
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
File: limscQ0-IdWZGSjVmk22VBGpa_8.mft (raw, json)
Hash identifier: 5i7WQ+4q0kBFQ7X1d7OWIJWPZxM9FCpRdOaOJvxHLiA=
Subject key identifier: CD:2D:0E:B1:64:8C:E7:21:D1:C2:61:D0:51:66:7C:20:0C:B3:E4:A8
Authority key identifier: 96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF
Certificate issuer: /CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF
Certificate serial: 0C18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
Manifest number: 0C0F
Signing time: Fri 28 Mar 2025 18:47:01 +0000
Manifest this update: Fri 28 Mar 2025 18:47:00 +0000
Manifest next update: Fri 04 Apr 2025 18:47:00 +0000
Files and hashes: 1: limscQ0-IdWZGSjVmk22VBGpa_8.crl (hash: mw+EGYdOGq3IpnuBNeZHmrhhOfnTlTacYdzkv19e6Os=)
2: 9CDAADC2091E11EAB375615BC4F9AE02.roa (hash: cTVFkw9EC/7+0AhzRm+1VoJiYeWjlXwK0sbhIidN0dw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE6E8
Validity
Not Before: Mar 28 18:47:00 2025 GMT
Not After : Apr 4 18:47:00 2025 GMT
Subject: CN=67e6eea4-553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bd:22:08:a4:09:87:a0:98:25:05:eb:51:34:
30:a5:86:e8:7b:5e:69:4b:0f:2a:ed:be:e2:6c:88:
86:c0:ff:e6:a0:3f:dc:fa:08:bc:5d:7d:f7:70:fb:
43:52:65:4d:87:52:95:bb:0e:62:e0:f3:76:16:28:
d2:78:11:b3:f3:2e:5e:f8:32:4c:b9:30:6c:d6:56:
f0:9f:29:f8:a0:3a:91:ff:2b:aa:12:4b:bd:95:66:
04:2d:cf:00:35:e9:5d:e5:8d:04:17:fc:71:58:b6:
a5:d2:97:c7:0c:c3:b2:e4:e9:58:ba:ca:a8:fb:33:
e6:0a:30:6f:aa:1c:9d:85:d4:e2:5d:48:41:3a:32:
f5:5a:68:58:23:c7:b7:2e:ae:c9:db:70:46:63:db:
ce:96:52:18:2d:d9:99:c7:f6:03:40:80:69:cd:4b:
d2:f6:c1:33:c4:2a:be:f1:86:67:25:3c:1c:24:63:
8a:97:61:2c:dd:99:a6:c9:71:d8:eb:fd:df:a2:52:
69:35:8a:62:ff:bc:9f:9f:60:78:6c:1f:65:01:56:
43:de:67:a3:30:be:44:03:bf:3d:c1:5e:c4:b6:5c:
d2:10:84:33:47:a1:ff:12:dd:25:71:17:43:f9:29:
30:36:65:8f:68:79:a8:04:bd:c1:10:e8:1e:7d:f5:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2D:0E:B1:64:8C:E7:21:D1:C2:61:D0:51:66:7C:20:0C:B3:E4:A8
X509v3 Authority Key Identifier:
keyid:96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3a:a5:01:ea:b0:b3:f2:72:0f:b5:6d:e8:38:cb:90:14:f7:
91:50:8c:6a:91:33:12:68:79:03:bf:2b:2e:0c:32:14:6e:c6:
6d:6f:bb:5b:83:cb:8d:93:c4:e1:b8:5f:3d:9c:1e:dd:0f:f2:
3b:6a:8e:ca:25:45:54:ff:ae:9e:c9:1d:37:77:70:93:dc:c8:
20:ca:5b:fb:5e:58:12:4a:58:59:49:51:e9:f1:02:be:8a:90:
d7:eb:c4:59:6d:c2:0b:0a:71:47:be:56:29:da:3b:8f:80:9b:
7e:69:0e:f8:61:15:d1:76:0d:06:09:2a:58:aa:53:9b:87:96:
cb:00:82:c2:06:58:3d:e9:ce:cb:8d:9f:87:fb:5f:bb:2e:33:
27:1b:0b:18:76:2c:96:b1:4c:85:a8:8c:72:38:ef:b2:1f:7c:
e6:65:1e:00:8f:b7:b0:f7:71:9f:60:b3:9d:58:cd:b3:df:35:
37:3b:16:28:a5:3a:00:0d:cf:cb:71:0e:31:65:cf:da:91:d3:
ea:7c:b2:50:32:f8:5c:7e:ef:c2:b5:e2:03:e1:a1:92:8b:8e:
f9:a1:79:f4:61:ce:17:75:48:35:87:64:55:b8:0b:9a:23:8f:
8b:8e:69:5d:cf:2d:57:f2:1f:14:5a:78:68:4e:08:22:47:cf:
a2:0a:31:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:59:08 2025 by rpki-client