Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json)
Hash identifier: 6i0ymeUf0m9TE4RX6ywrUZG3pAyewpupQX7NEhy4i6s=
Subject key identifier: 08:47:AC:B1:35:33:A4:BB:5B:90:DB:86:48:E2:B5:05:47:77:D6:19
Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Certificate serial: 042D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
Manifest number: 0429
Signing time: Sat 29 Mar 2025 00:36:07 +0000
Manifest this update: Sat 29 Mar 2025 00:36:06 +0000
Manifest next update: Sat 05 Apr 2025 00:36:06 +0000
Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: 6ZtRnpQbB9Nc0TCdvVnsidmPyyJU+um4yg+J3JyNwpA=)
2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: +23ZbgbMoVqy8WS3A424MrxHSnobech3EJ/pMbqrIKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152643
Validity
Not Before: Mar 29 00:36:06 2025 GMT
Not After : Apr 5 00:36:06 2025 GMT
Subject: CN=67e74076-f4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:76:89:f3:01:c8:a6:33:a4:88:09:69:29:67:
00:66:c2:b7:9f:f5:be:ec:95:b9:de:fe:0e:98:7e:
42:78:fe:8d:c7:f9:20:8e:2b:f6:80:c1:9a:30:b6:
a8:7f:2f:f9:05:33:19:2f:05:c2:64:fd:d6:1d:cb:
50:9f:ee:5c:cb:08:2a:60:6d:6d:7e:8b:9a:e0:b2:
21:21:44:63:82:07:6c:13:c1:a5:a4:93:af:e0:d0:
20:df:2a:83:57:04:a8:0b:ec:ec:d0:95:59:15:f7:
14:05:89:01:a4:66:82:45:8e:29:5d:e9:d1:25:e4:
af:c3:f4:c3:03:01:b1:5c:90:09:4d:85:0f:ff:a0:
3e:b0:7e:a4:13:be:a1:a3:f0:56:7a:34:d0:06:7d:
5b:07:96:11:3e:af:dd:1f:5a:f8:a5:eb:87:2e:5d:
53:8d:42:b4:85:6a:40:80:fd:76:21:99:2d:f4:ed:
f6:f6:60:a2:26:5e:91:12:2f:9d:34:39:c2:0f:15:
80:18:eb:51:d4:a3:df:d8:38:56:15:3d:d7:a5:e7:
a6:30:66:a7:a5:8a:24:4d:89:79:2c:79:0a:71:b4:
a1:09:94:35:e5:a7:ff:e9:8d:72:87:60:9d:5f:bb:
55:4e:03:00:72:02:a3:fb:ae:a3:e2:5d:34:53:8b:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:47:AC:B1:35:33:A4:BB:5B:90:DB:86:48:E2:B5:05:47:77:D6:19
X509v3 Authority Key Identifier:
keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c7:b5:f3:bc:20:ba:8a:17:25:fe:39:38:61:1c:2b:10:c0:
16:1a:77:15:41:2f:17:c1:3b:7d:e3:a0:56:44:78:63:d3:a3:
66:dd:55:ec:e6:ea:bd:02:f9:cf:bc:4c:ec:17:f8:cf:22:b2:
f0:42:91:90:b7:05:23:6d:38:47:ae:10:d2:a2:c6:77:87:ea:
fe:69:8d:bb:37:e7:7e:e6:77:3f:48:a1:50:dc:72:34:04:2d:
f9:22:df:e7:3f:ec:20:a1:e9:98:b7:6e:71:35:01:0a:36:65:
4e:92:46:37:81:ba:f3:f1:f8:2d:2c:19:97:dd:4f:8f:69:8b:
45:71:6c:19:1b:1b:9b:ac:c9:23:e1:08:82:54:19:00:92:2b:
57:36:5f:07:fb:ac:aa:ae:24:a6:79:7c:12:c5:cd:ae:1c:f5:
bf:d4:9a:76:0e:cf:9d:d2:0a:b7:58:46:19:fb:40:cb:86:46:
9d:64:24:ea:b2:fe:e4:89:d9:b3:e5:5e:3f:d5:8d:cb:7d:9b:
9d:07:ac:50:10:0a:46:70:83:03:73:7e:3f:0e:6d:88:14:63:
ea:8a:a8:d8:e2:2f:dc:78:68:f6:30:15:a3:32:ef:3a:10:12:
f2:93:80:6f:c7:64:96:6e:c4:56:03:22:1b:97:0f:78:dd:b2:
88:c3:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:43:45 2025 by rpki-client