Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json)
Hash identifier: /J/xgzWAR2nnzbFLs5ETVRCarwKz5bqE9XR0LNJWVB8=
Subject key identifier: 3C:64:03:61:BC:AD:4A:1B:EA:B0:1E:42:5B:87:14:A4:62:EE:25:96
Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
Manifest number: F0
Signing time: Sat 29 Mar 2025 04:42:53 +0000
Manifest this update: Sat 29 Mar 2025 04:42:53 +0000
Manifest next update: Sat 05 Apr 2025 04:42:52 +0000
Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: Aq1bEPxMza+F+o2mrSdzxqkQFV2vAG0qBzveP0Q98sg=)
2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: zd1TDezrr156c4EY6JDMzWwdgb+33lD768j6PJBUhL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128D30
Validity
Not Before: Mar 29 04:42:53 2025 GMT
Not After : Apr 5 04:42:52 2025 GMT
Subject: CN=67e77a4d-a006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:30:1f:3e:5d:d0:e7:84:1f:55:fa:42:76:
61:97:2a:e4:03:f6:01:ca:02:56:e1:a8:1b:3d:9d:
0c:e8:08:9e:c5:c7:30:13:42:9f:b2:aa:b4:2d:8c:
44:5d:84:2a:d1:2e:44:d7:8d:b4:dc:0c:22:13:2a:
cb:16:b1:6e:48:99:fc:11:2d:09:42:cd:3d:4b:93:
1b:1b:a8:7b:21:d1:b6:fc:bb:86:fd:d2:09:c5:84:
c9:89:ea:bb:34:7b:40:08:52:22:aa:d0:94:18:d4:
94:7d:e0:d7:66:fa:0a:6f:ef:dd:cd:ad:23:cf:79:
4a:93:13:2e:2a:f0:ec:eb:d1:89:f6:d9:16:d5:2d:
b2:a2:fd:e1:44:73:26:81:29:5e:36:44:5b:12:0d:
b5:52:b9:e7:65:64:8d:c6:37:e3:67:b1:09:c4:f6:
f0:07:58:94:0a:7c:a6:4d:ba:8d:18:d9:7e:9e:2e:
0d:64:dd:39:74:70:16:25:57:ca:9f:93:2e:ab:29:
5e:75:23:b6:cc:90:b9:e1:97:8d:cc:a9:06:ae:dd:
d7:aa:79:ae:96:bc:c4:7c:b4:e9:05:23:e2:a0:b6:
b5:29:82:fa:21:d6:88:c8:4b:97:fb:d1:8b:a4:5d:
cf:dc:59:cf:b0:21:7d:90:9c:81:9a:77:48:73:bd:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:64:03:61:BC:AD:4A:1B:EA:B0:1E:42:5B:87:14:A4:62:EE:25:96
X509v3 Authority Key Identifier:
keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:d6:42:61:57:63:f1:55:53:48:90:9d:17:d1:1e:57:ab:d1:
1f:89:bd:73:a3:79:f4:1c:5a:b8:e4:05:79:e2:4c:0b:65:ac:
d1:bf:89:46:39:1d:aa:25:be:8a:65:ff:96:24:7a:a3:2a:d9:
5e:c3:b8:41:10:2e:d8:8c:f1:64:f4:66:f3:b2:e9:15:db:2d:
56:99:f4:77:fd:4c:95:b0:0b:ee:bb:2e:c6:d2:34:40:3f:35:
02:34:c2:ae:f2:1e:ee:89:5f:05:51:3b:ba:10:15:51:9a:0f:
84:f2:4d:36:39:85:1a:d9:d2:c5:c0:83:04:fe:82:f3:a8:09:
63:60:bf:32:98:25:24:b2:c9:19:cb:17:ac:24:dc:24:32:dd:
c5:7c:96:db:55:8b:02:8e:81:30:b7:23:92:74:0a:ff:8c:3f:
20:22:8a:8f:66:c9:44:63:bf:f2:13:1a:af:3a:30:3d:f2:2a:
80:31:01:41:0d:fe:f9:fc:3b:6f:ba:ff:08:81:49:cd:59:33:
86:54:47:37:3c:30:c9:33:05:0c:34:85:88:4a:49:05:00:d2:
8b:b9:6d:cf:c2:d7:49:f5:28:76:8d:5b:e3:ec:e6:b3:df:de:
a2:d5:53:53:84:72:80:82:b4:0f:1a:e9:e7:d7:0a:e0:b8:8e:
4d:df:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:44:08 2025 by rpki-client