Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json)
Hash identifier: N/KsH6MDSKAX18x/oNDhUgFrvGAI9pqwioWjhZMfK1A=
Subject key identifier: DD:ED:29:6A:FB:84:93:C8:C9:DA:28:9F:14:F0:85:24:CF:70:A2:51
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial: 28E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
Manifest number: 28B6
Signing time: Fri 28 Mar 2025 15:42:16 +0000
Manifest this update: Fri 28 Mar 2025 15:42:15 +0000
Manifest next update: Fri 04 Apr 2025 15:42:15 +0000
Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: 7c8m+oRvg0MFTxEmnLQp6SedTBGigMw2xmyLTO+qNXs=)
2: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: AzW4aIQu3oC/RB4Ph7Oxui4fN9NO75Dymw0HBe9vHgA=)
3: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: E9GpG8r2RS+wZVKx4VfWz8DtkWxY78qwYvbLbq0Wo/g=)
4: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 3ffKspDDCMwFhMU04xxlteFDU4SgN8Gby605uNp3lZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10473 (0x28e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112707
Validity
Not Before: Mar 28 15:42:15 2025 GMT
Not After : Apr 4 15:42:15 2025 GMT
Subject: CN=67e6c357-636d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:de:03:8a:d4:35:c6:c8:ad:4e:58:76:4b:
a6:1b:ca:66:3e:ae:5d:6d:27:1a:11:a4:52:f2:16:
b6:f0:81:18:0e:ab:c2:81:6e:90:cc:b6:36:34:1c:
b9:d9:4b:26:66:47:4e:ec:98:41:29:4e:16:52:47:
9a:8a:76:30:11:7b:71:03:ab:4c:d1:ff:5a:12:44:
47:ad:9e:05:57:86:b0:3c:b4:8f:4b:26:e7:f1:a0:
d5:93:a8:aa:bf:bb:b0:c7:27:bd:3b:0c:f1:df:19:
c4:e8:9a:70:10:a0:33:56:e3:df:92:e5:ac:0f:a8:
26:44:d5:af:92:00:43:7c:f3:d5:7e:8b:8e:69:06:
ad:9c:99:ed:94:f0:7e:56:18:e7:c4:ca:9c:82:1e:
7d:b5:ed:06:b3:e6:f7:e8:c7:59:1c:44:60:1b:fa:
6d:dd:2a:de:6d:89:c1:34:16:20:f7:fc:bd:09:ae:
9c:7d:18:93:22:1a:39:4f:26:80:76:57:c5:72:d4:
e9:86:1f:a7:c7:a2:83:b8:22:99:13:83:2f:a1:1a:
3c:c3:32:41:29:7a:ae:d3:79:76:2f:20:26:b2:28:
47:48:4f:36:af:f0:53:56:44:d4:cb:1b:db:19:78:
e8:cb:9b:c4:eb:72:98:b3:46:98:58:96:5e:ad:9d:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:ED:29:6A:FB:84:93:C8:C9:DA:28:9F:14:F0:85:24:CF:70:A2:51
X509v3 Authority Key Identifier:
keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:75:71:c5:3a:95:3b:ec:69:97:17:3b:23:87:4d:07:49:24:
5c:29:da:1b:c6:89:3e:5a:38:17:91:d3:42:52:28:33:71:66:
69:1d:57:c4:c1:00:80:dc:25:3f:3d:ed:f6:04:a0:0f:56:0b:
e5:d8:ff:ba:4e:d5:33:91:19:0a:1c:73:a4:af:12:17:7d:00:
77:1b:2b:e4:e7:ea:86:18:ec:32:32:ed:e4:e9:ac:4b:57:33:
48:ca:29:bb:f9:79:ee:94:d3:a6:7f:42:f7:23:bf:67:7f:5d:
42:32:a2:67:4c:65:ef:a5:ad:9c:d3:dc:88:7d:5d:41:d8:75:
a5:c0:92:01:ce:5a:e4:6e:36:52:6b:7f:83:75:b9:52:08:3f:
59:11:96:73:b7:dc:46:3f:70:bb:2a:b1:d8:04:4c:d9:bd:e2:
10:dc:d1:40:d3:8c:7a:7e:2c:08:85:6e:7c:94:a3:cb:75:f7:
41:7b:f3:94:df:0e:a3:de:c9:b5:a7:36:5d:19:30:e0:a7:e2:
7d:7c:6a:d2:25:fa:40:72:17:48:e7:4f:8f:02:a9:b8:fd:b8:
34:da:ec:eb:be:ce:37:59:e5:03:77:74:88:c5:b0:9d:44:24:
71:8b:09:b8:56:a6:3a:25:69:bd:67:14:92:ba:c7:92:8c:f7:
11:07:ba:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:08 2025 by rpki-client