Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
File: pQc6SYTllxATMLnnoFjzic6TKa4.mft (raw, json)
Hash identifier: B0dc39LEVgzg28zoq7pIQbpJUkYDU+wau0tWP5/1TaM=
Subject key identifier: 6D:9A:32:23:13:A3:7A:E6:11:01:13:5A:E6:07:48:B0:CE:80:5C:83
Authority key identifier: A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE
Certificate issuer: /CN=A9154B9F/serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE
Certificate serial: 04A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
Manifest number: 04A4
Signing time: Sat 29 Mar 2025 00:11:22 +0000
Manifest this update: Sat 29 Mar 2025 00:11:21 +0000
Manifest next update: Sat 05 Apr 2025 00:11:21 +0000
Files and hashes: 1: pQc6SYTllxATMLnnoFjzic6TKa4.crl (hash: bgdkci9q2yYOsa6xplx6cmbMbDal3sCkONNWIb+pypQ=)
2: 76987158273511ECB7FB443DC4F9AE02.roa (hash: W3CoFW/9z7UlujIbTWP3AOKXFMu+6O4kA5ioHKglL9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192 (0x4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154B9F
Validity
Not Before: Mar 29 00:11:21 2025 GMT
Not After : Apr 5 00:11:21 2025 GMT
Subject: CN=67e73aa9-07f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:f1:a2:d0:62:5a:35:56:7c:c7:f9:75:7b:
23:60:c5:db:87:48:db:78:1e:d2:40:27:13:0a:e6:
0d:b5:b4:8b:4a:a5:2c:bc:f3:ac:ee:78:f3:9e:0b:
54:1e:e3:9c:97:6b:27:29:a1:da:15:01:f4:50:3e:
8d:66:95:db:a3:29:1a:29:1d:eb:df:84:14:f8:0e:
86:72:73:48:82:63:01:5d:fe:51:53:09:fb:d0:25:
26:2f:9f:a2:06:eb:7f:30:26:19:8a:f2:2d:74:f3:
e4:c9:28:d7:da:19:3e:04:e7:4b:5d:67:3e:cb:f8:
36:75:8f:22:9e:42:e4:7f:79:80:77:f5:22:7c:d4:
79:59:e6:f9:2b:b1:82:d8:5b:59:3f:c6:a7:e7:26:
05:6e:a4:2e:f0:3b:c0:50:e6:f7:19:60:a0:0e:ce:
ba:39:64:9f:c2:3f:4e:32:7f:16:c0:1c:60:27:2c:
b2:24:92:0c:22:ec:27:47:65:61:08:7e:e5:4e:d8:
2d:c0:39:85:6b:c8:20:64:3d:74:c7:6c:9e:12:46:
13:15:31:22:c7:12:ef:76:3c:7b:14:e6:95:ff:79:
5b:30:47:e6:09:df:b1:2d:e1:1e:98:35:a9:bb:5d:
9f:2b:ae:24:83:0f:f1:b9:b7:0e:39:e3:38:5b:e8:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9A:32:23:13:A3:7A:E6:11:01:13:5A:E6:07:48:B0:CE:80:5C:83
X509v3 Authority Key Identifier:
keyid:A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:1c:24:bc:e3:07:af:60:65:f5:5e:6b:7e:b8:15:67:a3:91:
33:25:36:51:3e:62:03:a5:a4:6d:11:cd:ab:43:b1:28:d3:f2:
3d:91:fe:ce:c1:58:a2:99:43:1a:74:67:25:41:07:9a:0c:67:
4b:6e:35:c5:1a:5f:98:07:5f:f8:06:56:ef:9f:e0:10:3e:a4:
ae:40:0f:07:32:99:25:72:0a:5d:06:3b:a6:bf:08:e1:47:5a:
d5:94:35:e0:a1:f9:f2:90:b6:5f:47:4f:e7:f7:d3:b0:0f:20:
9f:03:6e:b8:4f:78:79:96:a4:8c:6b:5a:7c:83:a1:12:c8:5c:
bb:d8:82:7e:28:ee:ab:28:80:87:48:56:e0:26:40:45:ba:d2:
ef:51:c2:65:08:0e:87:74:77:c7:d1:41:90:df:e2:4c:34:c3:
4f:6b:66:f1:4a:d1:bf:6b:17:00:c9:15:97:fb:0b:ca:c6:3f:
5a:e1:9f:55:a5:5f:a5:53:c6:b4:e2:43:b2:f2:08:24:d8:38:
92:5a:df:a0:7c:44:24:db:9a:b3:a1:d4:7f:9c:41:a1:42:e9:
d7:2b:a9:75:fe:2a:54:76:d4:db:b6:af:9c:95:21:45:5f:38:
6e:12:9a:4b:14:e2:45:a1:cb:a1:36:ee:60:2a:f4:bd:d8:c7:
9a:23:8b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:46 2025 by rpki-client