Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json)
Hash identifier: 8nG7oOgLm85F3X0VwLOMzF/FumoTmLh4j/WjnTi72rA=
Subject key identifier: DD:71:BA:60:84:C1:E6:25:FA:95:0A:71:4D:E6:3B:72:BE:42:7D:2B
Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
Manifest number: 72
Signing time: Sat 29 Mar 2025 06:09:39 +0000
Manifest this update: Sat 29 Mar 2025 06:09:38 +0000
Manifest next update: Sat 05 Apr 2025 06:09:38 +0000
Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: YwCdkpjLN7gHUi+g14oMQiyYvW9S6W+qJZY7lgAuILE=)
2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: zTIt7VVx9LOh+fElZbmBDVws/qIJ7/N6iFJRXVOkuO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154973
Validity
Not Before: Mar 29 06:09:38 2025 GMT
Not After : Apr 5 06:09:38 2025 GMT
Subject: CN=67e78ea2-c51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:71:9f:d1:b5:df:24:17:2d:c8:10:cc:17:
cf:23:d4:4e:40:20:08:3e:f5:de:57:f5:69:cc:76:
fc:96:e5:91:b7:f9:44:f1:1a:c0:26:45:20:de:b7:
15:3e:f5:66:ed:d0:4e:81:bc:da:5d:ab:43:1e:59:
66:50:e5:39:c5:f9:fc:11:fd:f8:0f:06:5f:b8:67:
26:2d:2a:1a:68:98:4e:a2:5c:e8:ac:7d:55:d5:4c:
b2:67:57:20:67:5c:0f:ba:c1:72:12:15:5c:a7:d7:
8e:7c:09:a7:bf:4a:60:57:c2:38:3b:84:95:0a:ff:
52:30:e7:77:af:3f:ac:99:a5:ad:38:51:bf:e2:1c:
c7:a7:44:45:2b:cf:cc:d7:55:cc:62:95:e1:b0:5e:
c2:a1:91:b0:41:e7:79:13:89:b4:7c:dc:d7:93:ed:
44:88:4f:80:a4:94:d3:04:55:0c:1b:c5:27:9a:32:
6c:a2:d2:3f:5f:94:32:1d:45:8b:17:bf:ce:cc:80:
8c:6d:b9:b4:4b:4b:a4:ee:3e:13:94:28:49:71:f6:
a0:7d:ba:51:1c:d9:6e:bc:73:22:31:be:78:b5:86:
47:c4:6e:0f:46:38:8b:d6:0b:1c:40:4c:cc:a6:e3:
28:5f:10:39:a0:aa:1c:a6:07:9b:2c:97:b9:59:ad:
73:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:71:BA:60:84:C1:E6:25:FA:95:0A:71:4D:E6:3B:72:BE:42:7D:2B
X509v3 Authority Key Identifier:
keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:05:b4:18:90:47:4b:51:06:af:d2:e0:3f:58:3c:e1:84:95:
db:cf:43:2d:f4:4c:c7:8a:90:16:b3:3d:9f:24:79:31:13:69:
bb:1b:35:fd:55:6b:79:9d:59:78:53:d0:17:e1:d3:64:18:f6:
96:e3:eb:ef:60:76:3e:51:6c:48:1f:c1:5d:3f:b2:43:f9:f9:
ab:33:6a:81:41:93:0f:2b:8f:21:47:5d:c0:5b:2e:66:bf:55:
b5:ff:79:93:b6:e8:a3:97:f8:fa:9c:a9:f6:55:28:f8:a3:e6:
ce:df:5f:97:c2:97:f0:67:63:3d:31:5d:bb:5c:23:d6:73:dd:
06:16:cf:82:a4:b7:6b:9f:fb:63:3d:96:3a:08:a3:39:59:2a:
7c:dd:f0:9d:ae:fc:d3:32:c2:30:fa:43:d0:0f:5d:3c:4a:af:
70:18:06:06:c9:e7:70:f6:ba:57:f9:3f:73:52:61:4f:f0:92:
fd:78:c8:26:45:51:25:b5:1d:74:8d:98:10:ac:a0:f4:bb:58:
ce:66:1a:39:c0:1c:65:c1:6b:34:26:dc:6e:e9:6a:1b:46:3b:
8a:b7:f9:4d:32:45:c0:d5:cd:7e:93:ef:09:46:d9:f4:99:5e:
db:2f:d2:98:05:79:5d:68:cd:16:e1:bc:9e:05:50:bc:dc:e3:
51:75:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:32:32 2025 by rpki-client