Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
File: pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json)
Hash identifier: uybjsdg350bKz9Tlwoz5OyCfjN8tXT0kDiOIz26ZfZk=
Subject key identifier: 66:D4:EB:59:58:D3:65:55:C8:C3:1B:D6:E0:62:2B:F6:55:01:7A:F3
Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90
Certificate issuer: /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
Certificate serial: 0644
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
Manifest number: 063F
Signing time: Fri 28 Mar 2025 22:49:39 +0000
Manifest this update: Fri 28 Mar 2025 22:49:38 +0000
Manifest next update: Fri 04 Apr 2025 22:49:38 +0000
Files and hashes: 1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: J+xL2Yvq2Y2U7evSkvIEpjM5Xj8OwzOXIGV3sFLe53M=)
2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: giAuMNdUQbQxU3qFD/XGoGW0oQf3mtKr16RicuaHSew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1ED2
Validity
Not Before: Mar 28 22:49:38 2025 GMT
Not After : Apr 4 22:49:38 2025 GMT
Subject: CN=67e72782-ffca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:d5:38:43:c5:20:da:7f:5a:80:01:08:f6:
e8:55:01:c8:53:98:be:c0:c9:a6:62:53:80:85:71:
ac:2b:19:09:2b:16:9f:9b:1c:c8:92:24:7e:6e:f5:
4b:a2:2b:b7:09:f3:8a:02:84:40:c8:a1:c0:1f:4b:
f0:3a:e5:58:e9:54:64:12:99:7d:b4:b3:ba:b1:12:
46:d0:55:41:c7:96:15:7a:c9:82:bb:98:b2:17:7c:
b4:81:6e:b4:36:97:bc:81:7a:25:a6:39:f5:26:3b:
d8:eb:e9:28:82:bc:9c:b6:94:70:1c:05:ef:92:0e:
33:91:ac:09:ae:72:07:d0:89:0c:4d:66:5b:52:0f:
bc:91:da:79:2d:47:70:ba:04:41:f1:3c:34:62:59:
70:23:c4:bb:e9:5e:6e:16:84:b2:8c:15:2d:bb:e9:
0a:e2:02:60:09:e3:c2:dd:b4:5c:66:f0:c0:8c:53:
49:f3:2f:c6:3f:3e:c4:df:b5:d1:58:35:58:f8:3b:
b0:fb:c1:aa:59:5a:f5:61:f6:40:f9:db:1a:9c:4f:
b0:89:4b:c4:54:92:d2:38:03:26:66:cb:93:12:be:
13:e2:4b:5f:00:a5:ec:71:7b:1d:8d:4e:00:65:75:
7b:e7:7a:18:17:08:ed:ec:cf:a1:3f:1e:26:34:e1:
ad:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:EB:59:58:D3:65:55:C8:C3:1B:D6:E0:62:2B:F6:55:01:7A:F3
X509v3 Authority Key Identifier:
keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f8:2f:55:68:b9:a3:6c:02:fd:76:42:63:1b:c6:af:7a:0c:
b3:64:16:eb:a1:ae:05:a5:9e:15:ad:86:56:8f:20:81:83:21:
56:fd:7a:2c:37:a6:06:8a:37:84:ed:dc:7f:16:6e:a6:3a:24:
44:8f:c3:cd:d5:17:ab:d9:b1:60:2e:d4:82:ed:a7:5c:dd:71:
45:11:39:c6:7b:bc:c1:12:27:bd:12:78:41:b2:57:72:58:53:
e2:85:ff:44:bc:0f:bb:70:5b:07:06:14:ba:59:32:23:55:cb:
01:33:f2:aa:b4:62:44:f7:41:6d:91:52:3d:ae:ec:37:8c:bd:
a0:e7:16:b5:89:20:11:3b:bf:ef:0e:f7:63:35:83:76:3c:49:
4d:f4:57:6e:04:0e:96:7f:04:d4:54:75:81:f5:a3:9e:69:12:
1b:d1:39:82:c2:1d:1b:70:79:f7:fb:4d:7c:16:de:59:c0:c6:
8a:15:32:29:dd:51:29:d2:a1:1d:e0:06:1f:4e:4f:6b:92:0e:
2f:79:58:b7:24:a3:3f:c7:d4:8e:15:1c:f7:6f:c2:ca:a4:00:
11:06:6b:01:22:b8:dc:62:45:1f:a4:05:12:b1:65:15:e5:08:
11:fb:33:06:a2:76:f7:b9:77:ed:c2:d9:39:bb:56:1a:ee:a9:
66:2f:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:27 2025 by rpki-client