Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json)
Hash identifier: 9wrEhrergJbtqDe9Wtp/qhrJjNxBRJX+tB63itin3d0=
Subject key identifier: 0E:E4:C4:21:9B:D7:C2:4F:EC:F7:7D:95:34:77:30:53:F6:59:D9:BE
Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
Manifest number: 0254
Signing time: Sat 29 Mar 2025 02:03:53 +0000
Manifest this update: Sat 29 Mar 2025 02:03:53 +0000
Manifest next update: Sat 05 Apr 2025 02:03:53 +0000
Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: zPG/o62m/STIlHqffyWIzMWM3v/1H5FtBvqMQnK1vP0=)
2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158DC6
Validity
Not Before: Mar 29 02:03:53 2025 GMT
Not After : Apr 5 02:03:53 2025 GMT
Subject: CN=67e75509-9dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:15:5f:34:df:32:7f:f3:79:2c:46:c5:66:
95:ef:32:17:c1:01:e5:85:92:b0:56:ee:96:5f:73:
bb:03:e4:42:59:56:e5:d7:c7:bf:62:30:d0:1b:ee:
eb:80:54:a9:2e:bb:89:fe:31:aa:e4:ae:fa:00:c3:
3a:18:58:37:a1:e4:70:74:30:e7:f1:73:8a:f5:f1:
10:3d:d6:00:68:02:ee:c9:22:40:27:30:5a:06:8a:
83:ef:9f:83:f2:4a:c5:0b:5b:c6:9c:40:f9:cc:5e:
6f:8e:22:66:7e:b7:8e:57:f1:db:4e:9b:76:48:9f:
85:80:c1:b9:24:22:87:7c:60:8a:d6:38:f6:03:52:
2a:b7:0a:4c:41:88:9e:94:15:27:3d:c8:62:04:6e:
c7:1f:dd:74:59:5c:23:ea:fa:83:e1:18:3a:d5:13:
1b:15:7b:d5:03:46:5c:d5:d3:34:fc:8e:49:0c:6c:
d1:85:1a:c2:61:36:ae:31:00:9c:28:3b:ff:4b:74:
10:7c:6f:33:15:98:e6:32:97:13:e1:f6:d8:53:08:
f1:41:40:f3:02:22:25:29:57:23:bd:fc:b6:02:68:
15:19:99:10:cf:2f:ed:04:81:f6:d6:b4:c0:15:72:
c8:a3:6a:95:69:60:bb:18:b3:c7:eb:e3:03:50:f7:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E4:C4:21:9B:D7:C2:4F:EC:F7:7D:95:34:77:30:53:F6:59:D9:BE
X509v3 Authority Key Identifier:
keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:c3:44:75:48:bb:e5:c6:c4:6f:4f:66:24:79:82:5c:42:95:
bd:4d:31:7e:cf:e8:5d:9f:97:20:39:07:16:6d:12:81:99:14:
fb:9f:52:7c:dc:bb:a9:d7:4f:25:1d:f4:ab:2d:89:15:9b:2f:
35:bc:55:ca:97:8e:70:6a:50:fe:ac:61:28:f8:50:d0:f6:21:
e0:19:a2:21:69:7f:e5:b4:34:b9:f6:14:f7:38:ce:02:de:46:
df:15:e9:21:81:3e:c2:fb:00:f0:00:c9:fd:71:85:39:f1:f3:
d5:72:99:a7:66:5d:6f:60:4e:95:6a:e7:51:b3:fc:6d:83:d4:
90:c9:e4:7f:99:de:69:6a:0f:f4:27:76:2a:7f:b2:fb:33:25:
bd:df:79:8f:42:70:d2:b6:56:1c:70:ed:2a:c8:89:16:25:80:
8c:3f:45:15:e5:36:9f:31:92:5b:7f:c5:a6:4b:4f:45:51:32:
be:73:9d:93:c2:74:9a:c1:3b:c5:d9:5e:25:31:c4:f9:e0:fa:
dd:b0:d6:d3:ee:29:7d:1c:fe:c4:45:d5:eb:bd:e9:7b:9a:c0:
fa:43:8f:09:92:4b:af:d6:30:9e:bb:a7:48:f8:db:49:b6:1c:
2d:c9:9c:8b:6e:e3:e5:49:70:d0:58:b2:c7:e5:42:10:83:78:
db:9a:bb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:29:03 2025 by rpki-client