
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft
File: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft (raw, json)
Hash identifier: zZ3DEMyF+PKX/jMqQ6jKEKU5PjycO4SNd9I+T+819ek=
Subject key identifier: 5F:78:C5:56:01:DB:04:8A:CD:5D:B7:40:93:FE:CD:63:34:55:2E:F1
Authority key identifier: BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF
Certificate issuer: /CN=A9123CB8/serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft
Manifest number: 0D
Signing time: Sat 29 Mar 2025 07:25:14 +0000
Manifest this update: Sat 29 Mar 2025 07:25:13 +0000
Manifest next update: Sat 05 Apr 2025 07:25:13 +0000
Files and hashes: 1: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl (hash: UUxE6dg16zHbaHUN4sTcSY2kzwokEmk36duEhaQjnUI=)
2: C1AA9588FB5B11EF9D5B421BC4F9AE02.roa (hash: iG1+i+/h5uPBH8czu/MsD7AGiWboXVjY7acUxjpESco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123CB8
Validity
Not Before: Mar 29 07:25:13 2025 GMT
Not After : Apr 5 07:25:13 2025 GMT
Subject: CN=67e7a05a-61f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:8c:16:fc:3b:33:78:51:19:3f:c6:f1:f1:
0b:c1:7e:07:a6:8c:09:64:80:3a:0d:41:93:8e:3c:
b4:2a:3c:52:0d:e5:d9:8a:c4:68:7c:cf:49:a1:1a:
7b:3a:5a:d6:3c:63:e8:84:55:45:6f:b7:4c:b3:54:
ad:a0:6c:d3:28:51:53:84:b8:b8:b6:d4:e4:ec:fd:
2c:ac:51:94:fe:bb:43:2e:d3:fc:eb:ac:28:eb:22:
4c:45:24:71:eb:c9:6b:01:f2:14:21:1c:ad:95:dc:
b6:f4:71:ca:1e:1c:18:ee:ae:43:35:a3:38:f2:f9:
04:42:03:92:c1:e1:01:70:9f:25:c3:a9:27:23:eb:
69:59:c8:14:e7:3d:f4:37:e2:48:c2:9a:31:2a:36:
43:7f:f1:4b:18:b5:18:cd:f0:d7:54:2f:c9:36:67:
17:10:3b:59:97:fc:ad:b3:59:e9:a4:3f:f9:41:b9:
d9:d8:2a:5e:f4:10:73:0a:2c:24:dc:70:25:0c:03:
33:00:01:0b:4c:f3:e6:c2:7a:6a:33:fd:70:52:83:
67:13:47:f8:99:2b:20:c4:12:54:9c:04:76:9f:c1:
7f:2f:b3:77:f3:36:e5:da:32:0b:85:4f:e8:d5:32:
78:71:05:37:93:fe:63:df:ac:63:17:2a:57:3c:b1:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:78:C5:56:01:DB:04:8A:CD:5D:B7:40:93:FE:CD:63:34:55:2E:F1
X509v3 Authority Key Identifier:
keyid:BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:34:2e:4f:ce:72:39:63:7c:7f:19:50:29:b4:8c:c3:70:ed:
17:1e:e8:bd:ca:b8:ca:42:c0:9d:eb:57:3e:5f:47:aa:ac:8c:
b0:cf:d4:dd:8b:a1:ac:3a:31:15:6c:99:1c:01:a5:a8:72:99:
a7:a9:fa:b5:5a:47:cd:f7:1d:1c:0c:48:b4:59:87:02:8b:ca:
47:b5:59:8b:15:14:b9:1b:8b:51:d0:8e:5a:d7:b7:25:f2:cc:
9e:d6:df:b5:16:38:45:4e:60:cd:24:f7:f7:44:36:4f:b1:4b:
19:a9:b2:8c:f5:34:10:84:18:f3:3c:44:4f:1b:90:79:22:90:
63:02:a8:4a:17:96:6c:79:89:42:ea:fe:b0:c9:25:1b:e0:56:
a1:58:13:41:6e:07:bf:23:66:bf:17:83:fa:4a:25:0e:3d:3c:
42:58:7c:44:72:83:21:d5:72:b6:91:7d:37:5d:c5:43:a2:a2:
f8:ba:2d:13:62:a6:98:69:dc:a1:22:0e:e2:48:d7:9c:ec:2e:
61:20:38:fe:e7:c4:0c:08:0f:c5:00:e0:bc:7a:17:ed:bb:81:
a0:14:a6:57:5b:f5:b7:90:b0:6a:5a:40:57:8b:ae:f9:6f:84:
f2:dd:92:3c:df:0d:06:a9:1e:9b:f6:02:ea:1f:19:0d:de:50:
f8:e1:8f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:20:33 2025 by rpki-client