Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json)
Hash identifier: ZhB8gDHhybeqVi8Wux7Sm4Dr0BPkB/4WzTPg06PIGbc=
Subject key identifier: 48:24:96:14:A9:26:66:4B:9F:92:A2:7A:5C:E0:0D:02:DC:20:E7:8E
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
Manifest number: D4
Signing time: Sat 29 Mar 2025 00:37:13 +0000
Manifest this update: Sat 29 Mar 2025 00:37:12 +0000
Manifest next update: Sat 05 Apr 2025 00:37:12 +0000
Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: jubptEOYBMvFbFH9R1B8j6xGatzoeGjrs8Z5EuDj2j4=)
2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: zI9Q5YVnQd4VkVi+XQs5CAmw/xkd9rw0TUnzDmPGpmw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC
Validity
Not Before: Mar 29 00:37:12 2025 GMT
Not After : Apr 5 00:37:12 2025 GMT
Subject: CN=67e740b8-62cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:a4:77:45:a8:2d:48:a3:05:23:1e:dc:73:
df:d1:84:1b:8d:cf:79:25:12:1d:e7:cc:fb:9d:19:
2e:f0:a5:32:e9:ff:c6:f9:1e:a7:84:b7:65:db:70:
3c:f1:09:5c:05:7b:e6:88:60:eb:8d:02:63:36:24:
23:b7:14:40:d8:ef:5d:f5:29:97:53:38:3e:fe:a7:
d7:fc:4c:61:d0:ad:46:1d:3e:0a:74:54:61:8e:66:
58:77:30:f7:a1:99:1a:13:c2:5c:93:35:d1:4e:f5:
d0:6f:49:46:74:a6:80:76:85:4a:89:45:2b:82:35:
c7:37:df:cb:cb:eb:f8:7c:be:40:dc:17:5a:fa:d1:
f0:36:d6:02:07:b3:18:97:cf:c2:40:0c:46:c7:8c:
bc:34:d9:8d:25:b3:21:91:61:5b:b6:9c:7a:a0:9c:
8a:44:27:40:20:5a:33:23:23:a2:7f:6f:da:03:91:
2b:de:d9:71:8e:63:a7:b5:6e:0c:07:36:ed:38:cc:
12:7c:01:0f:9e:02:18:3a:c2:e4:df:e3:69:fc:58:
d0:65:bd:e1:79:e5:e3:57:af:e0:65:7c:1b:cb:60:
e0:26:76:53:d3:02:75:c7:e8:82:94:aa:1a:a9:45:
d4:8d:e4:18:51:f9:15:c7:81:5b:b6:7e:ee:c1:a4:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:24:96:14:A9:26:66:4B:9F:92:A2:7A:5C:E0:0D:02:DC:20:E7:8E
X509v3 Authority Key Identifier:
keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:61:76:7c:2b:06:c7:5a:1f:87:76:e3:e2:b0:e1:cc:7c:0c:
bf:20:2c:90:27:7b:79:d1:7e:09:8e:3e:a7:de:8a:e7:4b:7e:
81:9f:3e:0d:c3:40:d8:3c:db:26:94:d9:47:fb:0b:25:0b:e3:
42:fa:d3:02:86:7d:58:43:aa:7e:0a:90:72:f7:85:1a:9b:4a:
04:b1:fa:90:f2:27:4a:0b:7e:6c:95:79:53:a6:ea:7d:47:97:
0b:bb:40:a2:2e:ef:50:ac:25:d0:e1:09:95:e9:39:44:7d:5a:
fd:22:f5:5f:c9:ed:c0:fc:c2:dd:d4:e8:4c:a2:6c:0a:97:5f:
f7:ba:aa:c2:7d:2b:f1:8e:f2:e8:d1:04:6b:73:67:b9:00:4a:
a1:09:ea:3c:ca:77:b4:3e:29:7f:79:e2:4f:02:de:4f:ba:61:
d6:35:2c:60:3b:94:a0:18:b7:10:41:46:82:3a:99:0f:40:52:
9c:f4:21:7a:34:52:92:88:53:7b:2a:bb:c9:67:a8:d6:06:b4:
05:82:1b:d5:27:70:12:de:9b:2a:16:e4:6e:da:11:f0:0a:ba:
32:35:48:b3:f6:67:7a:1d:14:9f:84:ce:f7:15:7a:0b:5d:5e:
e0:71:50:19:2c:1d:30:42:d9:63:d0:10:d6:44:19:8c:7a:13:
9b:48:88:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:42 2025 by rpki-client