Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json)
Hash identifier: 4cD3gil6MQ+MI9nT7Dr+H7Fae4eUlgHfDPtJlUSE1Zs=
Subject key identifier: B7:96:0C:A0:4E:15:FC:D0:EB:9A:F2:FD:9E:11:A5:54:12:EC:31:42
Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Certificate serial: 0361
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
Manifest number: 0357
Signing time: Sat 29 Mar 2025 01:15:51 +0000
Manifest this update: Sat 29 Mar 2025 01:15:50 +0000
Manifest next update: Sat 05 Apr 2025 01:15:50 +0000
Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: lbD3MkBgfa5G16icQwlVIYkqgWYYyLHNQcfjhNRN8cI=)
2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: KqdOpgL/gYbDRcrvPzkfG4MiXc7ci+kAVjNAFITHW4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143078
Validity
Not Before: Mar 29 01:15:50 2025 GMT
Not After : Apr 5 01:15:50 2025 GMT
Subject: CN=67e749c7-a232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:31:75:9e:2c:ba:62:df:8a:4f:42:41:06:
15:d4:d4:6f:e4:5f:52:0c:30:c1:78:36:27:25:94:
9e:ca:8d:ef:18:ee:18:af:75:f9:40:2e:f6:c4:79:
07:2b:16:01:3f:80:a0:12:12:c0:c6:09:18:f0:72:
9b:e5:5b:a7:cd:c5:85:a0:2c:94:f6:6e:e4:fc:c8:
fe:bd:d6:dc:03:5f:94:60:94:43:f4:c5:1f:fb:3a:
23:44:4f:f4:4c:23:cd:22:ac:db:8f:01:50:72:0b:
15:40:cd:5b:f5:dd:01:7e:ef:5a:80:d6:db:0f:74:
ec:67:03:35:6d:a5:a1:c8:e9:8e:41:fe:2c:9f:28:
65:b6:a6:c6:7e:d4:19:e7:05:72:0c:67:eb:4d:69:
82:9a:95:3e:24:af:35:6d:77:f7:dd:40:59:3d:b1:
6f:d5:bf:fe:1e:04:cc:8c:8b:77:26:59:51:27:33:
a2:8b:e9:3b:3e:a1:88:68:1a:56:b9:32:4d:84:de:
3c:e7:89:8e:ae:2e:b8:60:0f:67:8c:8f:1f:87:60:
59:2c:9d:5f:fd:a3:06:d1:e2:b9:07:50:7a:84:2c:
76:30:79:9c:b7:5f:ae:30:48:98:76:5f:1d:16:ae:
21:e2:54:39:88:c6:19:a3:e7:50:49:cb:a7:3a:91:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:96:0C:A0:4E:15:FC:D0:EB:9A:F2:FD:9E:11:A5:54:12:EC:31:42
X509v3 Authority Key Identifier:
keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:17:e5:ac:c3:e2:c3:f5:e4:8a:e5:7e:44:e9:16:96:e1:2a:
9f:c0:b9:ca:98:09:8f:0d:95:ee:c4:4b:aa:b9:f0:70:ca:6f:
65:fe:4e:77:4d:c3:11:08:22:93:38:c5:83:61:3f:da:d3:98:
6e:57:5a:3e:b2:72:0d:3a:b2:00:bc:f7:01:6b:1d:35:87:16:
89:f1:f1:2f:83:6e:7a:05:2a:83:41:64:b6:50:5b:e1:55:f7:
9e:c8:69:35:37:5d:a3:59:76:09:ec:1d:5a:b7:65:80:31:36:
c0:68:54:de:bd:2d:6e:87:b9:cd:77:69:44:26:d4:57:ea:49:
2e:be:af:61:d8:3f:70:1f:84:92:65:a2:6b:07:6c:8a:68:27:
5f:20:22:21:49:95:34:cf:30:81:eb:b1:f6:3f:7e:4f:9a:87:
94:98:cd:64:15:4b:66:6e:f4:cd:60:15:99:f6:6d:2a:dd:52:
d2:6e:50:83:e3:19:25:57:fc:96:2e:6c:d2:1f:fe:fc:67:24:
e6:65:60:cd:66:92:6a:6d:23:68:8b:17:1d:46:0e:f7:40:24:
1e:54:d9:a7:c2:a0:e6:d7:34:f5:eb:99:43:44:f1:11:c1:8f:
82:ea:df:72:61:3d:c5:9e:cd:ce:36:3e:2d:7c:44:6c:ed:db:
62:18:dc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:45:38 2025 by rpki-client