Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json)
Hash identifier: 3X8xtk/b4FHVPrzv+sZv7OF7Lu0itzjpqeS2FWa8R2Q=
Subject key identifier: D5:E8:EC:12:C1:0F:39:B2:5A:E2:3F:89:74:2A:DE:37:A9:E5:07:84
Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
Manifest number: D6
Signing time: Sat 29 Mar 2025 05:01:45 +0000
Manifest this update: Sat 29 Mar 2025 05:01:44 +0000
Manifest next update: Sat 05 Apr 2025 05:01:44 +0000
Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: Itom1qFCb6UovHgyWvjs2XyRpt9UFTs9aSKvHcbyxHU=)
2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: 78U/w57PvT+FVEdRzkbgRL49bNVYISozUZOyQlDFcE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A30
Validity
Not Before: Mar 29 05:01:44 2025 GMT
Not After : Apr 5 05:01:44 2025 GMT
Subject: CN=67e77eb8-eeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:74:08:46:79:63:d9:d5:19:5d:cb:53:5e:
ff:cd:2f:6c:fd:fb:14:7f:bf:2d:5d:6d:2c:d8:ee:
ba:88:dd:d5:a9:0c:9b:19:46:92:0d:c0:9a:11:1e:
91:fe:05:61:7d:6b:9b:2b:e5:59:21:08:18:a0:f1:
fd:0b:ac:46:8f:bc:18:2c:2d:b5:b0:51:74:75:c1:
70:8e:b0:b9:b4:62:e8:33:c2:49:2b:85:b3:55:5c:
e7:5f:10:af:75:e4:50:2f:30:36:46:6d:bb:60:01:
f9:aa:39:28:82:08:63:ea:0b:e0:0b:f3:97:fb:13:
b4:95:a2:9f:ef:2b:a1:84:3f:83:48:b3:b9:d4:17:
8b:a6:96:f5:07:83:31:40:33:4c:63:aa:f5:f3:40:
9c:64:6a:02:5e:46:23:75:0e:7a:c5:58:32:e2:a0:
3a:51:49:ba:bf:df:d5:46:59:89:22:7d:28:af:29:
7d:ba:e9:e5:2e:b8:f0:13:00:69:a2:66:4c:5c:e9:
35:fa:44:03:56:5c:08:bb:38:0b:d2:ca:cf:0c:20:
61:b1:56:a3:2d:1d:0c:f1:27:ad:6c:d2:2b:c7:f5:
36:b8:1a:0b:51:7e:c4:e3:b3:ed:2b:98:76:d6:24:
da:a7:4a:ec:d1:6f:22:73:79:8f:d7:75:08:f8:ae:
a5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E8:EC:12:C1:0F:39:B2:5A:E2:3F:89:74:2A:DE:37:A9:E5:07:84
X509v3 Authority Key Identifier:
keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f2:d2:ee:a6:3d:3f:e1:4b:99:af:7c:4b:70:15:61:d6:06:
65:dd:bf:2d:e3:e9:84:a7:c3:ee:56:26:bf:b4:8f:17:b5:1c:
47:0f:ef:f2:a2:dd:a3:10:02:cf:8b:55:d5:51:20:aa:5d:4c:
ca:fe:e1:84:c4:91:4c:27:36:0a:73:90:1d:04:5a:ad:60:3e:
53:d2:2b:b7:83:3d:ac:90:09:83:fe:1c:3b:2a:dd:79:ac:69:
be:6b:dd:cf:ab:94:ef:27:b4:26:49:a3:ab:15:e2:39:32:85:
27:4c:cc:af:99:02:bb:08:1e:d6:1a:e2:cd:b0:24:ec:f6:03:
b0:f3:29:9a:70:3e:e6:ce:9a:5f:66:23:46:28:75:71:6e:e3:
0c:a4:31:fe:75:5b:39:6c:45:96:5b:6f:90:bc:fd:1a:98:ea:
54:79:6d:85:e0:a7:03:e6:eb:5e:ca:87:e0:4e:0e:ce:04:f2:
ca:50:49:66:c9:09:75:bb:69:23:fd:95:74:0c:7d:c3:7a:fd:
bd:40:6d:fd:be:a4:72:ff:01:f2:85:a3:2c:17:84:36:5a:16:
e2:2a:13:1f:30:8c:b8:a8:37:ec:db:45:d7:91:50:bc:c5:3a:
13:58:a4:d9:c3:f6:0d:12:4c:a5:5d:be:46:a2:1e:ec:95:6d:
22:1a:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:54 2025 by rpki-client