Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File: u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier: geiM+2qYD99e2SAAq8FGx51Hep258oYSYs7k4rXmbdA=
Subject key identifier: 72:FF:22:7A:72:6E:E6:0F:1A:7B:7F:88:0A:68:35:B3:FC:93:92:09
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial: 087C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number: 0868
Signing time: Fri 28 Mar 2025 20:55:51 +0000
Manifest this update: Fri 28 Mar 2025 20:55:51 +0000
Manifest next update: Fri 04 Apr 2025 20:55:51 +0000
Files and hashes: 1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: NJm+UyqMDAXt344s4NUnpIyfyuStw932rP21ggCz2AU=)
2: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: McY2AJFANrzWmI75qEuoRVmbI5bYcHMLwYH623aHbh0=)
3: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: 4sHi+d6qz1n7lwCxnRDnO0jNP13ZRhYE6FAGlfuub+c=)
4: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEA56
Validity
Not Before: Mar 28 20:55:51 2025 GMT
Not After : Apr 4 20:55:51 2025 GMT
Subject: CN=67e70cd7-73a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:29:81:c8:7c:27:72:56:1b:a1:56:47:ae:
e9:2e:21:c8:3c:b0:00:3b:9f:d5:4c:b9:3e:35:ae:
2c:2d:2f:43:7c:7a:e6:52:20:14:1c:98:4e:7d:b2:
30:28:dd:60:11:dc:fc:26:80:05:6c:7b:b9:33:44:
cd:1c:12:f4:a1:b7:be:41:cf:a9:49:18:b4:60:c9:
5d:23:e6:70:33:9e:80:bf:65:31:59:16:fd:85:3f:
66:6d:02:4f:b8:14:e2:12:97:cb:ff:01:df:6f:14:
62:38:dc:f2:fb:39:bd:b4:7d:82:c1:ff:4e:86:7c:
d9:e8:cb:1f:8c:14:95:09:fc:bc:05:36:6e:b8:16:
7c:e4:28:7f:56:62:85:d8:39:ca:e6:53:50:a5:c7:
0f:eb:74:17:f0:7c:00:66:f1:f9:1e:3a:c0:d2:5a:
89:de:80:36:72:02:cb:a6:39:8a:04:84:24:44:f2:
36:f0:fa:d1:66:df:e5:c4:5f:49:e9:a6:9f:8b:9c:
e7:de:46:b5:08:c2:62:01:54:3e:8d:ba:ae:4a:c2:
c2:bb:51:c8:49:4d:bd:2f:b7:3f:fa:2f:54:43:cd:
29:49:5a:ac:6a:a3:73:6d:c6:16:8a:8b:f1:25:78:
5d:e7:25:7c:8c:6f:2d:5a:77:b5:b0:4e:1e:d2:cb:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FF:22:7A:72:6E:E6:0F:1A:7B:7F:88:0A:68:35:B3:FC:93:92:09
X509v3 Authority Key Identifier:
keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:e3:06:ca:e1:92:25:0a:66:11:30:68:7f:af:f4:47:50:10:
e4:98:4d:73:e4:03:ee:ae:86:84:06:4d:75:34:b0:4a:af:28:
dc:94:e9:1a:b6:e5:00:c2:28:36:8c:d4:f3:fb:e7:05:b3:ed:
91:a4:cb:0e:62:5e:a2:19:9f:77:40:dc:5f:de:f9:53:55:82:
83:14:79:7b:02:2a:1b:3f:e8:b8:d9:71:16:c4:d3:cc:e6:7a:
a7:ff:7b:c6:ae:36:dc:a4:e9:75:ab:40:b5:e6:39:2e:86:9f:
69:7a:ff:eb:13:44:9c:9d:12:27:cc:a0:b6:3b:62:a2:1d:8d:
ed:1f:6a:7a:76:8a:05:80:84:b3:73:b0:ee:03:9e:97:67:a3:
ee:57:67:bf:54:8e:ae:dc:75:c8:58:19:f8:5d:4e:12:4f:59:
2d:e5:b2:b1:d5:c1:a3:74:68:58:cb:dc:25:06:5c:3c:ee:b0:
f7:78:ae:d1:75:98:12:ee:bf:76:a2:31:92:33:95:75:8e:10:
32:8e:7d:c8:d8:aa:70:3c:ae:9e:01:41:a1:e7:8f:c5:e4:53:
94:88:8c:57:d5:e1:07:8c:c5:2c:97:36:41:9a:3a:89:cd:6a:
45:8b:da:85:e1:58:cf:76:64:0d:1f:82:ac:8f:9e:ab:cd:dc:
f6:4a:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:53:36 2025 by rpki-client