Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json)
Hash identifier: nc9LpjV/VnIUwWU/3bX+IsLFffk7ISuotQ1/NiuMcCs=
Subject key identifier: 43:1C:D9:97:AE:34:02:F8:37:06:AF:DE:9E:54:E5:18:4D:FC:63:61
Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D
Certificate serial: 0D5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
Manifest number: 0D54
Signing time: Fri 28 Mar 2025 18:08:02 +0000
Manifest this update: Fri 28 Mar 2025 18:08:02 +0000
Manifest next update: Fri 04 Apr 2025 18:08:02 +0000
Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: zTJ31gCQjgPZ5VWPOyxh6mXAkL1FJC1j1tnCahdWg9c=)
2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: YVUIxsB3E3XvSbRByHJIlW/SMSZ9WdbizIM0/QfshuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3418 (0xd5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC42A
Validity
Not Before: Mar 28 18:08:02 2025 GMT
Not After : Apr 4 18:08:02 2025 GMT
Subject: CN=67e6e582-7e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:be:e3:d9:5c:58:fa:29:7d:7a:4a:b6:6c:
fe:71:5a:54:1a:42:a1:84:1c:6e:cc:d5:0c:96:17:
25:cb:9e:91:dd:d2:7c:4e:cf:61:85:88:63:a5:ea:
3a:16:68:28:44:12:b8:1d:19:b6:58:65:eb:18:44:
af:0a:68:d1:98:40:c2:2e:b9:b6:ec:cb:68:9c:f0:
7d:78:76:9c:82:cd:5e:ff:2c:00:85:dc:1f:aa:bb:
2f:5d:e6:b1:cb:23:f0:8e:a7:3e:7d:d9:53:74:3e:
3b:60:24:3e:9a:b2:72:22:40:3a:2a:5a:1f:02:24:
63:92:bc:ea:57:06:35:bb:3c:38:dc:1f:06:75:b2:
52:b4:c2:af:ea:ba:fb:08:4c:fb:cb:b1:f5:a2:78:
e4:b7:6b:e1:ea:6a:f1:dd:84:3a:48:e4:c0:d2:97:
ff:44:f5:6d:0e:9d:45:aa:cb:15:08:60:26:4b:5e:
9d:ff:c0:58:3e:69:2b:6a:a7:3e:53:f5:55:ae:6a:
90:c4:f2:15:f8:86:b3:e8:1e:b9:9a:e9:8a:60:ce:
9e:01:4c:17:e1:97:4b:20:3f:05:15:e9:54:22:3e:
23:8d:23:e2:6d:1a:ab:41:86:a0:e9:4a:81:9e:5a:
58:12:f3:87:83:c2:67:77:d3:1e:6f:b0:06:13:51:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1C:D9:97:AE:34:02:F8:37:06:AF:DE:9E:54:E5:18:4D:FC:63:61
X509v3 Authority Key Identifier:
keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:d4:84:a5:70:ea:57:ab:86:44:9f:56:7b:09:90:90:72:9d:
83:75:41:1a:7b:a8:8d:66:a7:ea:9e:d2:2d:d8:79:f1:0a:7b:
26:39:4c:dc:8f:30:76:12:33:14:50:92:97:c2:c3:21:25:6a:
3f:e0:93:fb:91:0f:a9:36:7d:4a:1e:09:58:28:e1:f5:5c:85:
72:00:d8:8d:18:f1:c2:a4:fd:e8:b4:c9:2e:09:5b:3e:f1:dc:
65:a1:7d:d2:07:4a:30:f8:17:b2:54:f1:14:24:03:84:be:d4:
34:1a:04:ea:11:34:0a:b9:05:0a:c0:1e:be:f4:33:77:6a:f3:
33:17:88:f3:dc:c3:9d:7d:d1:2a:90:b7:8c:03:96:a1:0d:7d:
d3:20:e2:33:22:ad:3e:3c:4e:40:ea:06:9c:ad:4a:bf:22:96:
7b:10:10:fc:8f:c3:50:23:4e:4f:67:be:68:54:c7:01:de:8b:
b7:4d:46:06:ec:0b:ea:78:f0:2d:d6:c2:50:4f:a8:ab:13:8c:
e1:3e:6a:bc:95:66:ce:b5:20:76:84:9f:d8:07:06:06:10:c0:
86:e5:95:e0:eb:c0:53:72:72:c4:38:a5:39:fe:5b:40:4c:3e:
ec:0b:52:76:0a:2d:e3:f2:1a:7f:97:d5:61:24:ee:63:a8:ec:
32:2d:f2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:19:36 2025 by rpki-client