Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json)
Hash identifier: 8Uy+v8K5zEVgwhMb1ZKm2nSinb+pHEv+FY53NeEo0BI=
Subject key identifier: 36:F5:F6:F2:2A:E4:10:F4:35:B8:8F:E1:EB:BB:8F:08:8A:14:B6:BF
Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
Manifest number: 8E
Signing time: Fri 28 Mar 2025 22:18:02 +0000
Manifest this update: Fri 28 Mar 2025 22:18:02 +0000
Manifest next update: Fri 04 Apr 2025 22:18:02 +0000
Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: O2olHqCmPRNbs4c0ICn8kTg2jwZ+6+dEblWfmTCTJE8=)
2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: UWOq5fkDm5PGl0caT9Tr6ZlfhuDlbM6ptz9WKoZ9jFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8
Validity
Not Before: Mar 28 22:18:02 2025 GMT
Not After : Apr 4 22:18:02 2025 GMT
Subject: CN=67e7201a-badb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:fe:64:30:cf:ba:b8:c4:5f:8c:fa:bc:b2:
16:67:f7:c2:d2:54:51:dd:8b:5f:e0:54:07:56:e5:
53:68:da:cd:f6:b8:59:15:9e:8f:81:02:e5:df:70:
81:cf:19:af:c3:0b:03:a4:bb:41:57:79:fa:33:36:
8a:3c:c8:3d:cf:a6:fd:11:22:47:42:19:b3:f9:c9:
10:17:db:57:a4:f3:e3:f0:cc:8a:c6:52:7d:c2:65:
10:6c:ba:27:14:66:9f:cf:7d:81:5a:a3:84:d9:e5:
37:e3:50:b0:a6:3a:22:a7:99:8d:25:5e:9b:d1:2b:
3f:62:34:d2:5a:f5:c4:04:81:7b:cc:0e:e5:32:ea:
6b:01:4a:45:f5:1f:2e:f0:ad:cb:ff:b5:5d:22:0c:
e5:d4:33:5c:33:6a:9b:b7:6a:b4:b2:e3:65:d4:45:
45:9a:61:b2:99:81:63:4b:3e:e5:ae:04:83:6c:41:
18:9b:af:d5:3d:8a:5d:7a:9d:91:52:a0:11:21:31:
c3:bf:99:27:33:8e:1f:86:12:a9:6c:eb:40:a4:d2:
b2:77:36:bd:03:dd:fb:2a:0c:26:92:70:84:13:a5:
45:fc:d2:73:3e:a2:68:81:db:70:38:dd:d7:b4:5e:
b3:f4:e5:f8:7e:c3:ce:f8:dc:9c:07:a3:85:f6:b8:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:F6:F2:2A:E4:10:F4:35:B8:8F:E1:EB:BB:8F:08:8A:14:B6:BF
X509v3 Authority Key Identifier:
keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e6:52:89:f8:6b:47:87:c7:3f:a5:a2:c9:be:00:45:b5:6f:
57:39:ba:f7:a1:78:25:f0:7c:b8:1f:63:5e:07:55:b6:f5:8d:
24:e1:3c:fb:1f:7a:d4:ce:16:a3:47:b5:f5:4f:15:54:8a:a9:
1c:3a:f6:ab:21:a8:0b:83:8f:2d:e1:c7:46:b8:07:be:3c:53:
31:98:32:c6:13:8d:88:a3:1d:29:1d:26:6d:ef:6a:d3:8a:62:
1c:ed:c9:3b:ad:11:97:15:7b:0b:3e:e4:16:d2:56:25:00:2d:
84:0f:37:1c:ed:58:da:63:f2:b7:c4:47:1b:12:4c:49:18:29:
c3:82:87:79:83:5a:c8:22:98:ce:d2:d5:15:c6:6d:d3:a3:0c:
d6:54:18:5c:83:7e:0a:56:60:f1:79:6a:9a:e4:47:c5:1f:6c:
4d:7c:ee:48:34:c2:f3:17:e5:9d:27:72:d4:65:28:be:6f:aa:
60:cb:90:71:16:a4:c4:2e:22:9f:9d:25:4a:d4:e0:1e:a2:a8:
82:39:ee:43:46:e1:6a:fe:48:4f:08:47:19:f2:91:60:1b:50:
4c:ef:c0:71:d6:79:97:0e:a7:26:3a:e9:43:98:19:02:50:b6:
fc:4e:46:05:f7:15:ff:1f:37:5f:ff:2b:2d:f7:b8:13:b1:f2:
b0:8c:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:36 2025 by rpki-client