Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
File: s8j34GTam1qm6nlgF-xg0okDeCo.mft (raw, json)
Hash identifier: KnJEi3BHVh1+iuws1cxX20fdRV69Z9vyvJrYXP7wn00=
Subject key identifier: 3B:7E:DE:D7:9C:41:41:92:82:9E:73:78:E2:18:59:61:BD:9F:19:7D
Authority key identifier: B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A
Certificate issuer: /CN=A91D671F/serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A
Certificate serial: 15F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
Manifest number: 15E6
Signing time: Fri 28 Mar 2025 16:52:08 +0000
Manifest this update: Fri 28 Mar 2025 16:52:07 +0000
Manifest next update: Fri 04 Apr 2025 16:52:07 +0000
Files and hashes: 1: s8j34GTam1qm6nlgF-xg0okDeCo.crl (hash: xr3cKgSwbNGPpBgVHlPZn+Qawl3RhzXQrEG+RVtNEm8=)
2: A135DDD4162211EC9B4B6F77C4F9AE02.roa (hash: PQQbRL+FceR911s2DnKbA76SOWcCu+81xyQa/8CkP7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5625 (0x15f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D671F
Validity
Not Before: Mar 28 16:52:07 2025 GMT
Not After : Apr 4 16:52:07 2025 GMT
Subject: CN=67e6d3b7-fb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:31:d6:de:7a:a8:fa:aa:82:c9:3a:f1:e2:c9:
bc:66:8f:e3:f8:fd:4e:a9:71:27:a5:08:f2:dd:82:
9d:36:de:f4:f7:34:8c:2a:3a:2b:c5:87:e0:71:be:
d9:95:97:ef:e1:f8:e9:a7:e0:03:7a:9c:ac:e3:22:
db:7c:5e:c0:a0:4a:2a:2d:a5:4b:c9:ee:9f:b3:eb:
37:b0:24:46:88:13:85:ae:1a:52:d0:40:4d:37:99:
e4:71:8a:16:6a:d9:aa:61:ca:1a:89:18:89:9a:43:
4e:67:90:f7:49:a0:05:eb:cd:55:b3:80:09:a8:f2:
c2:66:9c:cc:0b:68:79:5d:85:84:58:8d:d3:40:a5:
69:57:fe:83:bf:17:bf:09:c0:cd:25:94:53:b4:6d:
43:7d:cb:cf:d2:1e:53:15:74:c1:02:83:ef:71:69:
01:1b:a7:d3:7a:44:2c:88:e5:97:26:62:68:91:07:
c2:12:ad:b6:9d:55:0f:71:28:e0:f6:2f:e9:b2:cc:
9e:43:28:3e:e2:f3:85:18:ec:3f:a0:26:6e:70:f0:
53:26:1b:62:ae:0c:c2:a5:4b:0e:4d:33:df:79:9b:
38:43:70:c3:14:1e:2e:3d:83:99:f5:cc:45:1b:08:
5c:f7:a1:4f:ef:86:c7:7b:d1:1e:42:d7:3c:38:20:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:DE:D7:9C:41:41:92:82:9E:73:78:E2:18:59:61:BD:9F:19:7D
X509v3 Authority Key Identifier:
keyid:B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:57:c5:fa:1c:45:4d:1d:01:16:d3:df:6f:cd:99:0c:ac:32:
2e:8e:5b:6e:89:00:1d:84:78:81:c5:8c:8d:1d:13:7e:35:98:
4a:24:d1:0d:3a:19:88:07:69:93:d1:d6:53:ce:41:a0:78:1c:
a1:34:d3:68:9e:28:a0:23:55:21:5d:e1:c7:5d:83:07:b9:ee:
3e:90:cf:8b:25:18:1b:f0:f8:aa:1b:26:68:c3:60:e0:f9:d8:
a0:0d:6e:82:0e:cb:7a:62:e1:20:c2:39:a3:7f:5c:90:17:81:
7c:76:ee:5f:68:db:83:d8:d3:7b:b6:11:17:6f:bb:9f:08:d2:
f4:a7:ea:f1:e7:61:d4:98:76:21:2f:74:5b:3f:62:56:6e:4e:
c2:01:ca:79:fd:e7:c6:cc:91:2e:dd:dd:ee:b3:4c:cf:c6:5f:
2c:98:a8:d7:b8:b4:cd:ed:d1:2a:1a:d2:e8:81:5c:56:b2:c1:
ff:b6:72:b4:f6:1f:e2:32:9c:4c:31:39:72:93:c0:9a:69:5d:
43:77:ba:ea:06:78:bc:da:1f:26:cf:64:71:86:be:58:b6:16:
df:cc:59:ab:c3:e6:e7:02:2d:98:eb:8e:93:47:cb:a9:81:3d:
a7:b5:a1:84:af:c0:40:20:50:ac:de:34:0e:98:0a:91:af:92:
b7:54:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:46:42 2025 by rpki-client