Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json)
Hash identifier: pBNI8l8U5FLO0D+zQ623oIfeGLOR70yNdoyVACKm/Wo=
Subject key identifier: CA:2A:B8:C9:3D:1F:61:42:9D:A2:E0:12:7F:61:4C:DE:53:2B:65:8E
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial: 018C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
Manifest number: 0182
Signing time: Sat 29 Mar 2025 03:21:07 +0000
Manifest this update: Sat 29 Mar 2025 03:21:06 +0000
Manifest next update: Sat 05 Apr 2025 03:21:06 +0000
Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: okhPZ8CZbQWDWzv8vWsqdYsdBtQWMq9Ul/5Wvgyf7SM=)
2: 2048ADEADD5011EDA3ACE13CC4F9AE02.roa (hash: Ry5wENgivtIXCFgzf0QiO3bQmATycLuxi4WQf0WGYRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B12B
Validity
Not Before: Mar 29 03:21:06 2025 GMT
Not After : Apr 5 03:21:06 2025 GMT
Subject: CN=67e76722-37f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c7:b4:3d:a3:0c:ff:f8:56:43:6d:ae:5f:ea:
01:66:dd:0b:71:d2:1d:ab:0c:a2:12:5b:b3:ad:0b:
fe:b0:c8:ca:83:2b:38:da:d1:fc:7c:ab:4b:51:1f:
34:35:ba:7c:25:5b:9b:65:1f:00:1b:f8:12:c9:21:
c5:0d:3d:93:3b:57:b1:5b:39:4a:a4:a6:f6:ba:61:
2f:1b:2b:97:98:5b:72:ce:d0:35:7a:24:0d:d8:d8:
e8:f7:d3:5e:2b:d3:00:e2:94:e1:49:3a:87:45:2f:
52:a6:48:20:0f:65:81:45:96:26:68:19:9d:5e:82:
9c:87:30:16:9a:a5:27:82:54:2e:80:f8:03:94:54:
ce:a4:bc:32:84:da:42:73:b6:2e:b5:58:12:3e:f4:
02:a6:c7:76:e2:14:d4:c8:26:15:4c:31:08:61:cf:
28:4e:c1:34:a7:db:b5:f9:05:d9:d0:13:04:18:e7:
51:e4:0b:fb:c6:5a:90:df:5a:68:bb:a0:d3:3e:07:
e1:4f:02:60:72:11:91:d4:86:9d:29:78:62:35:d5:
71:0c:83:b7:1f:a3:e9:ee:b2:1f:c7:00:c8:8c:51:
c9:c7:ae:c0:23:8f:30:30:5a:be:31:db:63:38:18:
78:7b:13:83:6f:40:f0:0a:62:e9:65:e2:dd:9e:a5:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2A:B8:C9:3D:1F:61:42:9D:A2:E0:12:7F:61:4C:DE:53:2B:65:8E
X509v3 Authority Key Identifier:
keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:da:48:d9:4f:63:d1:fe:55:2b:d1:fe:05:d3:80:aa:9f:28:
8d:59:02:50:63:3f:12:b8:84:51:8e:3e:b7:39:b1:48:6a:9d:
33:c8:06:5a:0f:9a:e8:77:c4:69:38:39:fe:16:c1:d6:01:5f:
4e:5a:58:33:8a:d1:60:04:7c:c2:e7:c9:ac:a7:85:b1:18:92:
c3:94:35:89:f4:d8:a3:4f:8c:88:1a:ce:95:c6:53:dd:1d:b4:
27:96:d2:5d:a8:35:45:05:86:e7:81:ff:2c:4f:61:be:22:92:
0a:92:7b:5a:69:2b:46:35:70:84:12:40:26:80:ae:9d:00:36:
84:7e:a1:14:65:39:43:8e:bb:b0:93:04:0f:52:34:0f:55:c4:
a3:f5:5f:ed:23:63:f1:c3:d9:ec:56:c3:d8:e3:35:23:b9:2e:
66:56:15:69:8e:8f:78:19:e6:ff:c8:91:d0:4c:05:cd:f6:10:
81:5e:69:9b:66:66:b9:4c:09:bf:e4:44:cb:5a:1d:98:db:b9:
85:44:b0:a7:f0:58:59:2c:96:c7:f3:77:32:dd:06:4f:3e:05:
0d:26:18:96:c1:77:9e:57:10:99:a3:cb:96:db:a8:d8:b9:ff:
e0:fa:c5:83:82:59:8e:ad:8f:8b:ef:df:cc:12:91:b3:04:d5:
67:75:e4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:11:52 2025 by rpki-client