Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File: u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier: 67UuZ/oJly6kf/7tTCroakanWAThpBKM69bjb4iTtno=
Subject key identifier: 0F:A4:F3:E7:77:68:A8:94:C3:5A:79:7F:B4:1C:AC:FA:CE:15:60:98
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer: /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number: 01B0
Signing time: Sat 29 Mar 2025 02:43:35 +0000
Manifest this update: Sat 29 Mar 2025 02:43:35 +0000
Manifest next update: Sat 05 Apr 2025 02:43:35 +0000
Files and hashes: 1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: RzgDmX5IDoK4XEIdSYn/apmY13koRcXvsmG9RVAE3ws=)
2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: i1JD8msSihYz7KvKL8WS56vjnbp4Wnh0IyWM047eZr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111B00
Validity
Not Before: Mar 29 02:43:35 2025 GMT
Not After : Apr 5 02:43:35 2025 GMT
Subject: CN=67e75e57-4c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:be:7c:1c:7c:9e:be:28:02:49:6d:ad:40:
ba:61:f5:3b:a1:b9:28:a1:b3:ac:aa:b0:9b:fe:25:
08:fd:97:af:5f:06:d0:2b:14:44:ef:74:2a:f1:7e:
39:f1:a0:d2:69:85:4b:55:0d:d3:46:0d:ad:f2:6c:
21:ee:29:19:5b:4a:d1:64:92:ee:ca:92:d3:31:94:
c1:ff:33:a2:81:76:ee:54:a6:0a:1c:05:ae:47:f2:
9c:02:43:35:26:8f:1c:0c:68:e2:73:89:df:eb:05:
e0:56:65:73:d9:fd:30:c1:c0:20:af:62:e8:63:50:
a8:a9:8a:ec:6e:d9:1f:4b:f5:5d:1d:a3:07:cb:df:
63:71:ee:ed:99:0c:a8:af:f7:f0:a0:19:fa:2f:ec:
8e:4e:76:d0:81:d4:b1:4a:cc:71:93:49:ad:68:ae:
95:2b:91:bf:92:45:5a:c6:75:4e:ec:92:2b:ce:68:
e3:da:8f:49:91:0b:fe:33:17:05:86:82:c8:99:41:
62:6a:9c:df:18:49:35:b0:48:a6:6e:fd:fa:87:29:
37:f6:17:ad:6a:74:57:2f:0e:05:87:fb:f7:93:42:
9f:39:83:2b:e7:3d:40:58:a7:ef:2b:f1:b0:34:4a:
4f:eb:7e:d4:67:ea:91:0a:b0:9d:f1:87:3f:6e:87:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A4:F3:E7:77:68:A8:94:C3:5A:79:7F:B4:1C:AC:FA:CE:15:60:98
X509v3 Authority Key Identifier:
keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f2:04:67:11:1b:fc:1d:3f:c1:5f:10:2f:3c:1e:17:92:1d:
14:9e:6b:87:90:e8:61:34:76:f8:01:e4:f9:79:79:87:5c:00:
07:b5:9e:69:d7:79:a3:62:8a:48:23:dc:92:be:31:67:c4:5b:
81:d6:f0:d2:2b:57:db:5a:78:48:ae:84:cc:db:ac:0c:4d:87:
0c:d9:6f:c4:09:f8:fd:96:00:07:2b:f8:95:81:df:7a:78:fa:
75:f6:bd:0f:93:90:49:6e:bf:d8:ae:10:bb:0a:8a:e9:ea:07:
88:06:e8:f6:1a:67:42:d5:ec:72:20:bf:2f:25:8c:91:a1:2e:
c5:ed:68:e4:9f:b4:28:11:47:54:e3:54:d3:ec:05:70:dc:4e:
ad:ba:03:e6:c7:b8:bf:26:ad:a0:ee:ae:4d:af:82:a6:94:28:
54:7f:cb:b1:b5:cb:e0:df:f2:36:d1:e6:45:e5:52:98:58:ad:
05:6c:e3:78:8e:57:7b:6d:70:78:a2:6f:39:7a:cb:15:f4:74:
56:cd:c5:32:93:04:bb:e7:d8:7d:bb:23:77:dd:b5:97:a8:34:
89:20:ad:5d:94:f3:4e:86:42:4d:e9:70:23:1e:07:58:51:30:
17:83:4a:2f:6d:f9:d8:15:91:dc:c4:8c:5f:6d:6e:4e:92:51:
60:87:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:50:11 2025 by rpki-client