Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft
File: NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft (raw, json)
Hash identifier: imsRMO7LbDByvuH/PwDQ91WUjiaeKzpseFK1Kp7Tx9o=
Subject key identifier: 7E:2C:AD:AF:2F:B5:BD:93:3E:5A:2E:1C:2C:EC:DC:CD:E7:D5:54:73
Authority key identifier: 35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B
Certificate issuer: /CN=A91833A5/serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft
Manifest number: 01C4
Signing time: Tue 06 May 2025 04:38:11 +0000
Manifest this update: Tue 06 May 2025 04:38:11 +0000
Manifest next update: Tue 13 May 2025 04:38:11 +0000
Files and hashes: 1: NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl (hash: gzL+9D/BglvA2mc2yy6qd4fo5WW1eb5FyvrsoUno6FE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91833A5, serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B
Validity
Not Before: May 6 04:38:11 2025 GMT
Not After : May 13 04:38:11 2025 GMT
Subject: CN=68199233-0a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:c2:f7:83:b2:c0:09:33:63:f4:3e:0f:2f:
4e:4d:16:61:d6:fb:e6:dd:d4:52:68:5d:ec:48:c6:
90:79:11:23:90:14:33:aa:ed:8f:d5:66:07:58:d2:
c1:8b:da:77:97:06:14:10:fc:64:df:21:cb:1b:f5:
38:26:ce:43:a4:ef:f9:1f:e4:14:70:0c:ed:5e:5a:
45:b3:4f:5e:54:a5:04:69:1d:05:69:f4:09:fe:fb:
75:a8:1d:6a:cc:3f:d6:8b:e3:2e:ee:7c:4c:26:df:
0f:1a:16:84:73:b6:eb:23:4b:11:fd:92:5c:23:e6:
5a:dc:c4:d6:49:02:fe:08:18:74:63:1f:6e:50:7c:
d9:95:9b:e1:42:8b:ed:c5:ec:0a:61:bb:ae:85:b6:
10:e8:18:1e:52:28:0a:49:ff:14:61:10:db:f3:98:
2c:8c:be:7a:36:aa:81:79:cd:e5:a8:b9:a1:45:aa:
ff:4b:b7:87:41:a1:2b:5d:4b:9e:c9:3c:e7:7c:64:
bd:d3:48:6b:d1:f3:62:82:3c:d5:7f:fc:48:60:86:
b2:b2:77:ab:0e:2e:97:33:09:fa:c4:8f:70:da:c2:
23:e0:3f:e5:b7:cb:5e:d9:00:d2:8e:c0:d9:51:28:
2e:0e:28:4a:a7:d1:b9:1d:f5:a1:25:4b:37:e4:e3:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:AD:AF:2F:B5:BD:93:3E:5A:2E:1C:2C:EC:DC:CD:E7:D5:54:73
X509v3 Authority Key Identifier:
keyid:35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:1e:e2:bb:04:ca:f1:d9:ed:45:8d:ff:ae:bc:f0:08:75:e8:
c5:94:dd:f8:ff:7f:96:f4:95:29:05:cd:3a:e4:9f:37:43:59:
7b:dc:39:d3:13:61:b9:80:74:62:4c:2f:b4:af:31:96:ff:85:
ce:4b:ef:ae:02:13:fe:2e:5a:6c:45:18:49:a8:fb:4d:e0:3f:
3f:d2:cc:0d:d1:64:3d:35:17:48:e4:4d:8f:e8:50:e6:27:2d:
91:d6:d3:9e:c0:ed:1f:0d:db:c6:37:95:48:6d:e0:c8:a5:58:
73:a9:dd:3e:4c:48:dd:d4:e0:73:42:3e:a5:eb:e6:b8:69:d0:
1d:dc:a1:bf:42:6c:02:7e:8e:5e:bf:6a:d3:6d:c1:c7:24:e1:
ea:b4:00:dd:bc:ec:bb:5d:76:3a:23:a1:19:b4:83:c2:bc:28:
0e:c4:bf:23:cb:c8:09:76:4b:26:18:53:f3:ec:29:dd:a9:73:
38:9b:d4:66:55:e2:1a:34:d2:62:ed:65:93:9c:48:fb:7d:56:
1f:d6:ee:66:5f:51:3b:ba:be:f6:77:f3:f0:a0:09:c6:c2:fe:
98:ab:2d:cf:8b:c2:8f:55:74:16:ed:67:50:fc:40:eb:4c:71:
e0:37:d7:d8:03:eb:01:a1:07:96:90:1c:dc:a8:ba:aa:f9:da:
8a:2e:dd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:11:17 2025 by rpki-client