Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
File: lTU3mXduubP_WHJemdAqplT7GgQ.mft (raw, json)
Hash identifier: 3S9rJWbfnGyPr2LP4++TSzB6pzOK+coBMhj+uIZEPzU=
Subject key identifier: EE:D6:A8:D6:7A:E3:AC:40:4F:13:6C:FC:73:D1:B3:F9:AD:BB:56:5D
Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
Certificate issuer: /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
Certificate serial: 0592
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
Manifest number: 058E
Signing time: Fri 28 Mar 2025 23:30:35 +0000
Manifest this update: Fri 28 Mar 2025 23:30:34 +0000
Manifest next update: Fri 04 Apr 2025 23:30:34 +0000
Files and hashes: 1: lTU3mXduubP_WHJemdAqplT7GgQ.crl (hash: TtKOeDFjtZ3SqzhyvBYPAG+es32GHAEJj6V+0mm8Zm8=)
2: F9869896C8F411EBB460DB52C4F9AE02.roa (hash: s2/gefkjyAwATsY34TF6PruGFfbhsqeQU6X2SCeJSoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1426 (0x592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113E15
Validity
Not Before: Mar 28 23:30:34 2025 GMT
Not After : Apr 4 23:30:34 2025 GMT
Subject: CN=67e7311a-8e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:18:2d:0c:2a:af:de:7d:07:83:c5:1d:c6:
08:03:47:72:3d:4c:ec:b9:fb:94:cc:19:e4:7f:ab:
b1:da:57:4a:43:ee:15:88:83:10:74:c1:42:6d:49:
60:16:d6:cc:e8:e5:3c:8c:9b:e5:b4:2d:08:80:53:
a0:5f:0b:07:43:b5:eb:fc:5a:f3:76:32:34:0c:18:
f0:98:fe:1a:b0:1f:4e:df:9e:be:95:b8:f2:14:4f:
12:a2:21:48:58:2f:b6:9e:09:05:f5:1e:6b:7e:3b:
13:19:21:8c:d1:32:9d:68:c8:bf:4b:64:a3:77:5f:
77:25:9e:5e:22:ea:55:f6:0d:12:5d:46:44:44:b1:
3c:6a:04:3f:13:be:32:6b:64:2a:05:25:86:5b:91:
31:be:23:60:67:4a:a1:86:32:2d:0e:05:b8:a7:db:
49:07:f8:0a:92:d1:c4:ad:b1:84:26:90:df:b6:ce:
9e:03:fc:d9:f2:c5:cc:f2:4e:55:31:cb:b2:97:d9:
a0:16:23:74:9a:a5:8c:ab:85:d0:fc:c3:ff:7d:59:
aa:98:b3:f4:37:0d:e3:31:0f:69:82:72:bb:69:f9:
33:25:b0:af:d4:a2:65:f1:18:ad:cc:4e:52:2b:0a:
cf:89:a7:9f:e3:3d:d4:26:6c:29:74:ff:c3:d9:07:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D6:A8:D6:7A:E3:AC:40:4F:13:6C:FC:73:D1:B3:F9:AD:BB:56:5D
X509v3 Authority Key Identifier:
keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:5b:8a:56:67:b9:c2:28:71:b5:a6:f4:1f:b6:b1:d5:ee:6c:
da:27:bb:d5:4e:e3:18:19:67:b9:40:21:31:35:ef:30:8b:c0:
81:4c:6b:b9:95:29:a6:9a:c6:95:76:ce:9b:67:28:4d:0d:48:
02:75:cd:2a:ae:d1:a6:d1:c4:44:5c:fb:cf:4c:6a:b3:ee:fa:
d7:1c:2a:72:18:ce:c3:0c:28:67:00:56:a9:7a:d8:db:c2:4a:
6f:76:f5:09:a0:31:83:49:a3:9a:e5:01:80:54:cc:a3:b9:ce:
c1:2d:cc:ba:3d:ea:23:12:ed:5b:14:7b:c1:06:9a:1e:fb:6f:
70:60:8b:59:44:09:c0:e1:b2:a2:d2:78:7e:a0:e0:c3:48:0b:
36:b5:65:39:08:61:2d:28:90:d2:a2:75:10:f8:f6:bc:93:bf:
77:ae:9a:e5:a5:92:54:09:49:37:a2:3b:5a:79:25:2f:1a:99:
f1:28:31:48:63:d4:af:33:75:fa:f8:81:9e:50:be:fe:c4:36:
b0:52:7c:6a:61:d3:ca:ae:fa:15:51:f7:fc:82:b1:4f:a2:60:
25:12:74:b3:d8:d3:db:d6:dc:b6:01:8f:ec:db:d5:6a:d1:15:
1d:46:22:cf:2b:8b:c6:85:e9:1e:b5:e5:e0:b1:ea:75:c8:04:
0b:4d:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:24:34 2025 by rpki-client