Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
File: C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json)
Hash identifier: 2RJrZM/xJ2qCMdeSzyu+LuXLGGsZCuR4aXeS8j9RKBM=
Subject key identifier: 32:04:66:70:DB:30:1A:C6:FC:04:82:CD:E1:B2:B1:91:ED:18:FE:1F
Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A
Certificate issuer: /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A
Certificate serial: 051A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
Manifest number: 0515
Signing time: Fri 28 Mar 2025 23:51:19 +0000
Manifest this update: Fri 28 Mar 2025 23:51:18 +0000
Manifest next update: Fri 04 Apr 2025 23:51:18 +0000
Files and hashes: 1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: +gjUCrJR0orH8DoWNhUItKNzScBYtnzSnl+o9ignkM4=)
2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: +yQIyhf/TyYpDcf0R24C9WjNNq39cWlJNp6OClFEIoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140E48
Validity
Not Before: Mar 28 23:51:18 2025 GMT
Not After : Apr 4 23:51:18 2025 GMT
Subject: CN=67e735f7-a344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d9:22:b2:5d:f3:45:36:ab:22:0d:b8:f0:cd:
ba:9b:14:10:38:3a:f9:d7:95:45:25:17:91:59:e0:
48:e9:b5:4a:98:f9:2b:81:6a:bc:87:30:78:d8:f5:
2f:45:1c:af:90:cd:ba:7b:03:c1:22:6c:53:1f:4b:
20:0e:52:f3:81:e1:78:d5:f1:77:25:eb:cd:72:94:
a2:1c:ef:f8:c6:a3:c8:0a:83:f1:dd:fc:ad:dc:20:
b6:56:d1:9d:29:72:5d:5e:b9:40:b0:22:aa:91:ae:
5d:d5:13:4d:ff:94:91:87:f3:c7:81:7b:c8:a3:11:
84:ed:99:0c:03:1f:aa:61:4e:25:f1:36:b5:8d:08:
4c:b1:a8:03:a6:07:b2:e3:d0:f7:60:1a:4a:0d:9e:
b8:0e:7e:ac:ca:40:e4:a6:f7:c2:12:13:2d:e8:ac:
31:25:82:3c:85:11:ba:6f:da:67:23:8f:8c:fc:c0:
63:f6:8c:92:a6:c6:4c:31:90:11:9a:94:6d:b6:b9:
50:e7:f0:c7:15:d6:26:83:c4:33:c7:1f:4f:95:3e:
ff:0a:1c:0a:6d:c0:9b:8c:f3:f0:4e:3f:f3:83:69:
3b:03:ac:dd:ed:76:3f:c1:5e:f2:5e:d6:d2:31:72:
3f:69:2c:c9:47:e1:be:75:bb:37:fc:04:8b:55:b7:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:66:70:DB:30:1A:C6:FC:04:82:CD:E1:B2:B1:91:ED:18:FE:1F
X509v3 Authority Key Identifier:
keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:5e:51:a0:b1:7e:1c:e9:45:18:d6:b8:4e:c6:db:7f:62:f6:
88:0a:4b:08:ca:28:2b:82:75:ae:60:93:14:2e:dc:8d:7a:56:
e0:9d:0e:b4:7e:f2:91:e0:bd:18:63:ba:3a:76:9d:f9:14:60:
c9:40:42:eb:ae:4a:f6:db:78:45:b9:da:b7:29:8d:be:a5:db:
69:9c:e1:75:b1:20:b8:68:2f:96:69:10:9e:ed:83:b9:b3:8b:
b3:fd:ef:b2:81:09:15:e7:9a:ea:7d:6a:0a:39:f4:fa:40:21:
48:73:bd:5d:44:a5:ed:29:d6:4d:7b:37:b9:d7:e3:f7:5f:cb:
97:d5:b7:d9:51:ef:bb:e4:8a:49:b5:79:b3:58:be:41:0c:7b:
47:41:ca:f2:43:b0:24:12:9a:48:24:31:f0:6f:7e:d8:18:cf:
cd:36:dd:dd:b1:87:c3:3e:42:b6:b5:2a:3d:9e:e0:58:c0:99:
af:fe:7d:d4:4d:0d:37:9f:cf:b6:29:80:75:d9:ff:95:b2:c6:
ae:b3:6c:2f:1c:ca:89:e2:b2:f8:df:13:f9:20:b5:0e:d8:9f:
ce:6a:0c:6b:15:50:a7:19:c4:7e:dc:35:72:8f:5d:c5:62:24:
56:db:a8:83:0b:6c:82:56:47:8e:4e:fb:c9:d4:cd:bf:10:f8:
48:ce:3b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:55:17 2025 by rpki-client