Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft
File: se7FntVhoNs9fUDDCvKrb-0pepg.mft (raw, json)
Hash identifier: IxKlaDxSEwspvy3iykfmLDS7HPVcTrnF234UIoA712M=
Subject key identifier: 0B:08:18:D9:40:44:9D:A4:C3:7F:52:90:5C:E3:2D:26:EC:07:98:96
Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98
Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98
Certificate serial: 075B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft
Manifest number: 074E
Signing time: Fri 28 Mar 2025 21:57:16 +0000
Manifest this update: Fri 28 Mar 2025 21:57:15 +0000
Manifest next update: Fri 04 Apr 2025 21:57:15 +0000
Files and hashes: 1: se7FntVhoNs9fUDDCvKrb-0pepg.crl (hash: z2ivb9qM09sV/tLiuXbNAkCemLCJBMoJTq1Vnz1CYB0=)
2: 69318772F69C11EFBD339C7FC4F9AE02.roa (hash: eFS1nhS/cjjP4D0ssaf1AaxH+1D33Vf2JZuqTy0/YEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883 (0x75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDA00
Validity
Not Before: Mar 28 21:57:15 2025 GMT
Not After : Apr 4 21:57:15 2025 GMT
Subject: CN=67e71b3b-ad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:e0:b1:cb:9b:13:5f:84:fe:05:6c:28:5e:
6a:5b:e0:ce:47:f5:47:d3:99:fb:99:ca:54:34:35:
01:1f:e3:a9:49:62:7f:96:4a:f5:df:b5:c3:7b:61:
f3:8a:d3:fd:22:8d:d3:7e:1e:5b:88:e6:02:47:7d:
cd:de:d7:a9:3c:22:44:c6:e4:64:55:05:41:0b:37:
42:98:36:14:40:67:c2:f6:0e:e9:3b:21:fd:9a:e3:
9b:6a:58:d4:64:d4:bc:f4:8f:71:74:92:79:1b:eb:
e1:7d:0c:fe:f7:ec:17:cd:22:d3:cc:21:06:2d:3e:
1c:54:cd:15:37:d3:26:6f:c3:ab:ed:39:48:15:70:
45:27:43:2e:09:df:8e:e9:4b:1b:33:43:37:86:aa:
03:39:03:81:f4:e9:88:05:3a:e2:69:13:51:cc:7a:
9d:51:95:2f:72:57:4a:c7:d5:2e:4b:87:27:2a:03:
d1:5b:ab:ec:ec:31:58:97:85:20:ec:e5:ca:ea:28:
1e:0f:44:c8:f2:3d:3f:68:39:fe:ef:5c:85:c4:df:
0a:28:62:c1:d7:f1:86:33:e2:2f:aa:83:69:01:65:
af:3e:43:c9:89:85:e8:ec:07:36:21:aa:53:8f:76:
48:e2:fb:85:98:41:e3:2b:e6:3c:99:57:d7:04:c6:
44:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:08:18:D9:40:44:9D:A4:C3:7F:52:90:5C:E3:2D:26:EC:07:98:96
X509v3 Authority Key Identifier:
keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d1:33:c4:f0:88:e9:34:c9:39:f9:d7:67:e3:e4:2f:ec:16:
23:c2:a0:2b:88:6a:bd:fa:45:cf:fc:92:c7:1d:87:d3:2b:d0:
57:cc:78:d0:7b:ff:93:29:6f:84:eb:f1:fb:63:87:80:11:c2:
4b:bc:15:b8:32:92:82:29:b0:96:1e:dc:b8:cd:b0:7b:20:12:
d9:2e:28:80:e3:60:6d:60:7f:a6:b4:b7:cc:36:0b:ba:6a:56:
77:12:b3:f4:a5:27:54:36:81:2a:de:1d:e3:b4:6d:44:08:66:
23:2a:1b:76:39:4a:62:29:7b:21:7b:7c:d8:14:70:b1:a0:eb:
6d:1b:d5:9f:62:f3:7e:85:73:03:56:b0:ca:b2:97:06:a7:bc:
45:79:fe:29:e1:ca:66:97:e8:4a:3d:52:4a:fa:ab:b6:7f:d7:
dd:49:ae:b3:01:38:6a:35:52:02:6b:94:d5:eb:ed:66:65:34:
63:36:54:aa:08:dd:9a:d9:cf:71:6c:ea:49:49:c8:75:86:07:
1a:ae:18:a4:e7:0c:c3:3e:d7:4b:40:09:b6:6a:cf:fd:04:b7:
4a:26:f5:e9:86:94:c9:be:27:d7:77:5b:3a:b5:ed:fe:89:be:
bf:95:3c:3e:f8:24:ba:f5:7c:19:bb:3e:59:ca:1e:33:39:d6:
91:50:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:46:54 2025 by rpki-client