Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
File: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft (raw, json)
Hash identifier: 8PZ2oNl8s8fyyda6Adar+ZpyaQUshR3kt2YrPcojg+s=
Subject key identifier: 72:D9:7C:EF:A7:83:56:2A:31:CB:31:A3:58:C7:DD:F3:28:14:10:44
Authority key identifier: 26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70
Certificate issuer: /CN=A9131157/serialNumber=262EC20D32BC132D7D204C34482229792421CF70
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
Manifest number: 0F
Signing time: Sat 29 Mar 2025 07:31:02 +0000
Manifest this update: Sat 29 Mar 2025 07:31:01 +0000
Manifest next update: Sat 05 Apr 2025 07:31:01 +0000
Files and hashes: 1: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl (hash: xvYW9rfMGBCZyD6rZwG0+loa/xTiRcGCVtdoLfCY/uk=)
2: 2264A3AC083911F0B331A472C4F9AE02.roa (hash: eA+yfXi1+G8fVRdtz3oiWwIwnurv7ds5FCRNxHaftVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131157
Validity
Not Before: Mar 29 07:31:01 2025 GMT
Not After : Apr 5 07:31:01 2025 GMT
Subject: CN=67e7a1b5-36a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:2c:ff:89:9f:e1:ff:bc:1d:20:11:22:50:ea:
d1:dc:bc:ca:49:20:80:68:86:84:78:a9:39:dc:7c:
90:92:5b:bd:14:7b:bf:e9:5f:d4:8c:92:9b:de:e5:
fa:56:34:62:f9:bd:6d:b0:ea:ff:fc:98:e4:ae:cb:
52:1d:f3:4d:e3:93:70:37:14:4f:c4:eb:06:48:05:
3e:89:19:74:5a:79:39:ce:e4:fe:9c:79:a3:82:3e:
51:e6:8a:28:5b:24:4e:1d:01:21:60:4a:7e:30:51:
da:c1:12:dc:02:19:7c:c9:da:b7:f9:4f:44:0a:7f:
0e:43:4e:f4:5e:be:27:8c:a5:a4:68:b4:54:e0:f5:
32:9c:01:a8:3d:70:02:f2:52:81:6b:e8:85:08:35:
72:4f:25:43:4b:7b:92:a2:b4:ff:1e:6f:f9:5f:80:
ee:dc:1c:1f:ae:82:2f:b3:9a:b8:b4:f0:a4:e6:0c:
5f:01:27:6a:59:9f:b4:7b:58:4a:b2:90:41:6e:fe:
f1:9b:ff:56:46:c9:a6:19:d6:a9:2d:b3:de:ae:59:
09:c1:e7:26:66:6d:ae:b4:cc:89:a0:2d:b3:8c:44:
20:35:76:14:de:38:5f:2c:5b:5f:74:e6:98:60:0d:
da:4c:a4:22:56:f2:59:2c:3b:1f:25:46:17:6e:56:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D9:7C:EF:A7:83:56:2A:31:CB:31:A3:58:C7:DD:F3:28:14:10:44
X509v3 Authority Key Identifier:
keyid:26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:2d:ac:11:a3:67:3e:d0:b1:80:39:e7:88:30:68:69:68:31:
a7:0e:82:89:5b:c7:e9:c2:ad:e7:51:fb:50:e8:e1:f4:11:73:
da:ec:22:2c:57:eb:40:60:c7:9b:c5:74:41:ce:69:3b:33:da:
be:4d:cd:23:e5:c8:30:c9:f8:54:6a:72:08:ac:56:f1:85:85:
d4:d2:79:bf:fd:ea:28:07:cd:e9:68:21:5e:68:d4:e7:be:51:
a4:fe:41:8a:fe:79:34:0f:26:81:4a:ea:92:fc:a0:73:22:7e:
2d:19:02:28:23:98:8c:f7:33:b1:f5:22:f6:07:e8:53:bd:f3:
aa:c8:4b:e3:4a:61:09:1a:13:fc:fd:0b:95:c5:d0:b6:86:79:
1e:e7:9d:bf:86:b9:fa:1d:6d:2e:f9:7d:ee:67:b5:b4:77:8c:
f5:85:e3:88:2c:42:70:c4:28:c7:cf:39:64:d1:53:7c:98:28:
bb:cc:4d:9f:a0:bd:cb:66:c8:8e:a2:f8:87:ca:6b:70:da:f4:
4a:84:91:f1:0d:b4:37:a4:39:2d:86:58:f8:85:68:98:26:56:
2d:b2:99:e0:63:c8:15:4c:63:4b:29:f4:df:e9:80:a8:17:4b:
eb:bb:f5:cb:b9:f8:24:73:d0:2b:ce:f3:34:48:e3:5f:2d:ac:
0f:96:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:46:47 2025 by rpki-client