Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json)
Hash identifier: MBZyFYBarY6KvEWqOdH8deTh8VC7rZq+xWn+dLIiX70=
Subject key identifier: 88:12:97:4F:1D:2F:A4:14:A2:E8:1E:A8:B8:A2:78:7A:BC:3D:36:E2
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial: 05D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
Manifest number: 05B1
Signing time: Fri 28 Mar 2025 23:32:47 +0000
Manifest this update: Fri 28 Mar 2025 23:32:47 +0000
Manifest next update: Fri 04 Apr 2025 23:32:47 +0000
Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: SLCufREcORZUbrC4n5Cifng9AbV2QF+bZc0jmYMJ0Uc=)
2: 96E3EB58B2B711EEAE882255C4F9AE02.roa (hash: tzTNsTyay71DnZ6Tdbo+sDlbNh8WzoY7t1vlYqQ5Tec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CCD1
Validity
Not Before: Mar 28 23:32:47 2025 GMT
Not After : Apr 4 23:32:47 2025 GMT
Subject: CN=67e7319f-c7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:1b:7a:1c:e0:17:d9:b9:3d:be:b6:64:75:
9b:54:17:64:4c:36:1a:4e:17:6d:f6:a6:53:2a:b8:
5b:28:87:f7:52:f9:97:bd:61:13:ca:79:e9:11:de:
69:27:b0:f5:79:17:b7:3f:bb:79:63:c0:ba:e3:b9:
32:82:b0:e8:83:82:24:8e:ee:05:01:2c:ee:8e:75:
8d:5d:d8:3e:f8:9a:76:ab:c8:5f:03:1f:c0:43:29:
31:f7:51:f3:10:d1:4c:06:70:6e:da:b0:02:c0:0a:
7f:b5:54:ce:a4:16:f3:30:d3:57:df:f5:10:80:2b:
8a:84:df:84:02:bf:fd:b6:e6:05:db:7e:63:77:ef:
c6:94:ab:ed:1b:85:fa:c4:0f:11:5d:6b:f7:99:f0:
52:07:de:20:b7:9c:1b:79:31:53:30:b4:d5:35:31:
fb:ad:8d:4e:b7:49:6c:bd:3a:d1:84:83:f9:df:81:
f6:c6:83:d4:4e:5b:54:3f:3e:c3:0b:12:69:f0:c4:
a5:61:81:71:bb:1f:95:a9:88:6b:d1:f9:46:08:20:
3b:eb:62:20:90:78:0f:84:91:1c:8a:cc:da:d0:d2:
6f:80:c8:3a:27:e7:84:56:72:08:44:b5:c5:1a:d7:
5d:f1:80:f0:44:68:7f:b5:8f:64:30:63:f2:d1:34:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:12:97:4F:1D:2F:A4:14:A2:E8:1E:A8:B8:A2:78:7A:BC:3D:36:E2
X509v3 Authority Key Identifier:
keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:bd:99:45:40:cd:9c:53:21:83:6a:15:84:b1:5d:b6:8e:05:
c2:24:d0:c4:e4:52:46:24:a6:cd:c7:53:5e:a9:a8:ea:f3:df:
48:a8:4f:f1:58:ae:c3:3a:10:6f:2a:de:a4:5f:be:20:1f:73:
f9:4f:b6:95:d3:5f:14:7b:d3:69:12:ee:4b:a2:f1:49:83:34:
ab:31:1f:27:5f:40:ca:42:9c:ae:4f:bd:79:57:76:10:d0:8a:
6c:e8:0b:18:f6:cf:5d:5d:9a:8b:c0:7b:a1:f5:be:30:b9:4d:
dc:da:07:14:3e:2d:f0:d4:c3:4b:19:28:39:05:38:52:3a:db:
9a:78:cf:29:9a:ce:dc:54:cd:00:05:04:bf:ed:f2:24:ef:74:
2b:87:7d:9c:60:e2:f7:7a:2a:1d:16:0d:11:9b:02:25:3b:b5:
a4:bd:c5:f1:de:1b:aa:9f:05:68:71:43:d0:5d:b8:bb:01:15:
e1:d7:06:e4:cc:cb:0e:6a:01:8b:f3:1b:e0:26:84:54:56:09:
e7:7b:7a:78:a3:81:d6:8b:8d:2c:4a:5d:87:c6:bc:41:b9:1e:
9d:a0:95:c3:d1:fa:f1:b6:46:15:72:17:9b:12:92:f6:6f:15:
c5:af:3f:19:00:46:43:ac:fd:02:03:c0:73:02:f6:e2:cc:b2:
37:e5:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:26:51 2025 by rpki-client