Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json)
Hash identifier: 1e8uoQHzuujeiW8JPwHDxa/oPKfCzkirTb5y6VHXvYE=
Subject key identifier: FC:A6:B1:CA:E2:5E:41:4F:F1:F1:BE:68:3D:1A:7D:5F:90:2E:82:1E
Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0
Certificate serial: 2178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
Manifest number: 2178
Signing time: Fri 28 Mar 2025 15:59:01 +0000
Manifest this update: Fri 28 Mar 2025 15:59:00 +0000
Manifest next update: Fri 04 Apr 2025 15:59:00 +0000
Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: NtcrGWuXkB6zT7/4kckA69pac533wKql3X7u13m1qFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8568 (0x2178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E40
Validity
Not Before: Mar 28 15:59:00 2025 GMT
Not After : Apr 4 15:59:00 2025 GMT
Subject: CN=67e6c744-2852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:4a:82:38:94:4f:d0:a3:64:e7:22:71:ce:
20:0f:c5:99:a8:b8:5d:cd:36:31:d3:9a:0c:91:1d:
0b:a3:82:40:ef:17:3d:a0:2c:86:e8:07:8f:09:33:
fa:bd:4e:c2:3b:cd:80:78:f9:dd:73:18:e4:58:de:
67:3a:6a:9c:4d:67:f5:e5:4f:cf:58:f7:ab:ca:c0:
4c:6b:38:40:c8:96:27:50:d0:79:93:f7:f6:ff:7c:
cc:63:fe:b5:91:de:dd:b1:13:46:44:d0:3d:07:84:
cd:6a:54:1a:f6:26:86:65:68:9c:6e:1e:a9:60:bd:
91:9b:c5:30:e3:89:58:eb:91:fc:40:7b:4c:d4:44:
0c:8f:28:10:e7:2f:96:45:b4:08:c7:dc:30:c9:32:
d7:1a:18:c8:d0:3a:39:b5:91:0f:ae:32:ac:69:f9:
7d:7c:8d:2a:b2:88:c1:95:1c:45:47:8c:8e:95:95:
06:88:c1:37:85:29:88:08:4f:a4:12:3c:f7:7a:51:
53:cb:6e:7d:a8:90:eb:15:d5:7f:27:60:41:30:11:
7e:fe:64:16:92:0c:2f:28:52:3a:41:40:12:5f:69:
b2:ec:4c:97:34:43:0b:fa:30:79:92:aa:dd:79:2f:
f0:b5:34:56:6e:6f:11:6a:38:60:0e:c5:d9:0b:84:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:B1:CA:E2:5E:41:4F:F1:F1:BE:68:3D:1A:7D:5F:90:2E:82:1E
X509v3 Authority Key Identifier:
keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5c:8e:f9:f8:f8:b1:ac:bc:91:d6:17:c5:79:86:db:10:54:
af:87:8b:a3:9f:28:66:88:e7:bb:cf:d7:3f:b2:ed:e1:99:02:
5e:17:bf:23:53:7a:e8:42:f8:ab:55:2b:34:a4:bc:ae:f7:8b:
5a:92:31:c1:c4:ba:eb:0b:e5:b4:5d:81:01:a8:66:d4:21:4c:
76:4f:80:43:f0:77:00:dd:00:79:bf:1a:31:07:ee:8b:03:22:
65:17:2b:6f:31:03:15:a4:60:ce:b0:8f:0b:5a:38:e1:8b:af:
ca:5e:06:c9:20:ea:9d:6a:31:41:e3:3d:b0:18:02:2f:e1:f9:
fc:2b:04:a0:fd:87:01:ec:46:b1:4a:42:ee:48:45:ec:2e:74:
ad:f4:90:71:31:28:25:ba:86:00:2e:ba:2e:d3:39:d8:0f:e7:
19:22:79:03:14:6f:e9:71:74:45:23:ba:ee:70:de:e1:4f:a4:
b4:bc:76:23:b1:f5:e3:08:99:b5:7e:e2:48:16:47:82:b9:a8:
42:30:d1:f4:89:20:cf:91:82:63:a7:8f:a2:cb:ec:0e:c5:cd:
6e:a8:e8:cb:fd:81:dd:5a:60:bb:96:7f:cf:b2:62:ef:08:32:
1e:a6:df:3c:2c:9d:c5:25:16:f5:fd:50:38:a2:8b:30:e8:a4:
bf:d8:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:33 2025 by rpki-client