Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json)
Hash identifier: YQy8YSn+HB03S+TwxN68MGfdTsaKG9uFZFz+E64QGYY=
Subject key identifier: CB:F6:B1:49:D3:E9:18:F1:F9:69:82:2B:8E:CF:C1:6B:AA:E4:D9:10
Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85
Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85
Certificate serial: 02B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
Manifest number: 02B2
Signing time: Sat 29 Mar 2025 01:43:02 +0000
Manifest this update: Sat 29 Mar 2025 01:43:01 +0000
Manifest next update: Sat 05 Apr 2025 01:43:01 +0000
Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: 1ARjZfdeB6RR9WfGtfrdhmZZWBbdrQ8sftu92WvoPZ8=)
2: 6C113EF8EB1211ECB34A394DC4F9AE02.roa (hash: WvT7aspKo+sHWby0nr7AYPsexTa44Dr6ROlq3v6GSX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128553
Validity
Not Before: Mar 29 01:43:01 2025 GMT
Not After : Apr 5 01:43:01 2025 GMT
Subject: CN=67e75026-bdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:3c:e0:a5:4f:25:34:4f:20:2f:fe:6b:d7:
74:f9:26:fd:1f:b9:48:49:51:92:6a:66:06:de:da:
87:84:27:7e:06:de:38:ae:10:0e:fd:7f:f1:a1:d0:
5b:07:0d:f3:91:bc:25:f9:9a:a1:e6:bd:be:43:a7:
4c:6e:ef:0a:b4:64:e4:7e:2c:73:91:81:be:e1:68:
76:c4:71:6c:bd:c2:ea:ff:8b:47:e1:14:bf:93:e2:
bf:eb:d8:b6:6a:20:6a:71:8c:05:14:3a:e6:f2:52:
47:8b:1d:53:a7:d9:63:c4:45:cb:5b:78:8f:a0:fc:
02:af:a5:ca:19:ee:49:2d:58:ce:ea:40:c7:2b:60:
00:d8:a1:9d:ea:11:24:62:a7:2a:e2:4c:a3:37:1f:
4a:e4:88:03:20:2a:8f:59:33:78:9e:0f:1f:38:4e:
57:f2:27:03:33:be:1c:1a:9c:75:a4:27:ef:66:c1:
16:41:ba:01:2b:b0:0d:f6:e0:14:33:7a:fb:6a:ab:
8d:b7:ab:ee:08:7d:aa:d1:ca:8b:79:d7:ba:db:7c:
01:1b:f6:a8:c6:53:2f:8e:7e:bf:fe:c1:ab:6e:85:
a9:35:9e:d9:0e:b4:00:7d:2a:fa:8e:47:1f:a4:dc:
a0:2e:50:a0:bd:74:df:ca:5e:19:b8:f9:ae:93:6e:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:B1:49:D3:E9:18:F1:F9:69:82:2B:8E:CF:C1:6B:AA:E4:D9:10
X509v3 Authority Key Identifier:
keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:65:88:ef:8e:40:41:b2:2d:1f:8b:3d:04:53:8b:cc:e9:3d:
db:30:90:f2:f7:a3:b0:f3:8b:a5:b8:7b:fa:4d:a5:54:92:97:
80:0a:fc:e8:05:85:cc:12:b8:23:53:ea:3d:c9:b7:97:2a:a4:
fd:e2:1f:71:4e:be:79:74:f0:49:d0:85:1e:dc:43:b7:f1:f5:
5b:0e:98:3b:49:9e:b4:ba:fb:79:1d:6d:ba:4e:fe:92:f5:15:
27:e1:70:f3:3c:d7:c0:df:ba:e1:88:64:8b:69:05:47:11:99:
fc:64:5b:99:4f:1a:e3:77:89:a5:1d:f5:6e:3a:3c:a5:55:de:
3a:00:1e:55:8b:d9:d0:31:66:35:01:e2:34:37:e7:03:22:a6:
f9:bb:b0:07:af:a0:94:00:18:af:5b:95:f7:b7:07:90:1d:59:
3e:89:8a:3c:ad:e9:63:35:4e:41:43:e5:19:69:13:69:8f:58:
7e:fc:e7:bc:91:ba:67:24:fb:37:e5:e9:0f:80:53:88:0d:4a:
26:c4:91:72:07:f2:bc:48:ce:78:0d:01:02:00:28:59:9c:f2:
e0:2e:47:9e:39:36:59:d3:65:d1:93:03:fc:43:d1:f1:50:96:
a4:77:13:30:fa:67:d7:b8:a7:36:d1:ef:d9:04:e0:23:be:87:
42:d8:5e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:38:44 2025 by rpki-client