Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
File: uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft (raw, json)
Hash identifier: 0T8N58tIEeUTjKctLFHTl6WCiKImRNpenEViRhiHQjA=
Subject key identifier: 52:29:E6:8A:40:8F:76:1F:78:74:60:3E:43:B9:B1:F4:63:CD:60:B1
Authority key identifier: BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14
Certificate issuer: /CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
Certificate serial: 042F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
Manifest number: 0424
Signing time: Sat 29 Mar 2025 00:37:56 +0000
Manifest this update: Sat 29 Mar 2025 00:37:55 +0000
Manifest next update: Sat 05 Apr 2025 00:37:55 +0000
Files and hashes: 1: uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl (hash: DRbw1zC5sp/UhHBnaCcx/SnSv1FFc0xNfgmA2Ldj4yI=)
2: 4911720A694F11ECB6F9B541C4F9AE02.roa (hash: znzxqt5ATB6md6snwQGOJ9T4JF8cX1CWxE59m4+gy6E=)
3: 53E4239C99F811ECA0663D19C4F9AE02.roa (hash: dR2muClPcLpQN+xv2JndS2S2ddR9spCzvVQI+l9CEQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1071 (0x42f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138C14
Validity
Not Before: Mar 29 00:37:55 2025 GMT
Not After : Apr 5 00:37:55 2025 GMT
Subject: CN=67e740e4-b7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:a6:56:40:cf:06:7a:2a:59:ff:e2:52:e2:
e3:c0:14:b3:03:10:f0:59:3a:6b:71:96:d5:7d:ad:
98:f3:80:da:59:ee:bb:cf:3a:f7:54:cf:53:71:f9:
f1:44:83:61:4d:0e:ce:7e:68:17:f1:6b:a4:71:85:
aa:ca:4e:8c:e8:cb:0f:fa:b1:bc:29:ee:93:53:e0:
8d:12:33:96:63:15:59:75:3d:0b:2f:b9:c0:34:6a:
ab:9d:71:2e:1b:8f:b5:07:88:2e:3e:65:56:4d:0d:
e1:63:99:d2:d9:de:75:ad:7e:aa:ae:36:2d:de:f7:
e9:a9:bd:b7:9a:03:f5:8f:49:e9:f3:42:2a:c3:3d:
47:7d:fc:4c:ed:9f:d6:0c:06:4b:ae:88:6f:55:22:
7b:35:a6:17:ea:7e:ab:e8:64:a4:45:07:6c:3c:c2:
62:84:4c:dc:26:02:e2:f2:d2:9f:88:8f:d4:32:69:
4d:ef:87:7b:98:57:8b:1c:44:91:f6:ad:71:47:de:
e4:fc:2a:d7:cf:3d:ac:f2:f4:c5:b1:8e:4e:dc:78:
fc:17:2d:a4:b6:65:7a:ec:85:d7:ea:1e:ef:de:59:
72:a4:e3:34:64:d4:1d:8c:42:da:8d:27:2e:ab:d6:
3d:18:79:31:41:e0:da:29:d6:2b:8a:ab:24:3f:cb:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:29:E6:8A:40:8F:76:1F:78:74:60:3E:43:B9:B1:F4:63:CD:60:B1
X509v3 Authority Key Identifier:
keyid:BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:ee:57:60:26:0a:e1:f8:9e:b4:f3:92:e4:20:64:98:23:cf:
d2:34:b3:f0:21:29:43:f0:4e:93:69:15:a2:5a:1b:c0:89:46:
84:ae:f5:df:0a:dd:42:9d:6a:9f:37:15:59:d0:e9:87:01:55:
57:fe:5d:a2:96:5b:5c:e1:1c:d2:7e:b6:05:f4:e5:f0:0e:d8:
bc:f0:d2:96:1c:af:e9:e9:0c:43:94:49:64:e2:8e:97:65:68:
e2:d5:90:ba:f3:67:10:02:e8:f6:b5:28:bb:10:5d:f6:5a:fb:
f0:1f:ef:3f:ad:e7:48:d0:b4:ac:0a:ba:be:f9:ea:58:4b:08:
2c:7f:38:20:3b:a6:4e:4f:e1:64:c6:86:36:14:c1:68:f0:a0:
fa:02:18:eb:32:41:09:10:62:9c:fc:5b:99:5f:7f:0a:dc:0d:
18:d8:24:f5:f7:0c:2b:5d:54:29:c7:35:dc:d7:40:db:dd:a1:
4e:30:9e:96:89:03:24:1a:5c:75:17:5f:77:67:74:de:3a:b4:
6c:00:dc:81:23:a8:5a:3b:b6:cd:56:26:d0:10:15:5d:8e:ce:
8a:d4:25:d9:f1:50:f4:ad:61:44:75:87:9b:04:64:dd:6f:de:
c5:ac:07:02:6a:f3:48:53:be:0f:23:43:98:b8:97:bd:53:df:
f1:e2:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:43:01 2025 by rpki-client