Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json)
Hash identifier: Y83dx/+D6N7cazfPZENgFQ95CLHU2Y+1eUq+b/QNs4k=
Subject key identifier: AE:CB:57:AF:95:91:C4:56:3E:83:D5:01:93:48:5A:44:FE:09:9F:28
Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
Certificate serial: 10EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
Manifest number: 10E7
Signing time: Fri 28 Mar 2025 17:25:30 +0000
Manifest this update: Fri 28 Mar 2025 17:25:29 +0000
Manifest next update: Fri 04 Apr 2025 17:25:29 +0000
Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: OmJMBtiJ6G+0oZLbEOy+54zBUtArrOcubAKI39q9TxE=)
2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: zNlH/Z07Yg4I4x55gc1ucSgdIggd1npatylNfrUQ3Ns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4335 (0x10ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126356
Validity
Not Before: Mar 28 17:25:29 2025 GMT
Not After : Apr 4 17:25:29 2025 GMT
Subject: CN=67e6db8a-3a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c9:3e:12:7a:6f:2f:ba:e1:bd:fc:b1:e3:b7:
88:5d:98:57:98:4f:8d:43:4a:5a:9e:53:65:a1:e7:
75:9e:0a:f0:3f:81:64:fe:a8:f1:b3:9d:f2:04:a2:
d1:49:13:87:1f:82:2c:7e:9c:67:58:87:fa:5f:49:
e9:ec:d5:01:f8:c7:c7:65:bf:fa:c8:4e:70:48:53:
50:00:cb:f5:a6:29:b9:66:f4:83:32:4b:74:8d:82:
43:dd:f5:16:d1:83:f5:95:ba:11:10:21:75:37:dc:
35:74:d1:44:4f:5f:90:d2:53:71:08:23:59:0a:7c:
1b:ad:fc:95:a0:8e:5a:f1:54:82:a2:3e:bf:7e:67:
bf:ba:5e:84:dd:fa:e1:3a:a8:67:e7:ee:60:82:9f:
a2:b1:d7:cd:52:89:ba:54:e2:f7:11:41:50:c0:19:
39:5f:c0:53:be:88:b3:37:60:b9:e2:00:d8:6c:bb:
66:3e:92:f5:93:50:59:98:49:11:7f:b9:e0:4a:51:
b5:fc:72:79:cf:25:51:0d:7f:fb:09:c3:da:a7:ca:
48:48:0c:27:6b:bf:97:e0:58:80:d0:53:79:3a:c7:
25:a8:6c:ec:cf:ea:bd:0d:37:fe:34:4c:7d:bb:b0:
fa:bc:0b:3f:64:2a:71:1a:f7:df:50:5e:cb:0a:09:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CB:57:AF:95:91:C4:56:3E:83:D5:01:93:48:5A:44:FE:09:9F:28
X509v3 Authority Key Identifier:
keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a4:da:82:4c:b8:44:ae:40:71:03:d2:06:a7:9e:6a:2c:d5:
cb:a1:28:95:e5:0f:06:3b:31:8e:b8:3f:14:4e:0e:f9:a3:04:
39:dc:8f:17:4a:f2:4d:96:99:7d:ad:01:54:c2:18:25:5a:a4:
46:d4:0b:f9:11:59:d6:72:6b:03:b0:5f:24:d8:33:c9:85:b4:
5a:67:8a:d3:80:4a:38:68:c0:d5:fe:bd:9e:bd:ba:23:22:26:
56:eb:19:88:23:96:26:b3:13:4a:9b:97:57:bc:a8:8d:ff:25:
f9:4e:72:e6:ea:7e:8e:f9:92:35:25:20:cf:07:18:b7:7f:63:
a2:91:e8:1d:72:7c:77:3c:ae:f2:d7:3b:12:e5:6c:13:cb:64:
f2:b4:46:fd:f6:90:20:d9:62:e8:28:a7:83:98:6c:d7:20:7c:
c3:5e:76:84:44:31:a3:46:9a:46:c9:e5:0d:cb:3d:94:4b:bb:
d4:6f:4e:ce:b8:9b:4f:11:98:e0:16:d7:da:2e:c9:94:4a:53:
3d:4d:75:7b:14:48:2d:d0:be:17:a7:ca:ae:08:81:12:e6:a1:
5f:f2:78:9b:44:f1:c2:45:c3:d0:5a:60:a7:03:1a:3e:57:8e:
d7:3b:89:ce:21:c9:5c:23:89:69:ab:3a:aa:d5:d9:fb:55:ac:
c9:cf:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:19:55 2025 by rpki-client