Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json)
Hash identifier: yXeeZqU0szTXpGKNT0w5gsJGKKNzWf3pi3LP3PlTZGE=
Subject key identifier: 05:D8:87:D9:13:50:41:9B:EF:4C:C3:9A:2D:42:60:D4:5E:EF:03:E6
Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD
Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
Manifest number: 025C
Signing time: Sat 29 Mar 2025 02:01:58 +0000
Manifest this update: Sat 29 Mar 2025 02:01:58 +0000
Manifest next update: Sat 05 Apr 2025 02:01:58 +0000
Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: Arvb6b7E3I/4rfGM42lH9LlogsXCX2gA8S7/JVX4Y+Y=)
2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: cG28lDeyahzWWkmTahaq+sCJHYmimDEkICh6+dm+qWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131589
Validity
Not Before: Mar 29 02:01:58 2025 GMT
Not After : Apr 5 02:01:58 2025 GMT
Subject: CN=67e75496-eab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:9d:de:a5:4e:59:06:a9:70:1c:70:56:b7:
47:10:14:d1:dd:6b:df:d6:95:03:39:a8:08:e5:7a:
73:c5:fc:ce:e1:b1:82:6c:2c:79:2c:ed:a4:72:73:
85:0b:0a:f1:7b:3d:44:57:1a:f1:3d:7d:0f:59:de:
5f:72:87:08:4c:15:bd:e7:40:d7:6b:f7:96:99:ba:
fb:75:9e:e7:9b:d9:a3:c0:2e:1a:cb:1b:15:27:ce:
5b:1b:02:2a:7f:e4:ee:5c:7c:7c:0a:ef:c5:63:92:
67:ec:9c:77:10:1c:d3:03:06:9e:be:7e:c4:f1:8a:
6f:65:3b:fb:e7:18:32:56:fc:eb:65:3e:e6:84:7f:
54:ac:76:5e:f7:45:3c:f8:5d:e6:4d:a7:24:ec:aa:
b9:a5:93:7a:ba:ed:ce:c2:d1:97:08:1d:5a:1e:c9:
12:02:d7:e8:f2:73:2c:04:08:8b:68:13:da:8b:0d:
c0:f7:f9:95:54:72:6a:0d:e3:fd:8f:6a:f2:d5:fc:
c8:96:e3:00:57:4f:50:da:85:e7:0a:6e:3e:7e:87:
89:5e:4d:a8:f1:35:60:6f:e5:b8:b6:77:27:01:c4:
d6:d8:bf:2a:f7:e2:67:f6:c5:9d:95:d8:58:d5:ef:
bc:a0:b8:73:db:fe:3f:fc:6c:e0:79:c8:ac:9f:08:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D8:87:D9:13:50:41:9B:EF:4C:C3:9A:2D:42:60:D4:5E:EF:03:E6
X509v3 Authority Key Identifier:
keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0f:d8:0a:7c:59:3c:db:73:f7:3d:87:81:42:ed:8e:93:da:
16:1d:29:8e:a3:76:f4:07:30:24:c1:86:14:9d:23:b8:41:a4:
b4:dc:d4:26:8d:7d:8b:fc:a4:d9:96:3b:3c:a6:1f:37:53:6c:
71:ec:8c:41:43:d7:46:b5:92:8f:5a:3f:91:be:e5:95:f3:96:
3b:3e:bc:59:89:f9:03:93:db:40:fa:a3:fa:f0:9b:9e:e2:ee:
f2:cf:27:ec:33:0b:11:2a:1c:c9:b0:63:48:ee:e2:a2:ec:23:
ba:d6:d3:55:3b:b0:97:58:9d:43:56:92:39:22:88:5f:2a:af:
a3:2f:d8:22:a8:36:7d:30:97:11:32:ad:73:fa:4a:39:fb:26:
8f:b8:e8:e4:f2:b8:90:70:4a:32:e1:9c:78:04:75:0e:65:24:
55:3c:98:1d:e5:b7:61:72:7e:0f:8d:19:6e:d6:6d:cf:e3:cc:
0e:46:d9:f0:b5:a0:67:6b:27:af:89:23:c7:47:b5:0c:79:77:
74:d2:99:38:9e:d0:ba:b7:78:45:d0:4c:3f:76:48:fb:b2:49:
e4:62:81:c0:f9:fa:c3:d8:9b:7e:bc:0b:bf:64:e7:e0:3f:c7:
1a:02:5f:25:5c:6a:02:03:91:db:46:c5:8b:b7:bb:9a:92:75:
fb:df:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:19:12 2025 by rpki-client