Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
File: p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json)
Hash identifier: IXnKqj0ZOotcCJ5JOteMFQp7VZxLAVAe6vh7Zt6c0ag=
Subject key identifier: 40:92:34:1B:7F:6A:31:43:04:4A:09:12:89:BC:72:FE:AE:7A:82:09
Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D
Certificate issuer: /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
Certificate serial: 0AFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
Manifest number: 0AF7
Signing time: Fri 28 Mar 2025 19:29:49 +0000
Manifest this update: Fri 28 Mar 2025 19:29:48 +0000
Manifest next update: Fri 04 Apr 2025 19:29:48 +0000
Files and hashes: 1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: qRMkXZxPJxfS8D0ILojBfcxmu2xAyVhx3HzWkeUP+dA=)
2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: 5LiWM6Uc0NAk4quWPQAO0eKUiNZCpnKkhzSAW+kUOSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2815 (0xaff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D65
Validity
Not Before: Mar 28 19:29:48 2025 GMT
Not After : Apr 4 19:29:48 2025 GMT
Subject: CN=67e6f8ac-e148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:99:aa:e2:5d:59:89:cf:a8:20:56:35:52:
cf:1a:92:06:69:42:83:23:1d:0e:27:21:d6:e8:1d:
7a:24:a0:8f:0a:4a:f7:be:77:90:f4:83:d3:a5:00:
df:bd:b2:a5:1b:48:4f:7f:ae:ae:6e:61:6b:4b:fd:
e0:13:16:d3:ae:11:ee:73:82:b5:1b:0b:0b:1e:ae:
df:d0:3a:a7:4d:d0:78:27:7c:16:d8:48:a9:df:fd:
b6:bb:f4:e9:2f:b7:2b:d2:3e:7a:5a:46:c3:4c:cb:
23:ed:dc:28:91:b0:4e:46:d9:b3:ac:83:96:db:d5:
0c:c4:23:49:e3:4a:1b:e3:a6:bb:14:03:0b:04:eb:
38:25:a6:d9:9e:77:bf:c9:2b:5f:88:26:85:25:fe:
a8:99:61:39:2c:79:14:99:67:ef:61:81:0f:3d:bf:
9e:a4:bc:5e:cf:0e:a0:83:f0:94:09:72:8a:7c:6f:
af:62:e5:b3:de:05:33:bc:77:1e:c6:8d:f4:10:18:
1f:e1:f0:43:e9:e0:4f:d2:ba:7e:fb:dc:5c:82:12:
f9:ad:43:94:f9:b1:99:21:29:94:6f:bf:19:85:79:
68:59:2f:2a:07:ee:ac:a2:3e:8a:32:67:7a:a2:bb:
1e:b9:28:a3:f6:b4:67:e7:eb:fd:92:94:ef:95:de:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:34:1B:7F:6A:31:43:04:4A:09:12:89:BC:72:FE:AE:7A:82:09
X509v3 Authority Key Identifier:
keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:75:d5:62:d5:96:a6:f8:31:26:f2:4b:66:8e:dd:41:b2:77:
c1:d7:0c:24:41:b4:3b:3c:05:f6:81:7b:94:c0:8a:43:a9:c7:
49:b9:fa:83:68:74:dd:11:62:43:fe:99:5e:14:f9:49:7e:23:
bf:a4:37:8d:84:ed:2c:18:f2:4e:1f:22:42:38:8d:6a:c6:01:
ff:33:58:42:36:fc:c4:77:da:83:7a:89:23:b9:1d:ab:59:49:
4f:1b:b5:06:79:11:68:96:8c:75:60:f2:45:ef:97:43:74:10:
cf:7c:52:7a:3d:1b:5d:7d:3d:c6:88:9e:28:0f:fa:d7:9d:37:
81:69:ec:08:c3:dc:5a:ce:88:1f:87:59:c9:e5:fb:06:7d:72:
d6:ab:c7:54:1a:84:c3:84:2a:b7:fa:a9:dc:68:45:ee:c8:97:
9a:79:14:84:a5:7e:e8:00:19:0e:84:d8:e3:77:75:1e:ac:a1:
31:6f:a5:ae:ed:57:82:ed:ad:d9:cd:3e:50:42:ba:c4:5b:d5:
03:e1:96:e1:6b:8d:46:6f:86:21:86:c2:67:28:17:1d:f4:29:
72:d3:70:c4:46:50:f3:52:8a:a4:d0:7d:0e:59:4b:6b:6b:a9:
d2:19:06:b7:31:e8:f9:63:40:cf:6e:da:f2:c8:54:82:a9:38:
5b:9e:47:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:04 2025 by rpki-client