Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json)
Hash identifier: XgdY6TaRqfVemtyWsIt7KV5Va+l2KM3bBcmjC13FuX0=
Subject key identifier: B1:F4:F6:66:9D:48:9D:6A:BF:88:BB:97:B3:EB:7C:0A:17:62:66:43
Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
Manifest number: 3F
Signing time: Sat 29 Mar 2025 06:51:40 +0000
Manifest this update: Sat 29 Mar 2025 06:51:39 +0000
Manifest next update: Sat 05 Apr 2025 06:51:39 +0000
Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: etP0KVjbSCddL+Vzn7I3rz2blupN/jQloo/iahIGhyk=)
2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: PLX4kBW7Q6lIgEXicoBPIcX2q4HXvsbwpw0VmOF96dY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129757
Validity
Not Before: Mar 29 06:51:39 2025 GMT
Not After : Apr 5 06:51:39 2025 GMT
Subject: CN=67e7987c-1564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:92:4f:a0:40:81:2e:7b:92:65:7f:a2:13:30:
f0:20:fc:0f:0b:bb:3a:f3:75:c4:58:10:81:6d:13:
85:75:de:a5:1a:fd:20:ee:e7:d5:cc:94:8f:a2:6c:
f4:bf:5b:0e:cc:4a:1b:a8:84:6f:12:4d:41:33:a5:
e6:75:c9:4f:63:41:fe:a4:14:c3:20:23:59:73:33:
84:9e:7d:49:c1:69:a8:99:29:7a:d5:7d:f4:33:f6:
72:97:ab:92:41:6c:b2:63:6b:c0:5a:24:17:ef:a3:
7b:23:68:3f:0a:6e:f5:86:05:4c:1d:a3:71:14:8f:
6d:08:39:f8:85:79:e6:2d:8c:c2:90:4c:aa:89:5e:
36:15:35:e9:34:da:fc:fc:3f:b4:78:dc:f6:dd:4a:
48:34:f8:f6:a9:67:14:67:76:40:cb:6c:3a:b6:81:
9b:a0:6d:c0:4b:fb:75:6f:3b:c4:a1:bb:11:5b:ed:
78:ad:c3:e1:c5:05:30:d5:98:c5:39:8b:43:d8:24:
4a:c7:4f:3f:6f:7d:9f:3d:25:b3:82:51:93:5d:64:
fe:54:32:71:b1:ac:24:b2:70:d6:b4:94:74:fe:db:
96:df:5b:a9:e0:4c:9e:18:26:06:0a:fc:58:3d:c2:
65:46:5a:c0:05:01:8c:dd:fe:12:82:4c:3a:7d:48:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:F6:66:9D:48:9D:6A:BF:88:BB:97:B3:EB:7C:0A:17:62:66:43
X509v3 Authority Key Identifier:
keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a9:2f:f0:5b:fd:36:40:23:a0:54:a4:dc:9e:1e:70:21:07:
37:0b:4e:77:1f:71:2b:f5:0b:87:c9:91:c7:67:9d:3e:5b:c2:
93:69:95:73:60:7e:00:8d:e9:82:44:61:cc:7b:d5:d2:78:30:
97:08:a4:99:cd:f8:11:85:2d:4c:9c:02:b7:31:53:84:b2:f9:
37:6d:cd:31:f4:fb:5e:36:da:2c:1a:b0:74:48:3f:7f:a9:a4:
be:19:40:47:0d:25:df:d8:d4:c2:42:13:b5:50:72:c0:9d:4b:
11:e2:29:62:01:5e:05:3f:7f:25:20:65:e7:f3:cc:f4:82:32:
41:2d:48:70:93:5b:69:39:fd:22:1d:25:6a:43:d1:83:b9:e1:
f8:fd:3d:1d:b6:97:70:54:c9:6b:0e:ab:6c:c2:4b:08:58:9d:
62:d1:59:ee:76:ed:ab:8f:7e:30:13:d0:79:ce:21:6a:1f:59:
20:8a:af:b6:2f:06:f3:89:ed:ea:50:10:ff:65:7a:4c:fe:d3:
e5:e9:62:76:09:71:b5:c4:a1:c0:e4:49:d8:70:14:a9:b1:23:
ab:7e:c3:fb:d9:0e:80:1c:e6:85:04:29:d4:84:49:49:49:73:
ac:34:74:e5:0b:ac:b6:e5:26:d4:b9:b0:8c:e3:46:04:31:7b:
85:04:fd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:33 2025 by rpki-client