Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json)
Hash identifier: DC6OkIpXNoxQ78jG3yscNiQjZ55UcCBoCgoT41rQBt0=
Subject key identifier: 06:4A:3F:51:B3:93:C8:C1:83:FD:F9:B3:87:7F:3E:7C:B4:90:8F:B5
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Certificate issuer: /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial: 064E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
Manifest number: 0644
Signing time: Fri 28 Mar 2025 22:46:58 +0000
Manifest this update: Fri 28 Mar 2025 22:46:58 +0000
Manifest next update: Fri 04 Apr 2025 22:46:58 +0000
Files and hashes: 1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: WXNi/sKotY1WK8b4qar0tr+gzqG6KqW3CAgxHUKIZ5U=)
2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: BEroe25M20UrAiw8SyEvv6Pk5mXlFp9GQ+z/Vqtvaw0=)
3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: sdo5dB4yf8kL9E/pHn7+OshW8DyNii5atqW56lYezBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1614 (0x64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7222
Validity
Not Before: Mar 28 22:46:58 2025 GMT
Not After : Apr 4 22:46:58 2025 GMT
Subject: CN=67e726e2-9017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:c9:f6:50:6a:63:a9:6c:0a:7e:82:40:3c:
2f:e5:f7:b8:a2:8c:c5:84:53:f2:18:a1:2a:ac:2e:
7f:89:80:ed:5a:98:95:ee:f8:ce:0e:44:d0:68:a7:
37:40:e0:56:58:e9:fb:44:8e:2c:eb:78:c1:8d:0b:
ec:a5:d3:ce:47:3b:a7:8b:75:54:17:9e:ef:4f:ce:
22:c7:70:c0:16:83:d6:9b:19:7d:49:3c:f9:5f:64:
7f:98:12:ef:ac:b3:34:a3:a4:34:5c:9a:c8:5d:a6:
60:86:17:9c:d0:85:f2:ba:c8:d1:30:86:96:8d:32:
ef:79:00:b2:a3:ed:87:55:59:1e:71:e3:6b:38:a8:
50:b1:03:16:e9:e1:f9:c1:df:64:ad:88:47:5e:1d:
f7:1a:6f:3b:80:eb:c4:bf:db:d3:2e:95:a0:7a:73:
6c:aa:d6:92:f2:59:e1:35:ac:58:c0:fb:5d:1e:cf:
dd:5d:29:68:d1:76:ae:27:e2:2f:31:c2:a5:d4:a4:
2e:7d:06:93:fa:5b:44:a1:f9:44:c7:21:9c:86:12:
90:7a:07:7f:f2:61:c0:2b:53:42:b6:3c:36:3b:30:
48:19:df:2d:00:21:80:29:80:30:ad:7a:de:86:6c:
a0:0d:dc:10:b0:a6:dc:69:fe:bd:7e:3c:b5:48:a2:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4A:3F:51:B3:93:C8:C1:83:FD:F9:B3:87:7F:3E:7C:B4:90:8F:B5
X509v3 Authority Key Identifier:
keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c8:7f:64:2c:d5:60:8f:2b:84:69:26:7f:bb:5d:75:6b:8c:
8d:69:65:98:ef:49:57:93:77:3c:27:b4:7e:d7:03:b3:57:bb:
9b:d5:4a:0d:4b:cf:90:99:3f:c8:b5:2c:61:14:06:35:4e:0f:
0c:8b:b3:6e:ef:2f:29:6a:9e:78:2c:b7:65:e7:e5:e1:83:97:
84:96:47:7f:69:a1:42:6e:a2:4c:98:31:f5:30:0e:4e:07:aa:
b0:d2:24:8c:d5:fa:28:0a:e6:5b:d6:3a:f6:01:6b:ce:5a:ba:
20:b2:3e:0b:0a:bb:31:6b:d2:29:88:64:63:4d:b0:5f:66:8a:
cb:4e:4d:32:35:21:03:50:87:57:e1:3e:02:3a:43:80:5f:ed:
f0:e3:2f:19:e8:12:81:35:b0:2f:50:b3:34:d0:e5:98:32:bc:
7f:50:8c:ac:96:3d:22:01:d2:0a:01:c0:a0:31:f0:f4:01:79:
0b:03:61:4b:fd:9e:c9:c7:d2:bc:3a:07:50:44:d3:30:50:b8:
78:aa:50:ee:eb:19:03:ef:03:17:e2:be:35:85:7a:d8:12:40:
a7:1a:ce:71:4b:5b:c3:ea:28:52:af:ff:96:2c:b9:07:3a:a1:
29:20:b1:ec:1f:59:2e:7a:03:ca:bc:74:dc:a1:89:d9:a7:f1:
29:8c:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:12 2025 by rpki-client