Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft
File: vR2pHc9Y0IwVyUUayvYvirO-JCA.mft (raw, json)
Hash identifier: vt+4sKFJL04QtmgvwEMV9ECuCdpck5UE4J0uAEj3YrQ=
Subject key identifier: 73:99:16:A0:A8:D0:92:48:18:9A:D0:84:10:90:C0:60:EC:3B:10:17
Authority key identifier: BD:1D:A9:1D:CF:58:D0:8C:15:C9:45:1A:CA:F6:2F:8A:B3:BE:24:20
Certificate issuer: /CN=A9156B77/serialNumber=BD1DA91DCF58D08C15C9451ACAF62F8AB3BE2420
Certificate serial: 033E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vR2pHc9Y0IwVyUUayvYvirO-JCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft
Manifest number: 033A
Signing time: Fri 07 Feb 2025 00:28:14 +0000
Manifest this update: Fri 07 Feb 2025 00:28:13 +0000
Manifest next update: Fri 14 Feb 2025 00:28:13 +0000
Files and hashes: 1: vR2pHc9Y0IwVyUUayvYvirO-JCA.crl (hash: kFLvDi6yybGM6CqSfAGBM4K++kl+vJkzjo+WRgi0+qs=)
2: 51C4917C2F1D11EDA3E29B09C4F9AE02.roa (hash: 1qWAIn6F9vGhO4BdvhObdHxn/58yUdbUg8nJsHtmQ6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156B77
Validity
Not Before: Feb 7 00:28:13 2025 GMT
Not After : Feb 14 00:28:13 2025 GMT
Subject: CN=67a5539e-df8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:67:d4:09:bc:02:f8:dd:b0:ab:c9:eb:4a:
88:03:b3:25:0f:79:29:61:11:23:54:e5:70:4e:d0:
fd:65:12:b1:30:fe:3c:65:96:ce:46:09:dc:8b:c9:
f6:d1:90:d3:47:ee:ec:2c:b1:88:fb:3f:0f:6b:94:
9d:4e:5d:da:e8:75:11:2d:e8:3f:f2:54:7b:6a:7b:
7e:bc:ad:47:8b:48:72:f6:3b:87:92:94:41:e0:99:
e0:ee:29:65:66:b6:7c:9d:a5:62:59:84:e1:be:52:
cb:aa:b5:1c:83:e2:ce:3a:cb:55:c6:6c:b8:6a:00:
0f:91:c9:3a:69:ab:df:b2:13:90:77:39:ed:a0:ec:
43:68:06:30:46:13:5c:15:4f:1c:94:06:be:50:48:
36:aa:68:f9:c7:eb:1c:f2:90:d3:15:38:04:bf:2a:
92:20:99:ee:26:26:f6:45:ee:20:98:9b:13:63:18:
16:de:98:ba:22:f9:20:38:5b:cc:6b:4b:c4:5a:bc:
92:b3:5e:65:8f:ec:9f:4f:e1:20:ad:32:dc:46:46:
0c:3b:c5:ae:26:e7:18:a1:80:e2:e0:24:86:7b:02:
b4:05:0e:b4:b6:bf:e1:5e:a8:29:f9:1f:4b:57:9a:
dc:27:98:ac:08:37:f6:7d:a6:70:cd:ab:39:de:12:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:99:16:A0:A8:D0:92:48:18:9A:D0:84:10:90:C0:60:EC:3B:10:17
X509v3 Authority Key Identifier:
keyid:BD:1D:A9:1D:CF:58:D0:8C:15:C9:45:1A:CA:F6:2F:8A:B3:BE:24:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vR2pHc9Y0IwVyUUayvYvirO-JCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B77/A75EE2B8AA6B11EC9C546121C4F9AE02/vR2pHc9Y0IwVyUUayvYvirO-JCA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1a:ab:2d:35:6e:f4:ca:99:d4:77:5d:f8:db:53:8f:67:2d:
66:74:a8:bf:1d:7e:e3:1e:3e:48:34:4a:08:23:2d:5c:c3:f5:
ba:cd:17:5a:b0:32:78:bb:1f:18:e9:e7:d5:e7:ec:e5:78:15:
a4:a6:9b:e6:5a:4d:c1:96:05:f6:c4:55:97:99:d4:d9:e6:78:
62:95:fd:f8:38:f7:73:6a:34:fa:02:a3:aa:c6:c1:7e:b2:55:
16:94:76:0d:18:c0:6a:f0:72:9e:ac:87:25:41:59:28:2e:fa:
1f:b2:0f:41:c1:1e:3a:ce:74:3e:c2:92:89:72:ab:3c:5c:77:
49:6d:88:ba:db:8c:c6:c2:c1:a7:fb:35:7e:97:82:c4:db:ff:
0c:56:a9:52:cc:b4:2d:f6:74:ba:79:2e:bb:65:56:e4:8e:18:
17:18:97:ef:48:7d:a6:68:02:f6:bd:3a:cd:f7:df:55:9b:ab:
75:ae:c2:b1:c7:a7:d1:c3:8d:9c:3d:3b:28:a9:32:5d:6c:e8:
57:12:e3:a1:a0:1d:51:3f:dc:aa:74:0f:f8:3d:48:5c:23:ca:
fa:a1:1f:67:a4:f1:46:7a:36:3e:69:c7:42:eb:5b:61:6e:c6:
fa:61:69:60:09:b8:c8:be:5b:9b:8f:f2:8f:c7:16:2e:e6:94:
3a:16:ca:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:26:17 2025 by rpki-client