5:9a:53:86:83:
6d:e6:84:4d:eb:16:42:8f:96:88:fc:02:da:e1:65:
36:99:0b:a1:19:b3:1f:ee:cc:79:70:5d:a6:24:24:
81:09:f2:05:32:5e:c5:d2:db:8b:93:6d:55:9c:2a:
29:62:34:83:58:f5:76:67:a1:d8:c1:0d:ca:ee:39:
e0:38:ae:97:63:fd:cc:66:8d:76:26:82:89:5b:f4:
6b:c8:88:0e:0a:4b:de:ae:d4:70:f4:8c:21:33:6d:
88:09:6a:86:fe:d6:14:cc:74:0b:79:28:fc:72:37:
46:78:ef:79:d5:33:ba:9b:85:39:fd:19:fa:8b:c5:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C1:22:0E:BE:FF:D8:50:19:EC:70:8A:C1:26:2D:FD:C1:CC:CC:94
X509v3 Authority Key Identifier:
keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:9e:42:f5:cf:8a:e8:7c:a9:87:02:57:e0:e5:f8:93:62:9c:
f8:26:52:2f:da:6c:14:e4:09:f7:20:97:5f:61:54:b4:66:81:
9f:fa:40:e1:36:71:4b:8b:2e:12:ad:53:13:d2:e8:fd:fd:b8:
d4:fc:f1:ec:68:1e:03:f9:dd:ae:5d:a3:c5:5c:95:39:7e:45:
68:9e:0a:47:61:38:e5:23:4f:53:8f:4a:5a:07:b6:c8:85:8c:
31:9f:e7:f3:bb:ec:67:b2:6e:28:45:34:1f:23:f1:a3:9e:da:
a4:78:aa:1a:10:90:ad:8b:c2:67:4b:f0:33:e2:01:d2:7f:11:
74:27:bf:16:7a:c5:e4:be:08:7a:63:e1:5e:b6:02:bb:15:53:
91:e1:17:4f:05:33:34:fc:a7:83:a9:02:ee:a6:ea:11:f7:7d:
62:83:71:b6:ad:f7:67:ac:49:88:cc:f5:8b:78:10:57:ab:97:
49:fa:72:94:37:2a:06:49:d8:d5:ee:99:7f:65:e8:cd:88:ca:
d4:9e:bc:7d:9a:67:ca:e6:68:5c:04:5d:a5:98:24:61:6d:c4:
ba:46:cb:e6:5c:8a:b9:3b:a8:4b:7b:7c:bc:08:cb:d1:d2:eb:
ae:c1:06:9a:da:72:2c:52:c9:a4:6d:37:bc:00:f2:ea:e3:d8:
a3:f3:bc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:41:49 2025 by rpki-client