Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft
File: 8hTt1--NAG-Coif85lvF8-ZIo_o.mft (raw, json)
Hash identifier: u9y4dR+i9B4S0mmzhQmiasfjlbN7vJzEu+hsn4e7E9w=
Subject key identifier: A2:26:A3:96:07:FD:0A:9F:FE:D4:CB:8A:EA:38:67:D3:04:63:44:CD
Authority key identifier: F2:14:ED:D7:EF:8D:00:6F:82:A2:27:FC:E6:5B:C5:F3:E6:48:A3:FA
Certificate issuer: /CN=A91DBD27/serialNumber=F214EDD7EF8D006F82A227FCE65BC5F3E648A3FA
Certificate serial: 03EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hTt1--NAG-Coif85lvF8-ZIo_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft
Manifest number: 03E7
Signing time: Wed 21 May 2025 00:18:23 +0000
Manifest this update: Wed 21 May 2025 00:18:23 +0000
Manifest next update: Wed 28 May 2025 00:18:23 +0000
Files and hashes: 1: 8hTt1--NAG-Coif85lvF8-ZIo_o.crl (hash: EOp4RLVQNuigXfwN/3PDTZ3xLNhqRC8/OzfvzTAnWY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBD27, serialNumber=F214EDD7EF8D006F82A227FCE65BC5F3E648A3FA
Validity
Not Before: May 21 00:18:23 2025 GMT
Not After : May 28 00:18:23 2025 GMT
Subject: CN=682d1bcf-bd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:40:7e:15:2d:b6:7e:11:a3:72:5d:5f:f6:
3d:b9:de:cd:63:1c:dd:bc:ef:9f:bd:68:2a:a4:20:
39:f9:54:c1:da:cb:92:f5:16:18:83:15:1f:4a:7b:
7d:db:5a:61:ca:a2:60:8a:94:31:1d:95:18:e2:c6:
ca:29:a0:f3:6e:93:da:97:62:94:10:90:0d:b2:b4:
0c:80:2e:f4:0e:18:06:39:b8:f4:e7:ad:63:cf:f1:
1a:6f:d8:65:d7:cb:b8:55:32:1f:64:92:03:f3:01:
86:a4:6b:d0:1a:b0:7c:7b:5d:3e:30:19:8d:cb:15:
77:e4:79:ba:53:ac:bb:ad:26:f7:fc:1a:51:6c:2e:
a9:f9:0e:24:94:6f:99:0b:a7:9f:b1:9e:a0:6c:03:
49:e6:63:21:f4:fe:04:49:b3:e9:78:c4:7e:f0:92:
6d:f2:71:4f:3e:f5:4f:5b:d7:63:70:0a:a7:c8:2a:
4a:23:96:82:7e:5a:cc:ff:4d:e1:5b:64:00:b5:cf:
fe:78:7e:f0:5f:ca:a2:dc:df:20:95:c1:63:dc:d0:
6e:78:da:65:bb:69:cc:e2:46:20:0e:3c:ef:6d:00:
a7:86:98:ec:b6:31:df:65:21:27:bb:e7:f6:84:56:
80:cb:ab:23:8c:0d:c9:b7:6a:bd:26:f6:25:16:fd:
25:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:26:A3:96:07:FD:0A:9F:FE:D4:CB:8A:EA:38:67:D3:04:63:44:CD
X509v3 Authority Key Identifier:
keyid:F2:14:ED:D7:EF:8D:00:6F:82:A2:27:FC:E6:5B:C5:F3:E6:48:A3:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hTt1--NAG-Coif85lvF8-ZIo_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:78:71:a3:b2:40:53:f4:93:43:6c:ef:d2:83:0a:73:25:8d:
cd:71:d7:f0:43:5d:55:76:bc:e6:ac:05:83:36:ef:33:ff:ab:
a3:4f:ab:d1:7c:ec:fa:df:46:f4:66:97:2d:90:71:33:ef:94:
7a:5d:b9:77:b4:74:52:d9:45:eb:8d:3d:94:75:65:d2:d8:f6:
33:4e:ee:83:f0:6c:5a:38:0a:a9:b6:bd:90:d7:16:8d:ce:f6:
4f:9b:c4:54:5b:f8:ba:fb:ff:58:07:30:41:51:b5:38:01:8a:
45:af:98:d9:b8:f2:8b:a8:d4:6c:5f:78:34:b2:39:c4:93:e1:
6b:83:8c:08:41:be:02:4c:6a:a5:32:92:c2:3a:b7:0d:a1:4d:
89:90:2b:6a:5f:3a:68:06:41:f8:d6:9f:e1:26:a3:59:d4:98:
cf:d1:92:c3:2b:a9:05:2f:ac:22:cd:e1:27:24:98:97:74:a1:
01:55:ea:f0:41:16:68:d2:1c:7d:21:db:bd:e8:69:06:ec:d6:
ba:43:38:21:bb:d4:44:21:0d:47:3a:f4:f1:4f:44:34:11:53:
01:33:0e:41:a5:28:7e:88:17:45:3c:ed:3d:49:1b:e8:ca:a4:
3b:18:f4:1b:ab:b1:39:fd:46:5d:ef:cf:53:ba:f0:b0:47:9f:
67:88:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:29:29 2025 by rpki-client