Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
File: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft (raw, json)
Hash identifier: NUjdde0aWa6Mwal2wN8D1iEX9l21tZKCLbQkxSPWa5Y=
Subject key identifier: A5:70:83:4E:03:DC:E5:AF:E2:E4:F5:3C:C2:8B:A4:49:13:AF:93:6B
Authority key identifier: 0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB
Certificate issuer: /CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
Certificate serial: 08EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
Manifest number: 08E7
Signing time: Fri 28 Mar 2025 20:39:08 +0000
Manifest this update: Fri 28 Mar 2025 20:39:08 +0000
Manifest next update: Fri 04 Apr 2025 20:39:08 +0000
Files and hashes: 1: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl (hash: U1z37RRqoNLlRAkpCv147zOZwbUilYpdrBt7K16qyfs=)
2: C7B69FE2287911ED93621A30C4F9AE02.roa (hash: UoGq+ZpO/6nx5x+XTY9D8Dy7/iyHFGpVYfq1cLpAn/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2287 (0x8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE5DA
Validity
Not Before: Mar 28 20:39:08 2025 GMT
Not After : Apr 4 20:39:08 2025 GMT
Subject: CN=67e708ec-4f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:ef:9a:6d:3d:3d:02:64:72:82:e8:69:75:
a8:ef:40:ad:40:64:ec:dd:ce:83:ba:85:2c:7e:be:
e3:ac:9c:b7:50:b9:d4:2a:c3:9a:34:91:d2:3d:f6:
28:67:44:28:36:77:1b:fd:cd:28:48:5f:d3:9f:df:
22:19:1b:34:5c:71:12:10:de:d4:66:01:94:33:71:
b9:a7:52:5c:42:97:6f:5a:ee:ad:62:36:4e:7b:9e:
0b:4a:f0:9b:5b:f0:bc:c2:76:d3:9c:fb:f8:77:64:
59:40:9b:49:60:9f:39:7b:fa:02:e0:98:62:d5:d0:
e1:09:ff:36:35:28:5e:74:ac:18:17:e0:80:42:fd:
f0:03:58:02:95:c1:95:67:44:40:cc:7f:f8:8f:39:
54:de:dd:a1:84:c8:2b:bf:b6:1d:b6:0b:97:77:7b:
5e:ed:61:85:45:63:87:b6:5c:94:e0:b3:2f:35:43:
ee:8e:63:f3:23:69:cd:8f:ad:8b:5b:29:0e:5c:5f:
95:f8:bf:d7:bc:53:6f:f8:d5:81:6f:29:75:45:ea:
af:18:d1:e8:70:1e:c9:c0:7f:11:e0:a0:62:fd:70:
90:7d:af:31:ae:32:70:0e:38:ce:7b:fd:c5:da:fb:
cc:fc:ae:13:1c:9e:f1:e0:81:c9:33:f1:15:bb:23:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:70:83:4E:03:DC:E5:AF:E2:E4:F5:3C:C2:8B:A4:49:13:AF:93:6B
X509v3 Authority Key Identifier:
keyid:0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:47:20:23:23:aa:2e:d8:60:52:f6:90:41:46:e0:c1:a7:dc:
0d:bd:1a:07:9b:4b:75:a6:d7:9d:31:79:4b:55:09:4e:7e:de:
49:fe:bd:7c:37:d2:03:99:90:47:e2:9c:41:07:e0:d6:43:68:
8d:c3:cc:1b:75:d0:4a:ee:bf:23:87:46:e6:b6:e9:76:aa:06:
5d:2c:88:ff:b6:3b:c2:68:62:87:34:80:57:33:c7:a0:6b:d1:
dd:31:17:ee:6c:06:33:2f:cc:6e:d2:a6:a5:5d:6a:ca:15:d3:
7b:f3:f3:2a:57:36:ee:29:5e:de:89:d2:56:c2:9d:e0:6d:d8:
7b:00:62:66:ab:b7:c9:23:1d:fc:01:72:3f:82:41:a2:f8:c2:
5b:15:74:97:d9:27:bb:eb:dc:aa:de:0d:0b:21:95:99:6c:14:
1b:47:9b:83:f4:83:c5:e3:40:80:80:0f:0b:31:6e:f1:9c:7a:
da:b2:b9:d8:8d:16:a9:25:44:8d:b9:0e:f5:72:07:ab:9e:59:
e4:24:61:0b:46:be:ea:19:cf:3b:1a:31:76:f9:db:7d:7c:c7:
44:26:75:9b:a6:ca:37:95:9e:57:b0:c4:60:5c:5b:1a:bc:b9:
40:c0:75:8e:7b:b1:27:a6:fd:e8:a3:44:ca:69:de:1c:c7:ad:
cd:68:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:12 2025 by rpki-client