Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
File: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft (raw, json)
Hash identifier: MrczLzghu/MCddUNMkVJgDXTfJQIIhDbTpjbTph47iI=
Subject key identifier: A2:55:DF:7F:C8:E9:F9:B6:6A:16:78:DB:03:E2:6F:F2:DB:11:EA:E6
Authority key identifier: FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4
Certificate issuer: /CN=A9128F1E/serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
Manifest number: 09
Signing time: Sat 29 Mar 2025 07:28:30 +0000
Manifest this update: Sat 29 Mar 2025 07:28:29 +0000
Manifest next update: Sat 05 Apr 2025 07:28:29 +0000
Files and hashes: 1: _utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl (hash: oV1yvEJHeH6bDqz0+hErBgn1Wt+sWYckkKGi8SEhgn8=)
2: FC25E548019411F0A44E3285C4F9AE02.roa (hash: OOiuBnmO2r+s7R41Nu9crqcm0POtH9RoB3Tt79fatwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128F1E
Validity
Not Before: Mar 29 07:28:29 2025 GMT
Not After : Apr 5 07:28:29 2025 GMT
Subject: CN=67e7a11d-382c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:7f:e5:03:35:e5:23:78:fb:45:c6:d8:44:
f4:f8:e4:17:cf:81:ba:74:bf:54:a8:e2:20:58:f2:
fb:89:7c:a3:4c:5d:55:52:c3:18:c3:c5:06:08:f4:
44:99:dc:39:a1:59:52:4b:e4:32:1b:33:01:a6:cd:
52:f3:4c:b1:83:44:df:51:8c:0c:1f:83:43:5e:32:
36:90:9d:54:9a:d2:27:58:d6:18:88:90:01:22:34:
4b:71:18:7e:76:8b:6e:e5:7c:8d:12:fe:16:ab:30:
70:cb:59:77:97:11:bc:1e:a5:19:89:b8:a7:54:63:
35:4f:9e:ae:3c:20:4f:38:4e:1d:b0:24:27:b1:16:
18:a8:66:96:92:ab:c9:5a:a8:49:88:62:8e:d4:aa:
7d:38:10:f6:0e:dc:c1:67:76:f6:aa:ca:df:74:54:
66:a9:98:cc:64:6b:8d:af:61:72:0f:f6:ba:76:3a:
92:17:3b:ce:f0:d9:8c:a9:e0:a2:c0:71:c2:36:d6:
af:be:b7:7d:40:fe:45:ef:5c:b0:96:41:bb:f6:ed:
18:7a:6c:70:f2:ca:5a:7b:7c:30:ce:fc:77:84:5f:
91:8b:41:55:da:51:bc:7b:47:eb:62:8e:ad:1f:78:
ae:a4:0b:3c:be:de:ab:be:76:ef:03:47:0e:c4:45:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:DF:7F:C8:E9:F9:B6:6A:16:78:DB:03:E2:6F:F2:DB:11:EA:E6
X509v3 Authority Key Identifier:
keyid:FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:dd:a5:67:30:27:88:0b:98:39:08:a8:ae:50:d2:66:ca:0c:
bc:13:03:b2:e5:97:fc:bf:6b:ee:77:34:a2:9a:dc:7a:b4:11:
b8:3e:e4:53:d0:27:2c:88:63:ef:1d:2e:dc:15:a0:62:11:49:
2c:eb:27:78:fd:8b:6c:5d:c3:a7:e7:fd:58:97:7d:2e:b5:fd:
a7:de:e4:fa:ce:11:58:4e:7f:63:85:87:c5:57:94:7d:a2:33:
e5:bb:5e:f3:e8:02:ac:09:2b:1a:a1:66:ef:4e:8d:66:e4:83:
b3:5d:c0:7d:da:74:ce:93:a7:45:9f:23:45:d9:78:e2:3e:b8:
fb:ed:cf:39:9a:3c:6f:02:e0:8f:c7:22:2d:20:c6:aa:9c:8d:
07:b8:77:8b:1e:19:40:99:9d:6a:3f:fc:df:93:78:84:38:31:
41:88:f7:33:0a:8b:72:af:09:dc:d4:af:18:0f:6c:c9:50:ae:
02:02:ac:3d:cb:aa:28:93:85:bf:35:52:f1:bc:74:1a:1d:d3:
bc:49:a8:68:4f:d2:c8:06:ee:14:39:17:18:a5:01:08:9b:70:
0a:c1:4a:32:fa:c8:67:f1:aa:8c:ba:31:5e:c9:f4:55:06:59:
e8:24:9c:eb:63:77:f3:c1:04:56:d6:d7:fa:a2:fa:42:5e:cd:
16:0d:7c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:47:58 2025 by rpki-client