Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
File: -uYgHGZjkjQL7hOO1BeZuobapog.mft (raw, json)
Hash identifier: kHl7RoJYghGBJ4+F4JawQAO1ahXhbsVyzuCBch8CYj0=
Subject key identifier: 93:B5:D0:F2:AD:49:A7:0A:9B:E0:60:90:61:A5:56:31:16:24:02:FB
Authority key identifier: FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88
Certificate issuer: /CN=A9158840/serialNumber=FAE6201C666392340BEE138ED41799BA86DAA688
Certificate serial: 0C1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
Manifest number: 0C0C
Signing time: Fri 28 Mar 2025 18:51:00 +0000
Manifest this update: Fri 28 Mar 2025 18:50:59 +0000
Manifest next update: Fri 04 Apr 2025 18:50:59 +0000
Files and hashes: 1: -uYgHGZjkjQL7hOO1BeZuobapog.crl (hash: VwLLNM9AJQV+0PkPy2tHFncxdffVfF6UCy6nvGEB4Z8=)
2: 513421B0E3AB11EF9C68465CC4F9AE02.roa (hash: /6OtFAV0fvfK8AYoQXUKAPYFcikHsFv3EvaxBMPOB2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158840
Validity
Not Before: Mar 28 18:50:59 2025 GMT
Not After : Apr 4 18:50:59 2025 GMT
Subject: CN=67e6ef93-e19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:08:23:54:75:4b:79:24:0f:61:5b:ea:93:
26:f9:28:80:69:71:39:9e:67:c8:a6:f2:88:45:e5:
34:aa:c8:28:87:c9:d9:29:bb:49:2d:85:18:c9:4f:
f7:4a:53:ad:5d:67:05:ce:08:de:74:c0:ea:24:4b:
4d:06:f1:f5:b6:87:d2:8f:f0:07:9f:39:52:6f:a3:
de:3a:a3:ee:bd:79:58:aa:0e:e6:ee:94:63:fb:59:
a9:dc:0d:96:20:50:4f:00:64:3f:27:96:98:b0:5d:
b0:1c:4b:e5:d7:ee:16:53:fe:ec:1d:82:07:10:20:
4e:7a:51:4a:15:92:22:2f:2e:6b:d6:f9:e0:db:fa:
e0:2a:33:b9:d7:d2:48:cf:de:d9:68:a8:c5:d9:03:
01:82:2a:0d:34:da:33:61:1b:f3:81:ea:66:52:29:
69:55:30:ed:bb:04:44:c2:bc:f6:78:ab:2a:6a:b7:
15:2a:f4:70:86:1f:62:ba:ba:05:07:c7:5d:65:0c:
43:b3:17:f7:9b:b5:00:a5:30:98:dc:ad:3f:4c:0b:
79:73:60:13:3c:f7:c2:da:40:19:fc:4e:4d:26:0b:
c4:47:e8:01:ca:95:e4:e0:b5:05:af:15:af:71:8f:
63:b6:bd:7c:0f:27:a8:55:03:2a:e0:be:3e:ff:fd:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:D0:F2:AD:49:A7:0A:9B:E0:60:90:61:A5:56:31:16:24:02:FB
X509v3 Authority Key Identifier:
keyid:FA:E6:20:1C:66:63:92:34:0B:EE:13:8E:D4:17:99:BA:86:DA:A6:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uYgHGZjkjQL7hOO1BeZuobapog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158840/6177332A0B8211EA8041154BC4F9AE02/-uYgHGZjkjQL7hOO1BeZuobapog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:37:2d:43:b7:9e:ce:b6:de:dc:e4:ec:f7:21:03:38:47:80:
cc:2e:a6:4f:90:61:66:b8:8c:82:2c:d7:86:b6:e3:b3:76:3c:
9f:85:2a:30:58:22:6e:ee:e7:e6:e3:10:44:e5:74:fd:72:bf:
7d:14:35:a7:b8:6c:0c:9d:a3:1f:f5:2a:ab:52:1d:4d:be:07:
7f:7e:77:b7:5f:dd:a0:ec:6f:59:de:f2:b3:a2:5e:c3:f1:c4:
31:9a:75:74:16:23:ba:91:0a:79:d1:8e:0e:aa:f1:67:30:c7:
ba:18:05:ca:14:a2:e6:4f:31:12:8e:9a:d6:4f:21:19:a3:64:
69:5d:b6:77:49:95:c7:db:3e:49:7a:1d:a5:7a:51:28:a2:f5:
97:70:53:2e:12:45:b3:06:60:90:08:d1:59:92:03:e3:a0:c9:
17:8b:3d:72:22:59:f7:2c:8d:72:09:07:b0:f5:91:f9:86:99:
57:d3:f2:8b:ba:e0:46:df:ce:a4:ff:91:31:42:02:17:c4:fc:
09:10:e1:70:d1:18:db:8f:da:a6:7b:28:11:9e:ec:e4:24:86:
ea:17:50:5f:28:75:be:38:7a:36:cf:1d:86:8d:10:f7:70:0f:
8f:4f:10:f6:e0:0c:92:3f:9a:c9:66:38:df:b5:62:30:be:4e:
ee:a3:38:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:23 2025 by rpki-client