Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json)
Hash identifier: Qy27S9F8eLduDPxu2R4yHg2h6JtHb9FGrUroOE4A6HY=
Subject key identifier: 47:09:D9:A2:E7:23:7C:35:7E:AC:14:AF:8F:9D:29:6B:B1:AC:89:99
Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Certificate serial: 2519
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
Manifest number: 9EC0
Signing time: Fri 28 Mar 2025 14:30:16 +0000
Manifest this update: Fri 28 Mar 2025 14:30:16 +0000
Manifest next update: Fri 04 Apr 2025 14:30:16 +0000
Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: xp1wAuQGpjw0bD5TB1ta8PY0Hbo9Orctw2nUWTBQD6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9497 (0x2519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D
Validity
Not Before: Mar 28 14:30:16 2025 GMT
Not After : Apr 4 14:30:16 2025 GMT
Subject: CN=67e6b278-3325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:ef:9d:00:34:29:27:30:b4:81:55:d3:1e:
cd:6e:22:d2:68:a3:47:c9:77:7a:b7:a5:c4:24:19:
82:15:96:62:40:49:e5:bb:c5:56:58:ef:b1:49:0c:
73:ce:e6:22:c8:0c:a4:ee:df:fd:2c:8d:ee:65:1d:
76:b8:68:19:0e:c6:80:6b:76:c8:08:ea:f4:b1:74:
0b:a7:f0:42:6b:c2:46:91:36:f7:e2:6f:fc:0c:5c:
96:ed:da:cf:99:03:a4:2d:36:e8:16:58:f7:ad:ea:
c1:75:9f:84:a2:65:38:f2:8b:25:98:9a:e3:8a:4a:
15:c7:2c:25:45:7a:aa:c0:47:d0:d4:50:44:02:6f:
7b:bf:4d:9c:66:09:03:7a:4e:69:8b:21:81:77:af:
91:0b:d5:fc:36:45:b0:d7:5c:ed:e1:f7:9c:51:9b:
9f:45:0e:a6:02:1b:c0:42:c4:c2:98:2e:9f:eb:f7:
cd:c5:cc:17:d4:5c:32:53:31:53:73:4f:8a:95:9f:
1e:84:7f:0c:c1:be:54:9d:63:d8:8f:38:b2:00:d2:
6c:1b:75:cc:44:85:cb:26:83:6d:37:a0:4f:ce:cf:
9a:bb:54:7e:3d:db:64:82:1a:ce:98:f8:86:0b:6b:
f2:6b:1a:f4:e3:19:2f:c9:e4:15:9e:d9:49:2f:f4:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:09:D9:A2:E7:23:7C:35:7E:AC:14:AF:8F:9D:29:6B:B1:AC:89:99
X509v3 Authority Key Identifier:
keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:d0:45:a1:75:ce:75:ce:19:ff:63:0d:b3:bb:28:15:49:80:
b0:9b:52:ed:22:db:e0:8b:b3:1d:11:60:ba:21:f9:71:a3:ab:
38:45:f9:ce:e1:e7:d1:59:2e:60:20:7b:b7:2b:a8:c2:e9:f7:
58:2a:d6:62:66:db:d5:11:2e:b9:c3:bc:a1:04:35:af:8f:7a:
52:5a:e2:4d:98:69:d1:9f:3c:98:c6:cd:92:75:6d:08:5f:18:
a1:f9:31:f3:66:d0:0d:31:f0:2f:79:86:6d:2c:f1:ec:46:16:
50:17:c6:38:b7:f5:3b:e1:3e:1a:c1:53:22:0f:4e:5e:f1:86:
53:77:25:ae:df:ff:e3:71:cb:ff:36:90:87:ba:ab:e8:60:5b:
60:39:2b:4e:c6:b9:44:38:53:ce:b5:50:63:fa:86:77:68:21:
08:91:f4:8d:22:63:1a:a6:4c:5e:5c:d4:35:6b:ac:21:4b:4b:
fd:1a:7c:e8:ec:d1:8a:11:e4:ce:47:4e:7c:04:00:b7:4a:4d:
ad:10:2c:79:22:08:87:96:34:a8:42:60:bc:04:55:46:fb:5e:
3b:93:71:3f:2d:fd:b2:6e:e5:f3:a6:b0:41:f3:2b:52:3a:9b:
f5:01:0c:cb:8c:ac:c5:d2:85:d8:a0:ed:99:9d:79:b5:d6:e1:
0e:f9:46:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:35:04 2025 by rpki-client