Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json)
Hash identifier: +sDnzP4cjr0oMpw2oYMwK6GziMgIg4no5Zby0uMtfT0=
Subject key identifier: 58:2B:84:DB:2A:C9:D1:F5:62:D6:67:74:28:C7:89:CA:75:9A:06:C7
Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Certificate serial: 1141
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
Manifest number: 113A
Signing time: Fri 28 Mar 2025 17:22:46 +0000
Manifest this update: Fri 28 Mar 2025 17:22:45 +0000
Manifest next update: Fri 04 Apr 2025 17:22:45 +0000
Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: wGMs44ljwadwmOSESwzscF2PvmOvQXceUvN2RLh2ckY=)
2: D728B250060011F0A0448C64C4F9AE02.roa (hash: 63yl1Teyi3N0la02MDXzZvU9fOguPMEqkEgxVdH5wiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4417 (0x1141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE7DE
Validity
Not Before: Mar 28 17:22:45 2025 GMT
Not After : Apr 4 17:22:45 2025 GMT
Subject: CN=67e6dae5-3f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:c3:96:d6:d9:7b:b0:8e:ea:4e:f3:1b:21:
ad:c2:64:b9:be:aa:c1:19:14:45:13:ec:a5:5f:bc:
ff:23:72:a3:6e:2a:be:fd:3d:01:5e:ab:4e:41:19:
6a:39:07:5e:06:20:cd:dc:12:41:aa:ec:8f:08:27:
8c:8f:38:0d:a2:dd:4b:ba:99:56:ba:96:26:11:58:
24:bd:cf:b2:9d:05:f1:01:7e:7b:74:0f:3f:ea:a1:
de:43:d4:21:58:36:e5:5e:99:35:a0:39:88:7a:06:
29:07:88:e7:94:65:af:3a:6c:6a:fd:9b:9f:ed:e2:
5a:05:38:d2:93:c1:0c:c7:5a:95:a9:16:c8:e5:a9:
79:93:37:2c:b0:68:f8:3d:56:27:bf:39:6d:2d:5d:
ae:2d:54:a0:45:71:9a:b1:76:52:2c:a4:2c:84:fb:
e5:41:c0:92:4f:33:25:db:84:42:ed:14:71:92:37:
c0:d3:c2:9d:ab:9e:85:f6:77:26:e9:b7:4d:a2:d0:
c4:76:47:09:ef:38:a5:8d:aa:38:e3:f1:e6:e7:bd:
f4:7d:d5:d0:bd:30:05:76:92:4f:40:0b:5a:ce:c1:
5c:68:11:15:39:bd:c1:87:bf:be:b0:2d:08:23:6b:
a0:0e:82:30:18:07:b1:2a:a2:8b:88:9e:41:b8:10:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2B:84:DB:2A:C9:D1:F5:62:D6:67:74:28:C7:89:CA:75:9A:06:C7
X509v3 Authority Key Identifier:
keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:51:0a:cf:71:2f:e3:7d:fd:65:3f:af:05:aa:38:61:55:19:
e3:ec:a7:6b:3e:29:56:e6:9a:8d:fb:6d:45:11:d7:65:90:13:
12:0c:9d:c3:e6:ab:a3:10:22:49:fb:5a:70:e3:81:ce:92:da:
4c:a5:82:87:43:86:75:20:8f:9a:bc:0e:ba:d0:04:23:1f:b1:
3a:ee:58:be:6e:09:6a:33:7d:4a:18:f2:13:38:64:a9:65:e1:
ea:59:44:ae:3f:d4:09:83:43:87:8f:ea:25:ff:5c:ea:7c:4d:
95:00:ac:ff:a9:3d:63:e8:e4:69:c2:a8:12:41:c7:89:27:c5:
9d:b3:20:9b:45:c9:90:64:21:66:f0:de:6d:3d:4a:12:3b:10:
13:30:e4:79:89:ea:7b:ac:97:09:cf:35:d7:c5:e6:72:81:dc:
ff:59:e4:62:92:1c:45:80:dd:a5:73:f6:96:46:01:be:86:48:
c3:44:7d:c6:fb:c7:16:16:b1:d9:3f:34:f4:55:77:52:8c:d9:
8f:6c:e1:5c:1c:ac:07:45:f9:05:ec:e0:18:c8:ac:88:d6:40:
2d:82:76:c3:ab:a9:57:a6:b1:a2:a2:28:a1:7d:8e:c0:5b:19:
87:4a:c9:af:db:b5:b3:9e:24:01:81:e1:2d:dc:fd:14:3c:ae:
12:d0:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:56:16 2025 by rpki-client