Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
File: 9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json)
Hash identifier: DZT56qT+ZXelcKEBU/9kJ4VTkHB/gnwdNbQPHdLtxMU=
Subject key identifier: BD:91:48:25:24:F4:0F:F3:03:60:E4:39:0F:D6:82:F1:8F:C7:C0:B3
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0A22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
Manifest number: 098C
Signing time: Fri 28 Mar 2025 20:35:08 +0000
Manifest this update: Fri 28 Mar 2025 20:35:07 +0000
Manifest next update: Fri 04 Apr 2025 20:35:07 +0000
Files and hashes: 1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: f2qZfb4C4tGfp5mJnAx9JSzpyhxVXpD8PYQKJ+jV8j8=)
2: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: URaJZHDWPMBf4oTpXlSjA8N1epCCwA1he1DiC+P+VDQ=)
3: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: dzTViCZ69Dd+v01VTdq8e2RvEYU1N06uBHk7UaC//2M=)
4: 6D837614007411F08E85EE81C4F9AE02.roa (hash: kFXr8e5pcdp/i+j6e7pj9hF5FfLGoTzFnroKR0rI+y8=)
5: 19C59818FFD911EF998B5E3DC4F9AE02.roa (hash: b6EElxK46XK+P+krS4+kYExCj7YPLPhqmEi+uys0viM=)
6: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: E5HlYcC49Xvi6kpaq7+gL20czR33gGRvU+n3elbC34U=)
7: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: KM7uZ8V4nYgH56XPrIsS0TU+lQ74o7PGoNp9plcuH2g=)
8: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: dtNfz/Keg7w+1A/MihzHZVUhq163+ywM42QNcaI/10Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2594 (0xa22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172
Validity
Not Before: Mar 28 20:35:07 2025 GMT
Not After : Apr 4 20:35:07 2025 GMT
Subject: CN=67e707fc-700a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:8e:64:05:f9:2c:57:d8:78:0b:12:af:af:
80:8c:3d:4d:d6:41:48:28:de:49:9a:25:36:4b:26:
d1:13:63:cb:1e:1e:b9:9d:76:e4:8c:ad:12:2a:78:
a9:3c:09:fe:e1:99:48:49:c0:56:0c:27:f1:ce:4a:
d6:17:8a:ec:b8:90:7b:2f:46:f9:35:35:09:29:cb:
c5:bc:dc:f8:5e:c9:d0:89:4d:cf:87:47:0a:48:d4:
a7:92:d2:9a:03:b8:8c:c5:0e:62:54:b0:05:96:c7:
8e:11:28:11:a0:51:fd:33:ca:63:28:be:85:20:3b:
9d:18:f1:fe:0a:26:b1:5d:01:08:2e:4a:00:57:b4:
02:e1:89:37:29:a5:1f:8d:ea:b1:ac:d4:00:f4:01:
15:42:cd:23:04:da:5c:d0:4c:f1:09:b2:0f:4a:66:
bd:63:61:59:45:54:b6:ea:6a:72:84:61:bb:60:50:
91:35:4b:49:af:50:b7:23:86:bb:e0:0e:f9:84:4d:
e0:f6:3e:44:e7:8f:31:c3:14:09:ba:cb:00:95:8e:
aa:95:cf:bd:d5:8d:09:a5:b7:c5:64:5b:78:05:be:
f6:13:64:c2:a6:09:17:b4:9a:ae:c8:cb:bf:c2:96:
ce:9d:90:14:d5:9b:6b:b3:02:ab:b0:6b:b8:87:6f:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:91:48:25:24:F4:0F:F3:03:60:E4:39:0F:D6:82:F1:8F:C7:C0:B3
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:dd:6d:92:62:cf:69:ae:29:cb:f0:07:42:9e:86:de:15:c8:
d6:22:4e:18:93:36:e0:d3:c5:1b:6f:ad:50:e4:9f:0a:52:fd:
23:16:dc:46:01:26:d4:bc:e3:49:d5:09:18:a0:c2:72:37:0f:
91:30:f8:92:0d:7b:07:2c:6e:64:fb:94:4f:e3:c3:82:2a:ec:
9c:7a:2a:d7:37:36:c9:4a:ca:e4:23:a1:4e:1e:b6:5b:6a:e3:
96:e2:c3:32:59:dc:81:be:b5:7d:07:bc:05:d7:2f:de:76:96:
4b:b1:ec:75:3e:d5:29:42:b8:76:fc:39:c9:3b:fc:47:4f:c3:
5d:cb:8e:0a:cc:aa:ff:2f:82:5d:0a:bb:8f:35:06:0e:fd:e5:
70:21:a1:65:31:e5:d8:6e:14:75:2f:85:a0:3f:ed:54:7e:d7:
d0:73:d5:4a:82:7a:dc:fb:dc:38:70:a4:95:e4:6b:94:3e:95:
b3:2d:be:d2:c0:f4:ce:e0:70:54:90:c4:e6:53:e0:b6:2d:6f:
b8:4f:66:40:dd:38:44:a8:e7:dd:ee:17:2b:b4:6d:e7:5c:4e:
1d:0e:ba:af:17:82:1d:e6:24:0a:9f:14:9c:87:f9:88:86:a4:
ce:d9:17:d1:2c:b8:aa:c2:f0:f1:64:5b:60:5f:cc:00:32:41:
10:e4:80:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:02:07 2025 by rpki-client