Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json)
Hash identifier: wxCPqxeoakAKswOWi2UThEfd5gGLQvQ34xVayf8ydsM=
Subject key identifier: E4:7B:19:50:E6:CF:C7:84:20:41:1C:D4:7D:49:00:CB:8C:5C:EE:4D
Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Certificate serial: 07B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
Manifest number: 07A7
Signing time: Fri 28 Mar 2025 21:30:29 +0000
Manifest this update: Fri 28 Mar 2025 21:30:29 +0000
Manifest next update: Fri 04 Apr 2025 21:30:29 +0000
Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: IXxnMuoco1H2aWkmksGhI92P0f/5+PeQok+lpHj7/Go=)
2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: 0UTI8vBXyFaaaPE8GDLKNFY+lSRTHbfC3s12YcpVQog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1972 (0x7b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F75E9
Validity
Not Before: Mar 28 21:30:29 2025 GMT
Not After : Apr 4 21:30:29 2025 GMT
Subject: CN=67e714f5-4a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:a0:05:59:06:65:b3:6b:68:5d:2c:85:0c:
81:57:3a:6a:09:ae:f6:9a:cd:57:3d:e3:f8:d0:07:
2c:27:68:7d:45:0d:e7:fc:d0:74:28:bb:1a:cc:a6:
c8:05:98:f1:db:05:27:eb:b3:c0:d3:72:b9:27:63:
3d:59:2f:c1:a0:01:4b:3c:3e:46:60:e2:ea:60:92:
a9:5b:ac:98:b1:60:e2:47:4e:65:eb:a0:9c:96:d9:
34:db:9c:b5:43:79:09:cd:fc:84:1b:36:be:e9:7c:
fd:9a:df:5a:c2:87:5b:84:7b:72:5a:e4:6f:68:6d:
ce:dc:05:d7:59:0e:d8:2a:8f:60:d3:4e:24:4d:4a:
8d:91:ed:78:7f:0f:e0:af:d4:bf:bd:b3:01:65:0a:
32:49:42:c1:a0:1f:68:84:a4:26:4b:9d:0f:e3:7b:
fa:d3:18:c4:1d:09:b5:bf:e3:b9:20:6e:bf:9a:25:
a9:e3:8c:63:48:f1:87:4f:54:06:10:d9:06:ee:6a:
da:2d:44:bb:d2:3c:a3:23:0f:8e:b5:52:fc:48:87:
9d:bc:2c:e2:1d:20:b3:d6:d2:b5:38:53:32:44:8d:
54:e2:c7:6f:2e:79:94:2f:b8:11:d8:e1:18:10:b1:
b9:14:1e:86:11:00:f2:e9:0a:ad:02:21:58:03:50:
f8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7B:19:50:E6:CF:C7:84:20:41:1C:D4:7D:49:00:CB:8C:5C:EE:4D
X509v3 Authority Key Identifier:
keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:89:d9:09:77:99:0f:72:c3:0e:23:44:8a:a9:ab:70:87:c4:
34:a8:9d:6c:93:9a:ea:dc:52:0a:52:a0:f2:e9:93:5e:12:98:
94:f3:08:f0:a5:45:c8:0d:27:c5:68:9c:09:c1:49:eb:99:09:
8d:8f:35:bc:7d:46:50:6b:44:67:f1:04:c0:0d:df:a1:17:dc:
b8:a5:00:58:fc:a6:a0:19:d0:06:9b:86:96:b9:51:cb:a8:c2:
8f:4c:0b:72:01:11:cf:5f:11:6f:19:51:57:5e:90:e1:70:e2:
1c:fb:e2:9d:f2:8d:b8:27:6a:aa:c9:3a:0d:bd:05:f2:b2:a0:
00:44:a4:07:9e:1b:d0:ca:ba:0e:59:4c:98:75:01:3e:d2:ea:
ca:ed:04:4d:7c:3f:86:a4:b1:1b:8e:1d:de:ea:01:00:d8:ff:
ce:4c:b2:34:23:58:1d:91:07:3c:33:f3:a5:f9:e2:6b:e4:e9:
88:f6:89:88:49:03:b8:55:b4:e2:88:79:10:4f:66:4b:9a:0b:
d0:f4:88:eb:88:4b:c0:86:24:ec:70:ca:6d:f8:df:e5:86:5a:
d0:91:fb:da:14:d7:7f:9f:8a:23:a6:d9:87:b8:00:e3:72:ad:
0b:eb:c9:68:77:c2:0f:58:fc:13:61:bf:59:8c:12:25:8d:13:
dd:c4:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:12 2025 by rpki-client