Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
File: xWFyqoU5BINNkF08MAE0TdKhjp4.mft (raw, json)
Hash identifier: PM79Dj5psClhEK9GUFBrGz4gWEWr0nDIGpqk7Lq05k8=
Subject key identifier: 7A:05:02:AA:D6:D9:03:97:A4:4E:2F:8E:D9:0B:31:84:1C:06:DB:4A
Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
Manifest number: 015D
Signing time: Sat 29 Mar 2025 03:34:18 +0000
Manifest this update: Sat 29 Mar 2025 03:34:18 +0000
Manifest next update: Sat 05 Apr 2025 03:34:18 +0000
Files and hashes: 1: xWFyqoU5BINNkF08MAE0TdKhjp4.crl (hash: gbUAdHcnfHjEFCxaAqNXc/oK7++lmJY60wnMDUkjptQ=)
2: 72B2E8A0A16A11EEBD55132AC4F9AE02.roa (hash: c4j3BT+E4smp1yj+NNkAhq9oIz18pRs2O7mBfT7X02E=)
3: 6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (hash: nNU15qeWnMT60CV4XLJvbuCmI4tEKD2KApQD9M967+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110321
Validity
Not Before: Mar 29 03:34:18 2025 GMT
Not After : Apr 5 03:34:18 2025 GMT
Subject: CN=67e76a3a-6258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:47:d2:45:25:1d:0a:ef:e4:17:11:72:14:
ea:e1:5d:a0:19:d2:56:f0:3a:b1:7c:19:fc:e2:62:
2d:19:a8:f9:53:b7:83:f4:e4:05:70:8b:17:76:6b:
e8:ab:68:92:41:4c:a3:ad:10:5c:d9:e3:7d:1e:b1:
4e:f6:25:76:81:ed:cb:33:8e:a5:b6:13:0f:f4:24:
cf:98:3b:b4:20:82:9f:9e:4c:1f:62:c3:9c:2b:5b:
43:74:2a:fb:35:d5:1e:f2:dd:62:b4:40:40:a7:26:
07:84:73:a3:0d:ab:00:7b:41:ed:e0:30:72:bc:b7:
0b:bc:d7:d3:ae:be:c6:57:16:55:8a:ae:bc:53:49:
5d:5d:40:c9:b1:34:2c:e1:3a:18:46:5b:60:ae:18:
82:83:77:f4:4e:7b:a9:11:b9:9b:a0:e6:ee:fa:33:
18:21:90:d4:12:33:9e:1c:dd:b8:f8:a1:e6:14:75:
1e:af:12:51:0d:60:42:9f:91:e2:b6:f9:1a:46:02:
b6:3b:ad:ac:d2:14:53:ac:44:28:c3:a5:6c:45:04:
a4:fa:c5:29:17:fb:9f:e6:ac:50:0a:3b:d2:d8:16:
e2:34:25:4e:f1:60:07:c6:f4:1a:7a:50:0f:5f:58:
cb:38:2f:3c:ff:bd:f6:74:e9:7b:c5:40:0d:46:2f:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:05:02:AA:D6:D9:03:97:A4:4E:2F:8E:D9:0B:31:84:1C:06:DB:4A
X509v3 Authority Key Identifier:
keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:94:f3:e6:ba:66:5c:ae:97:cc:5d:50:d7:c3:2e:d4:dd:64:
d0:99:48:f5:6e:75:6e:69:66:64:e7:b0:dd:8d:b7:0f:c1:4b:
76:e6:08:33:97:55:e9:0d:44:36:4c:5e:49:85:d6:7c:a0:f9:
0d:39:26:ec:a3:0e:42:af:2c:6c:65:dc:56:c8:0b:e1:ce:e3:
9c:a1:bc:04:89:13:56:5b:38:6c:3e:d9:9b:19:16:75:58:19:
84:12:fa:d0:32:77:a1:08:e0:8c:a4:4e:ec:84:45:f9:3f:3e:
9d:b1:ef:3f:b3:94:0d:d9:a9:a3:04:11:f2:6b:dd:97:bd:ac:
b9:f2:b9:0e:57:16:8f:52:a8:97:49:39:78:6e:bd:90:31:a8:
70:de:52:37:dc:5e:97:e4:de:9d:29:9b:3d:c9:7f:b6:ed:b8:
ef:a4:be:bd:db:00:08:7b:88:76:11:a8:09:b1:7d:e8:de:30:
2b:f1:25:c0:c3:b7:8b:bd:08:94:57:96:a7:86:ea:54:93:e7:
f5:71:26:05:0c:27:da:8b:98:cc:a1:c2:30:48:2e:7b:15:d7:
d8:77:1e:34:ff:a7:ae:7a:ae:ca:ee:03:4d:bf:bf:19:10:33:
82:fb:80:3f:56:8c:5d:39:64:5f:32:db:d5:a9:f8:65:d3:23:
2a:3d:0e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:21 2025 by rpki-client