Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier: dl+hK7D5Q0ziSWtsLYBRH1Ve490WvHItmRLKcyEDTwM=
Subject key identifier: CC:D5:5A:0D:DE:34:E1:A2:20:22:67:9A:82:91:13:9A:A4:F9:AC:33
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number: 0144
Signing time: Sat 29 Mar 2025 04:07:12 +0000
Manifest this update: Sat 29 Mar 2025 04:07:11 +0000
Manifest next update: Sat 05 Apr 2025 04:07:11 +0000
Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: U/c29vyJQxeObvv/5vu0xxO39xJlyErnDUaHkpKyQ8M=)
2: 70CD850071DE11EFA543C55CC4F9AE02.roa (hash: VTk/TnaWkWqlXiaCv1SPhWMrmq/k9L+YL6Xsj9+00fs=)
3: 18AE9CC0764C11EFB4346E73C4F9AE02.roa (hash: WtNK7x1fpi+f6NsDrFsZ9jPtOAmjd5SuohEBjapW1ik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA
Validity
Not Before: Mar 29 04:07:11 2025 GMT
Not After : Apr 5 04:07:11 2025 GMT
Subject: CN=67e771f0-c32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:80:eb:73:66:a0:b4:42:4e:22:11:37:3a:
c5:1c:ac:18:b5:89:d6:55:63:5e:6f:05:d8:b8:16:
6a:b7:58:23:15:b8:25:2d:79:06:41:c6:ed:26:a0:
c3:75:06:dd:6c:db:86:0e:ad:15:e0:5b:2a:4b:43:
8f:d1:f8:22:2f:20:3c:26:c5:71:b9:b0:31:5c:bd:
ab:6b:0d:28:0f:8d:77:e5:d7:2f:26:1d:0c:5b:10:
fc:64:bd:06:dc:7b:03:34:ec:7a:72:76:76:8f:cb:
01:4e:06:b3:f8:87:99:30:3c:c6:11:fe:07:27:35:
d0:ae:c0:6d:de:ce:0d:52:ae:73:78:fc:69:20:c5:
9f:71:3f:ed:30:37:d4:2c:94:e0:f7:14:8a:a8:69:
2f:bb:e9:ef:d7:a3:f2:03:36:74:0b:25:c5:79:8a:
d8:27:b2:a0:0d:75:2b:4c:bb:b3:d6:56:0b:85:e1:
c7:ae:bc:0c:ce:bd:da:b7:da:d2:ce:e1:42:13:46:
30:52:e0:eb:fd:f9:40:5d:ee:d5:ca:ea:dd:e3:a5:
36:68:67:15:9c:5f:66:b5:95:8b:ee:fb:88:81:b1:
a3:d8:88:ce:5c:52:62:b3:4b:b2:c1:fd:f7:08:df:
f5:ef:5b:c0:28:6e:df:ac:b5:a6:88:52:5c:45:e0:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D5:5A:0D:DE:34:E1:A2:20:22:67:9A:82:91:13:9A:A4:F9:AC:33
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0b:72:34:49:94:2b:c4:72:15:ee:15:da:6e:85:0d:a6:09:
82:52:8a:24:16:41:4b:e4:87:05:35:a0:f1:c4:8e:51:c7:8e:
bf:5f:f6:9a:99:ee:b8:eb:71:ce:fb:ef:e9:d6:71:26:b8:23:
a1:ad:d3:ff:3d:16:7a:43:06:57:56:13:de:f4:68:cd:6d:f4:
d5:5e:b1:cc:37:e8:b2:c8:4e:22:dc:a2:27:a2:36:b7:af:f4:
f9:dd:ec:09:8c:a7:9a:40:c7:06:ea:7f:a0:2a:b0:b8:2f:98:
24:c5:31:49:4d:24:2d:51:58:23:05:34:a5:8a:71:68:e8:8f:
54:76:a9:55:55:9a:8f:24:7e:4f:c5:5a:89:74:c8:1c:b5:10:
20:2e:fd:21:b0:44:ee:46:9e:2c:b9:01:99:3e:91:14:e7:11:
b7:42:38:0f:e8:b1:07:a1:df:c7:f3:8a:2e:ec:fc:00:9f:b3:
b0:88:3d:47:ef:da:81:30:01:70:f9:a0:ff:2d:c7:00:95:72:
61:f3:e6:bb:8e:26:db:0c:e0:6e:78:66:4d:2f:68:37:5d:55:
d1:a5:f9:ae:bd:ef:24:33:b9:90:d4:c3:ac:bc:08:89:35:72:
ba:82:71:57:94:fd:38:ad:20:37:13:f4:84:40:0a:fe:a0:dd:
1d:a5:ff:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:53 2025 by rpki-client