Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
File: _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json)
Hash identifier: no2/vAo6yKeAlB8QYC4+9Jn0yXloBcfO0vyF5k57k6Q=
Subject key identifier: F9:E0:3B:A9:54:DD:C1:9A:10:2B:DD:42:D8:DE:73:AF:4C:8F:92:35
Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Certificate serial: 1759
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
Manifest number: 174A
Signing time: Fri 28 Mar 2025 16:43:08 +0000
Manifest this update: Fri 28 Mar 2025 16:43:07 +0000
Manifest next update: Fri 04 Apr 2025 16:43:07 +0000
Files and hashes: 1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: BxhZab2GM0QypLGA1wL5O037qiVAc8zchUg3+q1A+hU=)
2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: HaGuDMDdtzMMm3o6+XeqS8/R5NYbXvco+c9bwnRUeLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5977 (0x1759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E49
Validity
Not Before: Mar 28 16:43:07 2025 GMT
Not After : Apr 4 16:43:07 2025 GMT
Subject: CN=67e6d19b-d51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:e1:cc:76:4b:87:b7:27:a9:7a:72:da:f1:
66:09:ad:3f:12:c2:9c:58:8e:9a:73:2c:24:77:4c:
ec:01:4e:b5:7c:cf:6e:ef:3d:fa:b2:c6:f1:02:be:
4d:f2:37:c3:c1:3d:9d:65:28:d7:23:89:0f:63:c6:
6a:9d:02:23:68:e6:57:45:96:07:fb:f8:e4:35:c2:
26:2c:83:8a:de:ba:67:d8:fe:a4:d5:40:46:44:80:
48:ef:86:60:5e:a1:d1:fb:68:15:93:d7:1f:ce:31:
bc:54:11:61:53:2d:3d:c6:9d:2c:a4:2d:b0:da:47:
13:01:9a:e2:ee:a2:49:b1:c3:91:4e:c0:66:7e:eb:
83:c7:0a:e9:b9:ba:b9:00:12:bd:d1:0c:62:98:ea:
3d:2b:91:d4:2b:7c:16:d8:d1:e3:a5:8b:3d:76:e1:
00:aa:d1:e2:0a:cc:0a:0f:32:3f:e9:8c:ce:7d:ff:
9f:41:be:75:d4:e2:c5:6d:5c:93:e4:6a:16:43:8f:
88:bb:6a:63:b1:05:11:bf:df:bd:6d:a2:bd:7b:42:
61:16:39:4b:7e:ae:be:23:4d:a3:ad:d9:06:f9:06:
a2:f1:4e:c3:7d:9a:87:2e:3c:13:e6:f1:ec:2c:28:
00:40:bf:ff:0d:ca:f1:59:fe:b5:cb:7d:70:6c:bb:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:3B:A9:54:DD:C1:9A:10:2B:DD:42:D8:DE:73:AF:4C:8F:92:35
X509v3 Authority Key Identifier:
keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:bd:9e:03:4e:ab:22:a8:9a:f4:9e:38:8a:37:c5:b6:95:84:
a5:a8:e3:77:6e:a1:50:8f:0d:99:03:04:47:83:e3:bc:9d:2a:
c0:f7:4c:6b:1a:63:fd:0d:fb:b8:26:86:68:94:bd:61:0c:2c:
42:6b:57:8a:cf:2f:b8:9b:c0:b1:9f:bd:eb:fc:c2:15:c5:1c:
ac:ef:20:dc:fb:d3:8a:47:46:29:cd:2a:bb:97:5e:66:8e:35:
d8:b0:ed:38:86:58:c6:14:70:1b:fb:17:09:cd:8b:ff:70:93:
36:fa:de:ec:88:83:22:83:e9:bd:43:90:04:ce:16:80:42:3d:
fa:6f:5a:4b:62:da:ca:86:c6:4a:52:25:93:2b:30:09:67:25:
25:a4:d6:1f:93:e1:54:e6:1b:6d:df:dd:41:79:01:55:3b:ca:
c7:ce:65:cc:68:8b:54:cf:09:c1:f3:ac:4c:8f:d1:0d:0c:15:
ca:08:22:a2:03:24:6b:10:58:cf:4c:c7:7a:6f:f7:19:db:a2:
9e:c6:91:9c:fb:5c:92:0d:fa:da:33:2b:9b:e8:f1:c9:dd:fd:
cb:a9:bf:f4:e7:cf:f1:08:57:4e:6f:3b:11:54:7d:e1:1b:4d:
c8:b0:75:7d:c3:09:2d:1b:26:d9:a1:00:55:34:1b:b9:b7:64:
64:78:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:29:03 2025 by rpki-client