Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
File: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft (raw, json)
Hash identifier: +epSHrpyQX7IJheWw6Ko8VVdQZ3PFV60RO3gOn8V3Oo=
Subject key identifier: 98:77:84:19:2A:21:E0:CE:AE:87:4B:28:DB:1A:42:1D:42:B6:5F:6E
Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
Certificate issuer: /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
Manifest number: 01A6
Signing time: Sat 29 Mar 2025 03:02:03 +0000
Manifest this update: Sat 29 Mar 2025 03:02:02 +0000
Manifest next update: Sat 05 Apr 2025 03:02:02 +0000
Files and hashes: 1: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl (hash: DeYsUgq8GtGsLUK+2oRpL2qOsFbKvh60q5F8q98Qfpg=)
2: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (hash: JxIG0aTCU82q7umurfAFtEVJNKacWC+8NM/ekdYlO24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BA97
Validity
Not Before: Mar 29 03:02:02 2025 GMT
Not After : Apr 5 03:02:02 2025 GMT
Subject: CN=67e762ab-0bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:d5:7f:40:27:38:74:65:60:21:51:4f:00:
e9:4b:6c:26:1f:46:c1:29:c1:4e:4c:07:d2:f5:0e:
95:da:20:11:03:1d:61:f8:a2:64:b5:a2:23:1f:fe:
1e:41:40:63:ea:4b:0b:54:ed:12:25:d4:ba:c0:1a:
5b:d5:9e:b7:39:fc:bd:46:43:ec:c0:a9:3f:6d:8c:
e3:52:42:71:f7:36:9a:fb:e3:ae:64:09:05:5c:de:
e7:12:26:5c:39:9e:f8:a4:cc:c9:9b:df:13:b5:43:
55:32:3f:d4:f1:10:97:69:b0:6e:a0:9c:31:17:70:
7f:19:51:94:68:59:fe:48:e2:2c:c5:26:28:66:e2:
92:08:8e:5c:f8:9b:7e:78:20:54:66:e9:12:35:a4:
cf:1c:ad:8c:cb:51:7f:61:9a:11:c6:48:ae:d4:1a:
af:f6:32:26:9e:dc:f3:65:0f:f0:79:bc:c9:bc:2a:
90:50:92:fb:99:23:91:f9:7f:49:b2:c1:0d:9b:06:
67:a1:32:9b:ef:d9:a9:86:a0:b5:1a:48:86:7f:bf:
c3:d4:a2:7f:c6:4f:13:05:f1:42:ee:6d:02:c1:e1:
35:4a:6b:a2:e6:04:85:a3:cf:d0:10:d8:9b:f1:69:
5e:f3:e8:0c:c9:85:a5:a7:76:cc:6c:03:1e:d6:2e:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:77:84:19:2A:21:E0:CE:AE:87:4B:28:DB:1A:42:1D:42:B6:5F:6E
X509v3 Authority Key Identifier:
keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:68:73:77:25:8a:9a:4b:6a:f8:f3:90:4e:37:35:d1:e4:f2:
72:83:0d:5a:2a:25:2d:57:f6:ac:d2:66:27:a8:f8:54:7b:43:
65:58:c4:cf:6f:19:05:cf:5b:91:40:67:45:56:50:b6:18:4a:
db:dc:a8:06:3a:c5:4a:f3:20:1e:95:43:09:ee:34:89:76:60:
ea:ab:04:f4:43:1d:b7:9e:85:ae:cc:f9:5f:4a:7d:1b:81:2a:
e2:28:c2:5b:69:db:3d:8d:09:f6:1f:00:56:54:4f:00:0b:7d:
c4:41:c5:b7:a3:cd:cc:f7:e8:27:d7:83:b0:75:8b:9a:ff:33:
24:48:71:1e:48:a0:57:6d:6b:92:19:ec:5b:50:3b:33:eb:c5:
ba:64:b6:71:75:cb:be:98:74:f4:8c:f8:78:f3:be:21:c8:9e:
0c:14:fc:a2:72:0f:d9:26:68:57:e3:8b:c9:6c:16:cb:a2:56:
0a:13:d8:a9:75:bb:bb:a7:7c:72:73:fc:75:55:9c:70:c1:65:
02:d6:f2:76:3d:f1:d0:e8:91:b4:86:6b:3d:0f:27:cc:63:76:
9a:ea:e0:6e:e7:e3:8f:c7:bf:16:82:19:70:17:81:8e:e2:a8:
d7:76:ae:f1:6f:8e:66:6f:70:c9:4f:df:2e:e6:7e:92:01:94:
51:c1:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:33:22 2025 by rpki-client