Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
File: y4244fF7x3I0bdn_uyByz6j9plI.mft (raw, json)
Hash identifier: AVpKFNOjWYRTmSqJu0L2gO3tF7tkTND+2WGv5z23WQk=
Subject key identifier: 1D:B3:51:68:AF:8E:94:83:65:4D:05:8E:93:F4:94:B2:B6:7F:19:69
Authority key identifier: CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52
Certificate issuer: /CN=A91DB7E9/serialNumber=CB8DB8E1F17BC772346DD9FFBB2072CFA8FDA652
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
Manifest number: 0113
Signing time: Sat 29 Mar 2025 04:20:15 +0000
Manifest this update: Sat 29 Mar 2025 04:20:14 +0000
Manifest next update: Sat 05 Apr 2025 04:20:14 +0000
Files and hashes: 1: y4244fF7x3I0bdn_uyByz6j9plI.crl (hash: UxdhXahPrP/7EXSKYvGwrUHttGG5PjnmjUxqZAEeX4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9
Validity
Not Before: Mar 29 04:20:14 2025 GMT
Not After : Apr 5 04:20:14 2025 GMT
Subject: CN=67e774ff-f65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:1a:6d:f2:cd:9a:70:f5:b9:71:6e:83:fa:
cd:15:62:46:86:1d:12:0f:33:4b:ce:fb:b8:cf:e1:
62:ba:84:fd:6b:e8:b7:ab:c7:f8:04:85:a2:ca:a8:
9d:98:83:61:cd:d3:a1:fc:50:da:23:01:0c:fa:04:
22:5e:26:d9:dc:6e:68:c0:17:25:84:b9:ef:44:71:
09:bd:4d:0d:55:be:b4:7b:a1:50:6a:47:39:d4:d7:
a4:76:b6:e1:cb:6d:ab:a2:79:d3:ae:8a:b2:df:03:
85:c8:7e:26:49:36:a5:e5:28:30:ac:d3:79:09:43:
79:72:15:51:2a:4b:8b:d6:b3:3d:a4:d5:ed:89:06:
00:68:0b:50:1d:d0:db:20:68:07:95:fd:31:f8:15:
b4:bd:bd:c6:54:43:01:4c:79:f9:38:51:21:13:db:
50:7f:17:71:23:d8:d4:ab:11:5f:52:6d:49:95:92:
bc:2e:68:41:59:3c:2a:1c:45:4d:ab:35:ad:1f:6b:
10:a7:4b:41:dd:0f:c0:cf:6a:09:5d:e6:1e:a5:aa:
40:c9:77:d7:30:ce:70:ac:e2:21:7e:92:af:7d:48:
cd:7f:a4:86:68:d7:a5:ee:7f:bc:ca:17:82:33:96:
f7:21:93:b9:e5:51:59:e4:5b:66:95:92:74:6f:ab:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B3:51:68:AF:8E:94:83:65:4D:05:8E:93:F4:94:B2:B6:7F:19:69
X509v3 Authority Key Identifier:
keyid:CB:8D:B8:E1:F1:7B:C7:72:34:6D:D9:FF:BB:20:72:CF:A8:FD:A6:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/y4244fF7x3I0bdn_uyByz6j9plI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E0C461306E2E11EE85D92D32C4F9AE02/y4244fF7x3I0bdn_uyByz6j9plI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:86:af:13:f4:8e:00:55:30:55:56:38:91:a2:96:d4:60:8a:
50:88:d8:3e:18:e3:93:06:60:47:7c:c2:1a:b3:56:97:76:b2:
d6:f9:31:0b:30:2a:f0:9c:9b:12:45:d5:10:fa:56:95:6f:be:
96:b1:e4:97:9e:98:a2:4e:16:d1:de:34:56:c3:74:4b:dc:06:
29:e4:56:9c:2f:1c:a3:5a:77:e4:16:79:c5:0d:dd:dd:82:e8:
a2:99:3e:9c:af:aa:9f:0a:e5:0d:3b:e2:13:d3:fe:42:0f:92:
cf:f2:3a:15:62:4d:62:84:4b:85:55:f8:5d:9e:80:a4:d6:c5:
ab:e1:f2:09:06:b4:28:6c:7f:63:a8:01:cf:dc:51:fd:2b:27:
c8:92:07:a5:82:cc:ca:5a:01:aa:b0:a5:02:f3:05:a8:5c:f5:
29:6f:ef:a5:ad:2d:be:8e:0f:d4:d8:0a:9b:89:94:77:aa:e5:
e9:6b:62:d2:08:00:99:c0:ec:0a:58:1c:90:f1:7c:96:76:a4:
9c:c0:b8:7d:20:11:3f:c2:73:0d:be:c0:66:02:22:3e:7f:f9:
78:57:b1:58:1d:2c:03:27:f6:ee:0a:f2:63:35:9c:93:54:ff:
4f:d7:82:9a:8b:fb:70:c4:4f:89:d9:59:51:48:c6:38:20:d7:
b3:87:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:59:30 2025 by rpki-client