Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json)
Hash identifier: xPn8OysiHDGPvIhMOL9WBGAE4SV7AZjdOsGyoP27Vng=
Subject key identifier: 7C:73:AA:28:DE:08:4E:2B:AF:40:37:B4:B8:7C:6C:E4:9D:25:FB:67
Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Certificate serial: 0293
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
Manifest number: 0290
Signing time: Sat 29 Mar 2025 01:48:50 +0000
Manifest this update: Sat 29 Mar 2025 01:48:50 +0000
Manifest next update: Sat 05 Apr 2025 01:48:50 +0000
Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: 40xdIsVfbzG9cVwGhwZMTIjHZDpX1F5qyCCYaHR/IjQ=)
2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: PKEZfZTmj/mGEPOfYVGBRNahCa+W7goVh1g1wDRTSDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659 (0x293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156751
Validity
Not Before: Mar 29 01:48:50 2025 GMT
Not After : Apr 5 01:48:50 2025 GMT
Subject: CN=67e75182-c0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:0d:cd:a2:a3:c8:cc:91:cd:c1:06:0b:29:
74:52:f7:ae:2f:b3:b2:88:19:6f:e2:6c:b9:42:68:
ef:9e:d4:82:11:da:6c:33:d7:e5:7c:32:f1:42:a8:
a6:40:8a:12:32:1e:74:b7:1c:8b:85:91:96:24:d4:
38:a1:77:36:e0:36:f7:fe:a9:b9:39:82:2e:c6:8a:
1f:88:40:97:08:32:5f:57:fd:29:bd:1a:25:df:ac:
42:c9:95:68:e6:cd:8f:2c:26:5a:4c:00:5c:28:1f:
a5:67:01:24:bc:4d:68:8c:e0:9b:0f:14:53:68:d9:
d6:0d:9f:c0:2c:21:aa:be:ad:b7:03:a6:95:88:dc:
61:df:e0:c0:a0:b6:00:be:a6:dc:25:17:40:7a:f2:
94:87:55:58:4b:b9:d9:56:97:82:6b:52:49:be:61:
9c:e5:07:ab:14:ce:f0:0e:79:fd:50:ac:16:9c:41:
f8:92:7c:19:de:f2:8d:88:b0:7e:ad:21:64:3a:1b:
7b:d4:f4:91:b7:3a:c6:10:64:94:31:3f:61:13:7a:
50:78:2d:dd:24:56:1e:f6:e7:fa:82:3f:d2:f8:54:
b5:48:50:db:16:41:bb:e8:dd:1e:bf:6b:c9:27:11:
d8:25:07:5c:86:99:10:2c:b7:e7:81:13:d1:18:52:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:73:AA:28:DE:08:4E:2B:AF:40:37:B4:B8:7C:6C:E4:9D:25:FB:67
X509v3 Authority Key Identifier:
keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:01:0b:77:20:53:3a:37:36:06:26:4b:95:8c:51:44:f8:90:
68:cc:9c:c0:a7:92:bf:6a:ea:a1:c8:b1:a5:7d:25:2f:f3:da:
7d:e3:3b:b3:3e:d2:23:b6:84:c2:56:5a:a0:0c:c7:fd:0b:db:
4d:69:41:f1:b5:cc:0d:7e:6c:be:2d:9d:72:a0:42:b5:25:78:
d5:75:bd:a1:be:ad:34:17:2f:a3:50:ff:f2:cd:a2:10:79:70:
85:bb:e3:cf:f9:ea:c2:96:89:e3:e3:80:e8:7e:18:4c:7b:3e:
ad:dd:ec:b3:aa:4b:a3:06:4a:d6:be:01:28:92:b8:78:65:ec:
cc:ef:82:25:36:33:c8:0f:f3:88:d2:af:4c:b8:5b:78:5e:fd:
27:7c:26:10:2c:6a:37:d5:18:79:fb:9b:06:97:39:9e:30:39:
75:85:5e:4c:7c:66:8f:0a:ff:7c:4f:4c:d4:00:2f:4a:e8:30:
9c:1c:ea:94:ce:3c:13:43:e1:8c:67:6e:3f:bd:48:41:0c:52:
3f:28:e3:30:1d:27:22:c7:dc:1c:8c:8c:f3:93:2a:25:af:a4:
8b:02:a4:78:7e:03:e5:6a:eb:dd:c7:9e:96:71:7e:ca:eb:80:
a0:5f:9b:a3:56:74:fd:05:95:9c:53:21:4b:9a:75:d7:6c:5c:
61:83:f2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:18:51 2025 by rpki-client