Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
File: h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json)
Hash identifier: zv6LAXPbR2E5YuqDQkMkVjz35KxV/PXWwJlCmNdcBoA=
Subject key identifier: 15:F9:3C:3A:EE:AC:8D:EF:C8:85:6C:20:DA:1F:17:51:EE:39:2D:AD
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial: 04E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
Manifest number: 04C7
Signing time: Sat 29 Mar 2025 00:11:15 +0000
Manifest this update: Sat 29 Mar 2025 00:11:14 +0000
Manifest next update: Sat 05 Apr 2025 00:11:14 +0000
Files and hashes: 1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: w1WK0KhDhLDGrLo+4XcdkWB259N9SQLsgjVBJvR29GU=)
2: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: ZQeH9s5GaYIk1ZxktX3ZDI1XyJXOlpVX7ljtVr42XF4=)
3: 9B528A5AB7D611EDACEDEC79C4F9AE02.roa (hash: o2ReRLcJlulFpKfpdWmE6u0f7G1G3KpQA2ac4wDJgWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE13
Validity
Not Before: Mar 29 00:11:14 2025 GMT
Not After : Apr 5 00:11:14 2025 GMT
Subject: CN=67e73aa3-7ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:98:b9:70:e5:18:3a:14:a6:b3:53:28:84:
d0:7a:44:65:be:36:24:b3:d5:b0:d8:7c:f6:76:5d:
69:b1:ad:d2:ce:3b:6d:f5:db:65:72:46:48:83:2f:
01:73:e8:72:10:c6:32:58:3c:76:4e:30:4e:f3:54:
9b:19:2c:d4:f1:85:d5:6e:bc:33:c7:e9:99:b1:e3:
15:f5:a3:0c:36:71:17:25:9c:71:a9:d0:a8:34:6a:
d7:16:2f:ba:26:90:12:d5:97:9e:1f:46:9f:13:3f:
e0:fb:ab:cb:51:18:91:30:a2:0b:40:db:bb:20:45:
ea:67:26:4c:b1:c9:33:6f:a1:59:e2:a1:79:d0:d8:
b8:e8:32:15:94:34:c2:e6:91:a4:20:ce:e5:96:62:
bf:86:88:a9:c7:c7:f3:35:da:31:6a:77:b4:48:70:
87:ac:3a:23:3a:91:a0:e4:b6:25:6f:6c:cb:9a:91:
d4:0d:41:65:fd:78:3e:00:a7:3d:c9:d0:4d:fa:b1:
96:fb:11:9c:13:4d:d3:3a:76:4a:08:e8:ba:86:ca:
58:e6:8c:78:ba:cc:0b:38:83:b4:94:97:a5:e5:dc:
95:e8:43:70:31:3c:71:79:1c:fd:68:e4:a6:75:f4:
65:37:d8:1f:bb:b2:72:41:24:d5:6c:cd:aa:ad:74:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F9:3C:3A:EE:AC:8D:EF:C8:85:6C:20:DA:1F:17:51:EE:39:2D:AD
X509v3 Authority Key Identifier:
keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:40:9b:34:aa:45:01:97:21:83:64:ae:d4:b3:80:23:37:ce:
62:21:37:41:e6:e1:fa:a6:86:ec:45:49:43:05:5d:9f:12:87:
8f:bb:25:39:17:de:c5:03:ee:2d:d3:ee:b4:2b:be:9f:95:01:
c4:30:da:68:37:f4:46:eb:d1:f9:18:ba:6e:38:53:b5:09:52:
d9:ed:86:37:1f:b5:88:97:92:3c:24:db:ea:00:04:cf:cf:2d:
2c:83:cb:ac:19:f3:24:40:87:0d:a1:f1:2d:f0:89:d9:2e:d0:
f9:fd:c2:56:b0:07:3f:06:a0:d9:c3:46:d9:1f:9b:59:50:51:
83:b2:a8:4a:3f:b6:b9:ca:f0:0c:c1:8b:42:d1:24:11:e2:a4:
00:db:d7:30:01:bc:c6:e4:45:4a:72:7b:2d:57:8d:50:fc:24:
ce:7a:93:b8:9f:01:6b:98:5c:ea:72:ce:10:59:6d:03:b9:ff:
41:3f:71:51:d3:6b:c6:38:2e:3d:77:17:a7:77:8c:33:3f:e4:
d2:8c:5d:ec:61:b3:0e:47:95:35:0f:2f:5c:9b:e2:4f:e3:a0:
1b:18:ff:95:8f:05:00:e2:a6:e4:5e:27:7c:0b:73:d8:e5:ed:
b9:42:62:9f:c3:0c:bb:a4:e4:1a:7a:2e:73:2b:3e:e2:80:61:
5c:9d:ae:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:48:38 2025 by rpki-client