Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json)
Hash identifier: dBqtjvQhMV5V8MXzBXj0toTUACQ83/WgTz+7mMMS3ks=
Subject key identifier: 48:F7:1C:01:4D:51:6D:41:88:96:83:67:C7:7E:5F:9A:4B:B8:C4:3C
Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Certificate serial: 08D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
Manifest number: 08CC
Signing time: Fri 28 Mar 2025 20:43:41 +0000
Manifest this update: Fri 28 Mar 2025 20:43:41 +0000
Manifest next update: Fri 04 Apr 2025 20:43:41 +0000
Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: BxuuSCCf6agJ9rpvW39aAPTDL0/Ek7re0mxw6TSDCIE=)
2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: WsyWU+GSKy4FFCUwRFHUtgnAnZ3p6nz3YhQIgRrWUrE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D77
Validity
Not Before: Mar 28 20:43:41 2025 GMT
Not After : Apr 4 20:43:41 2025 GMT
Subject: CN=67e709fd-5111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:f1:c0:99:56:8d:2e:1e:54:4c:1a:4b:09:
dd:aa:5f:f7:8e:3a:2b:8e:92:b9:56:9a:0f:75:45:
24:f9:e2:7b:2f:53:15:53:be:c3:a4:a4:2f:a5:5a:
22:aa:59:ae:f6:bd:c1:6e:3d:ba:59:7f:fb:c6:94:
bf:ca:51:5f:96:6b:e7:f0:07:c6:12:9d:3f:ca:fa:
4c:2d:92:31:99:db:51:30:7f:c7:40:56:e1:e3:d2:
7f:dc:a0:33:40:00:ab:12:61:30:01:d9:82:79:1f:
7e:a5:f9:4b:8c:ae:76:a4:1e:0c:af:6b:6b:d6:06:
2b:f0:ff:15:21:39:4e:0a:38:d7:60:f0:e7:57:ce:
3f:bf:d7:60:2c:41:c4:26:7c:40:99:e7:eb:70:6a:
30:7b:30:d9:d0:18:2c:64:9c:4e:ba:0b:35:76:1c:
82:d4:5d:fa:3f:d6:d7:12:e5:a6:5a:54:21:d9:9d:
7c:30:f1:86:27:9d:2b:45:2a:c9:cf:1a:ee:c1:02:
b3:ac:3f:e3:25:9a:31:1a:fc:99:32:f6:65:f8:1e:
7f:f2:6d:3f:d5:45:f2:4b:3a:cf:a3:15:67:f0:df:
95:d4:34:ae:e5:81:ae:c3:e3:6e:14:5f:70:86:8f:
5b:a9:3d:ad:e7:7e:70:f4:5e:34:76:9c:d5:33:15:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F7:1C:01:4D:51:6D:41:88:96:83:67:C7:7E:5F:9A:4B:B8:C4:3C
X509v3 Authority Key Identifier:
keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:3b:a9:51:56:ee:1a:f6:3b:5e:8a:c1:d4:fd:b7:3b:29:97:
62:b2:41:22:6e:1e:f1:bc:a2:17:6d:cb:97:ac:84:92:0d:d3:
04:b7:fe:81:02:ad:1b:1b:61:04:28:ec:41:46:00:86:9c:42:
37:58:ae:58:a8:41:be:e7:f8:4c:e7:11:70:8e:ae:df:77:82:
40:cf:48:6d:98:0c:8f:ec:14:69:87:99:74:4c:98:49:ef:48:
fc:71:1e:b9:c8:d7:4d:10:72:34:e0:50:b4:bf:14:69:55:c7:
9e:cf:53:4b:f4:13:31:14:fb:ae:46:7f:1d:fb:22:3e:52:16:
0a:98:00:01:d3:53:4a:b3:7b:b5:5b:3e:5a:1b:e2:f1:2d:f5:
70:04:15:05:c0:6b:7a:04:b6:42:cb:ac:06:74:d8:cc:ae:c2:
e4:94:ad:69:7e:cd:d2:b7:8e:3f:34:71:e9:35:62:2e:96:2a:
0c:57:27:d5:21:33:ca:52:b3:42:15:74:93:f6:b6:42:af:94:
2e:5f:d0:04:ce:3d:d6:ba:2b:f1:26:82:e9:e7:da:ca:a7:02:
52:69:55:65:7c:65:92:fb:ce:5b:b3:c2:ae:7e:ca:54:be:92:
30:d8:01:91:88:7a:2e:b1:97:56:2f:f1:7d:c1:f8:16:5a:0a:
1f:c5:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:52:04 2025 by rpki-client