Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json)
Hash identifier: h4l/40kAbYVgEvbUOOv2GBFuq32DXZvhVYfxFiztYFw=
Subject key identifier: BC:87:99:61:74:BF:56:EE:88:DD:E6:44:A8:CD:E6:FD:B8:B7:01:46
Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
Manifest number: 025B
Signing time: Sat 29 Mar 2025 02:01:36 +0000
Manifest this update: Sat 29 Mar 2025 02:01:36 +0000
Manifest next update: Sat 05 Apr 2025 02:01:36 +0000
Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: gRRgqtHHvbq8a0eIbBFTb4DtlnERBl/poTq5dyrL9uQ=)
2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED5D9
Validity
Not Before: Mar 29 02:01:36 2025 GMT
Not After : Apr 5 02:01:36 2025 GMT
Subject: CN=67e75480-f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:2a:15:e1:dd:d0:d1:7f:65:6c:28:39:cf:
35:6d:e0:66:68:9c:53:86:b8:91:39:14:44:5e:11:
20:3a:16:33:39:b2:48:47:57:81:2a:27:f7:1b:a7:
3d:20:74:c9:54:66:7d:8a:f3:fb:b9:86:f3:0e:a4:
ba:91:19:d8:12:d1:ca:b5:fe:43:74:53:21:1b:18:
fb:0d:58:91:23:08:e3:1f:7d:c4:30:db:47:d0:92:
10:76:b4:2c:1b:af:52:dd:00:6a:9e:37:8d:20:4f:
cc:2f:59:f8:96:af:a4:93:e9:e8:87:46:33:4b:98:
b4:0f:97:c2:ee:d2:c4:53:6e:11:c6:da:ef:77:db:
80:b9:58:55:47:aa:fe:f6:91:0d:9a:94:fc:b7:8a:
c2:75:56:33:7a:f1:ed:7a:09:09:a5:b2:d6:30:69:
1e:cf:09:d8:79:57:6a:9e:f1:a9:6f:e4:6d:11:3d:
6d:df:cb:32:09:c6:90:bc:98:5a:d3:36:31:7a:c7:
9a:23:9a:a6:22:a5:b1:bc:45:da:0b:39:35:e4:42:
d2:6b:4f:48:5d:2b:fe:cd:0e:c1:35:09:f7:0b:0f:
25:ad:e3:f2:1a:da:dc:e3:89:69:45:ff:d2:4e:30:
f8:36:d6:fb:d4:9c:2a:4d:d3:8b:59:82:23:9c:05:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:87:99:61:74:BF:56:EE:88:DD:E6:44:A8:CD:E6:FD:B8:B7:01:46
X509v3 Authority Key Identifier:
keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:72:93:6e:ce:19:33:72:21:9d:8a:8c:15:52:6b:00:fb:47:
2c:1d:71:5e:42:42:16:26:87:a9:3a:e5:f8:b0:9f:95:9b:de:
df:3e:4a:bf:da:5d:e8:36:0e:71:21:70:2f:c1:8e:d1:d5:05:
36:85:c6:b6:e6:d5:53:4b:12:df:e6:c2:09:5d:27:c2:79:0e:
99:59:82:40:65:c8:f8:a7:52:31:40:9e:86:9f:46:31:19:39:
9d:40:44:93:d7:0b:3b:8f:ab:0a:df:cd:75:d4:8f:13:0a:49:
3c:34:ad:40:77:5d:28:c7:3e:51:8a:cd:5b:95:97:f0:bb:8a:
bb:4c:a8:25:07:74:36:b1:4e:e6:03:61:16:d0:f7:25:70:07:
84:ff:e5:d5:92:74:8f:1c:90:8b:18:c7:a3:88:dc:74:4b:fa:
07:40:70:b1:84:ef:b6:a6:90:42:a0:56:d3:cf:d9:e5:9a:c4:
b6:15:26:ff:e8:e3:89:94:ad:0d:98:47:1e:e6:af:e4:5c:0b:
94:e6:20:0b:49:1a:b3:a1:60:1a:6e:92:a2:a0:8e:b4:e2:3e:
64:6f:fc:2e:72:56:79:43:bb:43:fe:9f:44:1c:3f:92:3a:d9:
37:db:e3:60:1a:1f:85:28:cf:aa:af:d2:57:77:88:83:ca:58:
bd:ce:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:17:12 2025 by rpki-client