Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
File: 6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json)
Hash identifier: bS3zeO+C4vzxiuFzVVAh/yNRHTiJOeGerDeMHavTFwk=
Subject key identifier: 51:BA:71:0C:37:AA:5B:F5:FF:4B:FE:4F:FB:75:4F:2A:BE:C8:26:06
Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD
Certificate issuer: /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD
Certificate serial: 0D2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
Manifest number: 0D21
Signing time: Fri 28 Mar 2025 18:11:15 +0000
Manifest this update: Fri 28 Mar 2025 18:11:14 +0000
Manifest next update: Fri 04 Apr 2025 18:11:14 +0000
Files and hashes: 1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: qIPffw6PqjWT6mj9qQmRd8BbdjmKexDp/LRqFxuhx7o=)
2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: b2eeZFRX3Cfrh2KgUNSH2XUFjtsQ8yv94mtfUkRiNmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3370 (0xd2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119624
Validity
Not Before: Mar 28 18:11:14 2025 GMT
Not After : Apr 4 18:11:14 2025 GMT
Subject: CN=67e6e643-4f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:80:0e:c8:38:95:c3:8b:49:c8:b1:03:07:
c2:79:c1:58:41:61:63:e6:a1:e1:b9:66:d0:c3:3d:
17:fc:86:86:d6:aa:25:e9:24:99:27:61:dd:26:3f:
33:58:79:1d:a2:96:4a:63:25:f8:9b:16:25:f6:78:
c4:dd:f2:aa:99:b5:8d:1f:92:a7:a9:59:f0:0e:3d:
1c:47:a3:1a:c2:43:1c:6b:40:ec:c7:57:93:ba:d4:
0c:ad:74:69:4d:a5:94:e4:15:d9:8e:4e:b7:a2:3a:
84:50:81:7e:f1:2b:f2:21:15:0a:3c:be:21:a3:e4:
e0:97:db:ce:70:ff:27:79:c9:ad:3a:ce:ba:ae:02:
79:c1:d4:aa:5e:21:90:64:5d:a1:a8:2a:e2:f2:52:
85:73:fe:ac:79:ec:3a:f1:b4:be:15:97:5b:32:3a:
c4:e6:11:e0:91:55:93:b3:25:96:15:55:31:79:da:
8e:fb:44:a3:cd:9d:61:4e:b1:8c:96:b9:ca:39:92:
de:a1:dc:93:a7:9a:da:23:e4:6f:39:67:5c:47:e0:
99:61:93:ad:9e:3e:7a:c2:02:0c:53:20:5e:d3:2c:
b7:a4:72:f0:13:ec:20:55:ee:4c:ec:80:e0:f2:ce:
ec:c3:94:93:d7:d7:06:84:63:4b:46:f3:2c:74:ee:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BA:71:0C:37:AA:5B:F5:FF:4B:FE:4F:FB:75:4F:2A:BE:C8:26:06
X509v3 Authority Key Identifier:
keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:28:c3:1c:13:06:c7:1a:ed:10:e9:f4:54:4b:5a:c4:6d:93:
7f:28:1d:93:e2:bf:52:21:90:be:2d:75:b7:94:51:bd:66:e7:
1d:e4:9f:c3:77:cf:e8:35:40:c4:16:06:89:76:5c:9e:0f:b4:
06:59:bc:9a:10:c0:13:63:07:1a:07:51:a8:81:ba:11:b7:6e:
cb:f3:f7:fc:de:92:43:e9:da:2a:f2:a5:55:34:ca:bb:5a:2d:
39:85:07:10:c3:28:7f:ba:62:96:73:89:7c:93:ae:4d:b1:d2:
6c:63:f9:7e:d1:0d:83:17:18:1d:a8:d7:32:fc:d8:38:1d:08:
81:e4:57:6e:74:bb:5e:c3:f0:3c:03:df:62:51:6d:73:5a:d6:
7b:21:ba:82:24:83:40:c6:ef:df:fc:f1:95:e1:33:6a:bc:97:
0e:74:8c:3d:9d:8b:9a:0e:b5:27:cf:49:79:f9:93:c9:7e:52:
65:f0:46:c5:6d:20:a4:9a:f8:0d:b7:2e:b5:58:9a:f2:9b:8e:
da:d6:15:17:8c:b9:73:10:3e:5c:51:e1:a1:b3:ab:82:45:da:
d7:c9:30:61:8a:e0:6c:f2:e6:db:1d:0b:74:d6:0a:2c:a0:75:
89:ce:4a:3f:ef:e6:07:a6:86:5a:1e:e3:57:11:94:85:11:f1:
db:c4:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:26:42 2025 by rpki-client