Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json)
Hash identifier: jcexKK/qslqwT64GmzBa6nPn/dh60TNAi30KP97CJzk=
Subject key identifier: 26:7F:AF:88:EA:26:48:CB:86:CC:FA:D1:B3:09:76:D6:50:E6:07:40
Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE
Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE
Certificate serial: 0839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
Manifest number: 1713
Signing time: Fri 28 Mar 2025 17:46:19 +0000
Manifest this update: Fri 28 Mar 2025 17:46:18 +0000
Manifest next update: Fri 04 Apr 2025 17:46:18 +0000
Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: w5tGbQEIvm9OVJ23dcGe7naHMRVCjqK7jGPHEZ4CuKQ=)
2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: BZiR4Dc1ddblUQXJsTaFKfSdrUTvmlQ8LVKV+/pLZz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116D68
Validity
Not Before: Mar 28 17:46:18 2025 GMT
Not After : Apr 4 17:46:18 2025 GMT
Subject: CN=67e6e06a-0e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:a0:87:22:5a:48:79:ce:37:f1:5f:1d:07:
ac:ad:64:ec:a6:71:19:89:63:d3:eb:01:02:72:ec:
ea:2f:0c:6d:08:b4:1d:43:e9:a1:1f:6c:95:22:ae:
1e:b3:d8:f9:36:b4:8e:a8:f1:2b:f4:48:28:2c:af:
db:b8:e1:97:83:88:aa:e7:3b:75:04:89:73:13:ba:
64:f0:cd:e7:c9:a3:04:a4:75:f8:b0:3a:f9:cf:e2:
20:43:69:6b:5b:d5:2b:29:7b:0b:70:38:b4:1c:46:
16:f9:9d:20:8a:0c:c3:a2:a6:5e:a9:f6:e4:87:b8:
63:04:dc:68:dd:e7:d6:2f:dd:c6:d3:70:b1:61:02:
b6:4e:b7:4a:43:16:b0:7a:7f:e5:ea:d2:df:74:9b:
62:2a:33:a4:4b:0c:1d:fa:9f:c1:f7:6a:dd:ba:1b:
ce:f7:14:67:47:cb:9c:31:67:aa:e2:8c:82:3f:68:
6d:c1:72:16:e5:54:e2:af:a3:05:9a:7e:15:ba:63:
69:a3:6a:49:f0:3c:6b:61:ab:ce:d7:fc:2a:9d:79:
44:39:c5:1c:ff:08:16:e5:f9:bc:89:93:50:de:e1:
8d:6c:b1:80:04:44:4f:1b:12:d4:6c:cf:9d:c6:53:
b5:4b:70:e8:b6:63:7f:79:a2:43:0e:34:77:03:37:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7F:AF:88:EA:26:48:CB:86:CC:FA:D1:B3:09:76:D6:50:E6:07:40
X509v3 Authority Key Identifier:
keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:43:e5:5c:be:f8:2f:c2:50:6f:17:3f:62:69:9f:78:eb:30:
bc:50:b2:ba:1a:a5:67:d5:5d:f2:8d:ab:ed:d4:f8:66:b6:f9:
6f:d9:5f:0d:b9:4e:93:74:b9:04:cd:d3:3c:31:e2:c1:73:06:
c0:85:61:74:10:1d:09:af:4e:8e:72:a4:d8:01:3e:42:8a:6e:
d9:bc:1b:8f:24:26:a3:ed:5a:84:49:ed:3e:b1:ff:b9:f7:26:
0b:4b:6c:32:e9:37:e7:95:34:39:e1:b1:17:cd:2b:69:db:97:
65:78:47:f1:4a:06:ee:16:fb:1c:c2:d0:aa:d6:35:c7:2b:eb:
90:81:23:e7:a7:cf:83:b3:4d:d4:d1:6f:8b:f4:2b:39:e2:c4:
a0:c1:88:2f:29:40:ef:da:78:94:d8:9b:12:96:5d:66:a7:2e:
5a:8a:7d:d9:65:a1:aa:9b:38:87:9c:4c:d3:44:c1:2e:6e:86:
ac:34:d0:5f:f0:5e:b2:4b:a7:be:2b:5f:12:a9:13:aa:d5:4b:
a0:cb:34:9c:be:41:c0:24:ef:a7:1d:9e:51:7d:4d:ff:19:12:
03:98:3c:00:47:ad:a3:b6:ad:78:6a:7a:e4:07:93:1d:4f:8c:
92:4b:ca:32:c2:ed:bb:8f:62:50:53:ed:a9:db:ae:bb:c4:a8:
4f:11:23:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:27:29 2025 by rpki-client