Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier: XqghoKVTl+MGZ2pDYNZysTQ6rerVssIwLP7HZ+MlCvc=
Subject key identifier: 63:9B:A0:C3:28:F4:93:36:B4:FD:7F:0A:DA:31:F7:FD:61:36:98:9F
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial: 349A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number: 3482
Signing time: Fri 28 Mar 2025 14:19:38 +0000
Manifest this update: Fri 28 Mar 2025 14:19:38 +0000
Manifest next update: Fri 04 Apr 2025 14:19:38 +0000
Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: FNV560/INIRrU+quCPgPD5ZWrAltiV3EXe5YHkGGVGI=)
2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: PJCdta/4Q6f57KQKAkTotBkGcFV1WNt4V36v9eyDoQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13466 (0x349a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125590
Validity
Not Before: Mar 28 14:19:38 2025 GMT
Not After : Apr 4 14:19:38 2025 GMT
Subject: CN=67e6affa-f5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:7a:08:70:12:65:74:06:b5:15:2b:03:1e:
33:ed:54:ba:2d:3e:7a:25:49:b8:c3:9b:35:6a:ea:
1c:dc:33:bd:2b:d5:b3:a5:59:74:48:60:73:8c:26:
44:48:75:30:b9:1a:07:ec:ae:bc:77:62:52:b0:e6:
a8:89:a2:df:ef:02:8e:66:36:24:68:7b:07:fd:42:
d5:6f:b3:3d:06:db:c1:32:08:cc:b7:66:34:68:88:
79:48:94:60:8f:5a:b9:9c:c4:85:f3:67:35:89:19:
c2:fc:60:1f:b6:7f:a9:c8:78:b3:57:59:e1:53:bc:
99:1e:d2:e9:fd:78:06:68:db:06:aa:12:a9:74:5a:
0c:a2:a8:e0:cb:25:7f:0f:24:99:20:92:ea:2a:6d:
bb:f7:5b:10:64:0e:e0:c2:bc:c2:c4:71:cc:f3:d1:
e8:87:29:67:e0:fc:fd:21:c3:dd:0c:64:61:be:cb:
e9:8b:a5:7d:14:08:54:f1:c5:94:52:43:13:0e:b2:
89:56:41:9c:05:02:de:42:a1:f8:ba:36:f6:ba:a5:
69:11:1a:f9:98:26:f2:a1:66:32:46:e3:4e:68:62:
e4:9c:86:30:1f:71:e8:a7:61:4a:01:c8:e3:f2:1e:
4e:ba:f6:5f:7e:97:e1:17:1d:af:75:64:b5:19:9d:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9B:A0:C3:28:F4:93:36:B4:FD:7F:0A:DA:31:F7:FD:61:36:98:9F
X509v3 Authority Key Identifier:
keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:29:31:76:e7:ca:79:04:98:d6:f0:ae:a3:4e:4d:13:90:ae:
d8:42:20:2a:d1:05:d6:2e:63:7a:6d:f1:56:4d:98:85:a2:da:
d3:84:c4:14:fc:da:77:6f:e0:02:c2:f5:73:8f:ac:49:d5:e9:
ec:75:3a:fe:b9:6f:2d:73:7e:3f:66:71:88:f5:4c:2b:dc:b3:
94:48:ee:6d:d9:ff:74:9e:5b:d2:93:5f:d8:17:4f:5c:cd:2e:
08:31:2e:c9:a5:3b:2a:a9:b3:f0:d3:33:41:11:0b:51:74:5a:
e4:6c:6d:dd:64:a4:f8:a2:8f:3a:16:3c:f7:20:c1:57:5a:86:
91:8a:da:90:2c:5f:ac:02:d6:73:07:22:7c:15:07:93:fd:a2:
d5:06:f9:72:bb:54:58:e8:20:2f:9f:39:db:b7:df:06:d2:db:
d4:34:16:e0:fa:a0:14:98:68:27:17:db:06:b6:df:5b:66:3a:
eb:6d:c8:3d:df:1c:ea:1d:af:fe:95:dc:63:0f:84:1c:5a:c9:
2a:a6:d2:89:af:6a:55:7e:40:6d:2a:b2:7e:d4:8f:fc:db:56:
72:bc:f6:e3:d0:4e:f9:9c:4e:e8:2e:63:98:4b:dd:2e:9c:bc:
08:60:e0:55:fd:71:7d:06:fb:7c:a3:fa:0f:12:b6:24:9f:21:
1e:91:14:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:59:47 2025 by rpki-client