
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft
File: q6y5DDE0hQG0sdXlosfP8f2HtVs.mft (raw, json)
Hash identifier: 0cu79SLFnhAEDFHWhWr1nhcCXt47lgFI78dI5D0Uu5c=
Subject key identifier: 2C:71:29:06:72:F0:B6:60:79:99:85:6A:8A:99:EE:36:5B:94:9D:18
Authority key identifier: AB:AC:B9:0C:31:34:85:01:B4:B1:D5:E5:A2:C7:CF:F1:FD:87:B5:5B
Certificate issuer: /CN=A9139790/serialNumber=ABACB90C31348501B4B1D5E5A2C7CFF1FD87B55B
Certificate serial: 05AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6y5DDE0hQG0sdXlosfP8f2HtVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft
Manifest number: 05A8
Signing time: Tue 25 Mar 2025 01:34:19 +0000
Manifest this update: Tue 25 Mar 2025 01:34:19 +0000
Manifest next update: Tue 01 Apr 2025 01:34:19 +0000
Files and hashes: 1: q6y5DDE0hQG0sdXlosfP8f2HtVs.crl (hash: KskYNZOE+nEa9RqNqf7BYje/wGPOK/0Rueaja1e5nQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1454 (0x5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139790
Validity
Not Before: Mar 25 01:34:19 2025 GMT
Not After : Apr 1 01:34:19 2025 GMT
Subject: CN=67e2081b-2820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:bb:77:d1:dd:a3:92:28:0e:71:9f:13:2a:
4f:58:65:84:17:9c:24:14:17:0e:fe:f2:9f:46:71:
42:1b:e9:ce:13:98:ac:a2:94:39:94:fc:42:72:ae:
f4:c9:ec:6e:49:7f:8d:4b:45:b7:27:90:22:e3:eb:
18:08:7c:a1:1f:7d:88:38:a1:e6:6a:10:47:e6:f1:
94:eb:59:83:fe:bb:cc:b1:e6:de:6a:a2:b5:b7:5f:
c9:33:2e:27:6b:1a:3a:ab:ee:68:57:c1:75:a5:9b:
62:a2:e1:56:2a:4c:f1:f7:ce:09:88:23:2e:c5:8b:
3e:f9:74:2c:ca:c9:b1:15:b2:33:b7:c6:8f:27:6d:
28:b0:10:04:0c:ea:d6:25:f0:05:f9:f1:d6:03:8e:
c6:05:e4:9b:3e:b6:96:59:62:9c:fb:48:07:c7:ea:
7f:b3:ee:2a:c3:bd:bc:28:ae:85:7a:6f:aa:cf:68:
30:f9:40:7d:d1:c6:80:21:26:2a:91:9c:42:cb:40:
d0:9f:9c:f7:15:78:f7:5f:08:8c:bf:25:93:b0:7b:
49:29:56:d8:b3:da:1e:9b:5c:2e:2b:a7:b2:25:db:
84:d2:a1:fc:08:f7:52:19:b6:db:09:cb:e2:2c:60:
94:66:c8:b7:3b:6f:fb:a6:26:80:69:5d:73:31:e6:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:29:06:72:F0:B6:60:79:99:85:6A:8A:99:EE:36:5B:94:9D:18
X509v3 Authority Key Identifier:
keyid:AB:AC:B9:0C:31:34:85:01:B4:B1:D5:E5:A2:C7:CF:F1:FD:87:B5:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6y5DDE0hQG0sdXlosfP8f2HtVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139790/BF2CE3F0C0AA11EBBEAFCA2AC4F9AE02/q6y5DDE0hQG0sdXlosfP8f2HtVs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e2:ad:b4:94:8e:a3:7f:48:a9:0f:29:3d:4a:83:83:4a:c3:
63:50:2c:75:c8:3a:06:f7:83:b3:bb:be:69:88:27:1c:e2:88:
ab:9b:26:30:14:81:01:92:2b:51:28:07:8c:e2:fd:23:86:80:
fe:d9:a1:f5:fa:96:6c:2e:4b:94:70:5b:13:c7:e4:f5:58:6b:
fc:b0:e8:bc:a2:e3:d7:11:c4:b4:73:4f:7d:a7:4b:9b:83:af:
90:48:d8:89:d8:c7:8e:cc:15:98:7e:83:1d:4d:3c:d4:39:c7:
17:ca:99:13:40:c5:0a:0d:d8:bd:c6:4c:ef:5e:ef:34:4a:01:
b5:ad:04:f9:20:24:97:49:58:94:83:e5:7d:46:d6:94:9a:4d:
fb:07:cd:c5:ae:b1:b5:cf:fc:24:62:e2:da:9d:65:ed:39:9d:
b9:01:f3:63:3f:2d:5e:63:06:b2:fb:36:c1:6b:31:1f:19:c4:
4e:cc:41:01:99:cf:c3:db:6b:4a:cc:76:0e:e0:2f:ca:31:24:
0d:02:67:4a:45:80:53:46:b0:63:b0:75:af:3d:7e:7a:ec:6e:
5f:de:92:73:ac:8f:cc:e3:56:2f:5e:47:1a:b7:59:16:9a:50:
de:f1:3b:f3:61:9f:0b:3c:12:92:7e:23:e5:b0:e9:7d:43:64:
d3:1c:b1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:09:15 2025 by rpki-client