Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
File: 8ghPeg88CpH4Jf79nxA18zVBWEw.mft (raw, json)
Hash identifier: lPWfXUxQ+2c/tUJjCN/YuMTj9Vll1XgB2iJLKnOZ4WE=
Subject key identifier: EB:48:B4:0E:CC:DE:D5:B4:E2:4E:6B:90:99:10:BB:7B:2A:7B:FF:9D
Authority key identifier: F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C
Certificate issuer: /CN=A91EAEAF/serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
Manifest number: 01F6
Signing time: Sat 29 Mar 2025 02:18:52 +0000
Manifest this update: Sat 29 Mar 2025 02:18:51 +0000
Manifest next update: Sat 05 Apr 2025 02:18:51 +0000
Files and hashes: 1: 8ghPeg88CpH4Jf79nxA18zVBWEw.crl (hash: jBptHqm/hjZN7ckTk9sp47YAuEWXY8Z8YeYLGGI8eSg=)
2: EF0EFF5833F511EDA5C4F37DC4F9AE02.roa (hash: LAWmMRc8daUtEB7NaiA0m2Tl41sqEulVfrA7do1Thps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAEAF
Validity
Not Before: Mar 29 02:18:51 2025 GMT
Not After : Apr 5 02:18:51 2025 GMT
Subject: CN=67e7588b-58f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:49:f7:27:68:7f:22:c5:44:96:5d:f9:ec:
c9:32:ee:e4:58:50:45:27:45:59:fb:ee:56:78:be:
d1:6e:df:dc:95:b6:f5:89:33:e9:11:e8:f1:18:a8:
c9:3f:43:bf:04:b9:6e:45:f3:d4:f6:73:09:3b:fd:
17:96:73:13:b2:eb:23:aa:86:3a:4b:89:f4:47:3d:
b1:71:52:02:36:b2:d0:28:3b:8d:0c:92:12:73:93:
ea:ec:c4:53:ee:b4:44:4c:2c:a5:fa:a5:4e:c5:80:
43:4f:4a:92:8d:63:d2:63:05:7f:72:7a:a4:56:2b:
79:7d:c9:82:28:c4:9e:95:38:9c:fa:bd:b9:2d:14:
8a:02:be:71:dc:04:35:d0:b2:ee:f0:27:76:71:ab:
60:e5:06:d2:6a:3f:6a:a5:d4:e4:61:ba:1b:46:ba:
c5:dd:17:df:6c:8b:7a:59:44:f9:47:4e:53:c0:6a:
6b:01:0d:1b:e8:01:d4:4a:fe:27:1e:0b:d3:27:06:
97:18:66:e1:df:e4:f1:a1:54:4a:b0:b6:42:8c:14:
20:df:c7:81:de:28:94:ea:88:f8:ae:07:34:c1:88:
79:f3:fe:06:ff:cb:52:e5:fc:3e:84:f6:cc:6b:f2:
d2:2c:4a:b1:93:69:7d:a4:30:23:05:d9:c4:06:1d:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:48:B4:0E:CC:DE:D5:B4:E2:4E:6B:90:99:10:BB:7B:2A:7B:FF:9D
X509v3 Authority Key Identifier:
keyid:F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:16:3c:ea:55:c8:13:92:46:db:51:81:f1:22:f1:a8:41:80:
36:75:48:c4:1a:81:4d:33:ad:03:19:e1:36:3e:06:40:10:90:
a6:7e:11:88:38:52:a3:57:47:1b:77:f8:fe:5f:3b:07:35:8f:
63:5f:c2:22:77:3e:cc:7c:0b:3e:f1:4e:da:c6:59:fa:c9:59:
02:b0:1b:f9:a5:0f:01:f8:14:8f:bb:cf:23:5c:d1:9c:4e:9b:
f6:44:f3:96:3b:ab:f9:4e:6f:7a:20:e9:50:74:47:0c:8b:87:
14:c3:3e:0c:f0:7d:47:8a:87:5f:93:5f:11:53:b7:1d:c1:88:
e5:1a:90:3a:f8:8d:9d:63:36:55:11:88:33:99:1c:1c:5b:41:
cd:96:39:96:a3:6d:a9:cf:a8:c9:e0:1d:1f:05:f2:ac:5d:15:
fd:cc:7c:c2:fe:c6:89:0e:bd:1f:29:ea:a1:e4:51:b9:54:27:
26:d4:49:e5:43:cd:82:66:65:d7:ee:59:7c:d7:c3:36:b0:c4:
f1:1c:9f:bb:db:b4:76:f5:57:fa:a5:ce:b5:8c:5f:89:1a:05:
2b:d8:1f:68:af:15:15:56:53:33:9c:83:de:56:52:96:c4:e9:
6d:67:1b:24:9e:37:2a:fe:7e:9f:6d:22:36:37:e7:b2:cb:c3:
63:45:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:13:03 2025 by rpki-client