Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
File: oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft (raw, json)
Hash identifier: 0uD9cpFAVeq8+3zzdUp0f6xGSzc0Aq6eZqkP6RhPx38=
Subject key identifier: F9:AE:14:F8:8F:FC:BC:A1:7D:5D:17:8E:F9:63:F0:F3:44:D2:F7:C0
Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
Certificate issuer: /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
Manifest number: 023F
Signing time: Sat 29 Mar 2025 02:07:19 +0000
Manifest this update: Sat 29 Mar 2025 02:07:19 +0000
Manifest next update: Sat 05 Apr 2025 02:07:19 +0000
Files and hashes: 1: oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl (hash: udLWU0JTFmIgWjdclyykkjtGg+/JdbAyPAoc4YMQSDM=)
2: 929D0EB616A611ED86A3EF0CC4F9AE02.roa (hash: 7zo0d8WdBwFw00aoFQkrW7v2ow8E9G0bE4Wwabr7enI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6D55
Validity
Not Before: Mar 29 02:07:19 2025 GMT
Not After : Apr 5 02:07:19 2025 GMT
Subject: CN=67e755d7-8de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:00:47:cd:73:24:b3:14:4f:94:68:30:1d:
59:55:4e:2b:64:b5:11:17:6d:a6:bf:f1:e4:67:a4:
20:7a:e8:37:6b:42:1c:aa:7b:e1:92:86:ab:14:50:
20:4a:9a:b2:6f:66:1c:03:f5:80:ce:2b:9e:10:3b:
f1:da:95:74:51:a3:4c:11:d9:a5:9c:f7:e8:24:bf:
31:af:ae:98:e5:8d:62:66:c1:b1:79:ab:ab:a4:0f:
f3:bf:06:ac:3d:21:8f:cf:59:38:95:2f:63:af:e8:
0f:f7:5f:5d:19:44:b8:1f:cc:74:c7:19:e8:ff:57:
2b:85:33:0b:f1:56:de:bd:ec:01:f2:54:03:92:0d:
72:9e:b7:2e:59:d0:55:4d:1e:69:e5:89:c9:84:9c:
27:1c:f1:33:3c:67:1e:89:f2:f5:88:c1:f5:d4:66:
a3:a0:fb:9a:b6:5a:ba:a4:ed:95:d5:f1:0c:e7:70:
a3:9b:b1:7e:80:19:61:e7:af:1a:d4:8e:40:52:0b:
07:2b:17:d3:c4:0a:0d:32:a8:fb:be:d7:94:f8:89:
69:8f:e9:16:18:93:c9:59:63:e1:bf:02:4c:3b:1d:
46:51:35:4a:9d:46:46:01:4f:89:60:71:9f:25:92:
38:89:ff:dd:79:12:c0:60:c4:be:2a:52:52:40:7e:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:14:F8:8F:FC:BC:A1:7D:5D:17:8E:F9:63:F0:F3:44:D2:F7:C0
X509v3 Authority Key Identifier:
keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:0f:28:2c:c1:05:a8:05:b8:b5:e3:c8:6e:74:78:34:de:18:
df:ce:d7:6a:16:7e:b8:19:95:94:bb:be:36:16:b0:4a:a2:16:
28:c9:80:96:c8:8e:56:d8:a7:cb:ce:03:cb:3e:a1:2e:5d:f9:
26:0f:d4:c0:ad:4d:5f:7d:8e:9a:55:2f:34:0e:65:0a:a0:c3:
30:61:90:f8:fe:df:40:92:15:83:e1:51:63:a1:95:59:76:de:
64:95:52:92:e9:77:f4:91:31:a8:1e:1f:03:0a:fe:df:57:a2:
30:5d:d0:99:b4:c7:e3:1e:92:d4:3c:20:12:f8:64:f0:38:c7:
57:fd:6c:c3:c0:25:6c:57:ee:85:72:fb:a9:90:fb:d4:22:08:
01:6c:76:a3:21:4c:65:7b:7e:9d:93:ae:25:ab:4c:88:30:92:
2d:32:52:74:a9:b1:67:19:c4:42:be:97:2b:7e:98:fb:8d:91:
0e:cb:5d:e3:b8:41:da:00:5c:2e:9c:8e:12:49:96:04:6b:67:
c5:f8:11:94:ff:20:d0:11:3d:35:2c:bb:64:7d:4c:04:f1:7a:
3c:3a:fa:e0:7b:76:14:28:19:9c:4f:73:69:20:61:25:e3:4c:
9b:f6:7b:12:5b:b7:a8:4e:60:61:b0:47:a1:1b:79:9c:09:72:
48:a3:46:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:25:43 2025 by rpki-client