Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
File: eERZpLZsg1_PXW5aVoctkkfUZYo.mft (raw, json)
Hash identifier: 9kK74gN6BuWQIXSIlhbDVLVsjzXLDT7csPLn+R0jHuM=
Subject key identifier: 98:95:11:E6:D3:68:47:B8:F2:12:D4:B9:2D:C3:B9:D8:E0:DB:65:AF
Authority key identifier: 78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A
Certificate issuer: /CN=A9145258/serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
Manifest number: 24
Signing time: Sat 29 Mar 2025 07:12:34 +0000
Manifest this update: Sat 29 Mar 2025 07:12:34 +0000
Manifest next update: Sat 05 Apr 2025 07:12:34 +0000
Files and hashes: 1: eERZpLZsg1_PXW5aVoctkkfUZYo.crl (hash: 0M/nV0LXjpdz5aD/eM/ZebW+dZLHCzU/1W9AGDFm3X4=)
2: 2C7AE786042711F0BCEB4A75C4F9AE02.roa (hash: TfwuteF4CSmQI9K6dXSTpQXiyzOgk2P0dxR5uxSFtEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145258
Validity
Not Before: Mar 29 07:12:34 2025 GMT
Not After : Apr 5 07:12:34 2025 GMT
Subject: CN=67e79d62-f4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:01:19:a0:ea:4d:e7:f0:4c:2d:a8:3a:63:
d3:ea:84:0b:3b:e6:3c:d9:aa:67:bc:9c:01:7e:9d:
94:e8:bb:68:f8:c0:07:76:2f:b1:bf:9e:77:45:96:
b4:b0:ca:c0:0c:26:73:a0:f1:86:20:91:0d:96:9e:
67:f5:6c:e8:a7:32:dc:50:5e:17:90:5c:d5:04:db:
6b:47:ae:ee:c6:22:01:0d:1f:3a:2e:4d:cf:6b:c9:
a0:bd:c9:bb:6d:db:b9:e5:4e:c8:65:76:30:c4:ae:
25:02:35:0b:3a:d2:4d:58:8e:dd:7f:b5:83:b0:79:
10:b7:e2:ae:30:85:bc:c5:6b:db:60:77:7e:ba:30:
e6:ba:b2:54:68:e5:51:6e:b8:8b:6e:d3:e7:87:11:
54:16:c1:78:5d:be:8e:27:5c:e4:51:ea:4b:6e:eb:
f9:9b:f3:9f:29:f1:af:c8:ee:bf:57:c5:12:da:d8:
ba:c2:09:2b:4b:f6:a1:5f:f9:df:e3:1b:61:1d:b1:
c9:12:c1:22:36:d3:c5:1b:4f:cd:5b:d4:d6:eb:c4:
90:3a:2b:e2:e0:c0:c4:f0:fc:6e:75:e1:fa:b3:42:
69:42:fc:ad:97:5b:dd:f7:06:3f:de:2e:81:3d:5b:
1b:37:cf:61:ba:5b:4a:76:2a:a5:96:7c:d3:16:ce:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:95:11:E6:D3:68:47:B8:F2:12:D4:B9:2D:C3:B9:D8:E0:DB:65:AF
X509v3 Authority Key Identifier:
keyid:78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:04:d0:fb:37:df:31:79:f5:5d:6f:90:37:a9:66:47:78:86:
c0:0e:11:65:c3:56:e5:3f:88:ec:3f:f5:f5:39:17:fd:0d:3b:
8b:b4:10:5d:a0:b5:85:05:ad:ce:4e:d4:ea:32:c0:13:5e:40:
be:58:52:8b:40:e8:cd:67:8f:9a:bf:74:5a:e1:af:ff:e2:b7:
06:01:b9:6b:23:b5:03:4d:09:3f:84:90:9c:9e:e0:ef:c9:7a:
75:a9:54:f7:03:32:53:f4:ca:8c:f9:b3:76:0c:3a:95:db:ca:
18:5f:6e:7c:c9:59:f2:ab:8e:8b:df:bd:83:7b:f5:bb:08:fa:
c4:23:9f:5f:e8:e6:7d:6c:cd:df:8e:4d:d7:2d:90:7c:24:00:
c4:f7:a3:e1:41:1e:c8:7f:71:2e:56:7d:48:ee:5b:77:e0:ec:
d9:5b:8b:87:b7:cc:4c:d2:e0:a2:b2:07:d0:9e:0a:8c:b7:c3:
2d:a0:42:d8:aa:26:d4:1c:ee:7c:9a:87:43:b0:a9:04:21:da:
4a:94:eb:62:fb:ce:f5:89:da:88:7e:37:0a:e8:77:42:92:6d:
b2:e5:a4:37:b3:92:b5:a2:12:9c:3b:3d:61:92:22:7d:45:10:
f1:2d:d2:e8:58:db:02:8f:1d:c5:ae:5b:e0:03:eb:0d:39:7a:
e1:9b:d5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:40 2025 by rpki-client