Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
File: fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json)
Hash identifier: gyddNBP4XwyBiADEu5q23QAZeEYOtGUfrnSIt6TiZVQ=
Subject key identifier: 1E:1E:84:91:DC:99:0F:D3:D9:52:03:AF:AA:4F:12:48:C1:8D:39:B9
Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
Certificate issuer: /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
Certificate serial: 1C2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
Manifest number: 1C1B
Signing time: Fri 28 Mar 2025 16:18:53 +0000
Manifest this update: Fri 28 Mar 2025 16:18:53 +0000
Manifest next update: Fri 04 Apr 2025 16:18:53 +0000
Files and hashes: 1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: lZgQHSXiTmuh67VePz8Xe24sNFZqRDEupSoKVZ2nClI=)
2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 3Dm5ElwPB3NMJf/bLLX77VdgpNnL/LPrpw6YAX3+x3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7212 (0x1c2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145519
Validity
Not Before: Mar 28 16:18:53 2025 GMT
Not After : Apr 4 16:18:53 2025 GMT
Subject: CN=67e6cbed-dff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:9b:ab:dd:96:52:f9:7a:cb:31:8e:81:d1:
a9:35:86:5c:8c:31:24:b8:0d:3b:0d:29:2e:9f:25:
8e:2b:d7:26:e7:42:37:aa:5a:dc:63:00:3a:51:6d:
53:a2:a5:b7:e5:29:4d:d7:8d:75:48:36:97:24:38:
de:4c:04:36:08:a7:27:d3:aa:bf:07:f0:10:c5:55:
7c:f9:3b:62:84:76:ed:85:45:21:13:21:8f:2c:85:
d5:da:a1:d3:cf:f7:c7:a5:bd:e1:01:46:e1:6b:f1:
07:e3:78:df:b2:26:6f:e8:41:b1:b7:a0:76:68:e4:
fb:51:03:82:97:67:29:d7:6c:27:ab:14:07:71:91:
4e:d7:fc:39:d3:8d:69:31:15:c6:7a:cc:96:61:85:
4d:bf:3f:cd:22:47:95:b8:c6:eb:42:8c:c7:83:a5:
44:41:99:14:0f:1d:e1:aa:61:c7:f9:75:9f:10:32:
a4:4f:3f:b6:83:89:8e:a4:8c:39:62:d0:87:23:15:
b8:62:b2:1d:5c:21:dd:0b:b7:ad:c1:68:b7:8c:7f:
e4:94:5d:40:f3:b6:0e:0a:a8:54:28:16:5a:94:28:
d6:b1:35:51:f2:0f:1f:4c:1b:80:2e:2f:6f:b3:62:
c6:b3:9f:d6:ce:68:d3:04:27:7c:2e:f5:b7:fa:4a:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1E:84:91:DC:99:0F:D3:D9:52:03:AF:AA:4F:12:48:C1:8D:39:B9
X509v3 Authority Key Identifier:
keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:c8:cd:57:2d:be:a0:9e:c5:46:6b:0e:b9:2a:b8:db:12:e9:
34:97:16:fd:63:40:6d:fe:85:ec:90:ef:4c:a0:8c:0a:2f:5c:
43:42:2b:0c:d3:2e:57:43:74:31:99:e0:ea:e9:f8:73:bd:dd:
51:e2:04:13:f2:fe:a4:81:c2:38:2b:d8:11:8c:5f:ad:a8:d5:
4f:89:33:92:e6:29:9e:78:3d:35:02:df:47:33:c7:74:a8:44:
54:cb:ef:21:cc:d5:c2:bd:e7:09:42:ca:b6:4d:26:4b:ca:a3:
64:83:c3:ba:23:0e:be:c1:8c:98:94:eb:4d:77:5e:25:c9:b4:
f1:f7:d3:00:7b:47:9b:2d:53:53:05:5d:27:4a:a8:51:dc:58:
e7:49:c4:2a:96:16:29:9e:fa:ad:58:fa:7d:44:03:fe:45:f0:
36:1a:b0:4f:d3:9a:6d:5b:c9:32:b1:9e:c2:f7:ac:8e:86:84:
d6:4d:24:0f:9c:36:27:d0:7d:6c:d9:6f:c1:0a:ca:f7:cb:65:
ea:99:1d:8b:70:be:9a:d0:fe:4a:ff:d7:c6:f0:f9:48:8e:56:
06:18:ab:2b:98:67:2f:5c:e8:f2:eb:ca:3a:53:46:e2:bf:fe:
75:2c:6d:39:10:31:8f:16:cf:7d:f5:29:bf:db:05:ba:0a:10:
ec:9e:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:50:25 2025 by rpki-client