Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json)
Hash identifier: rdC+fiqjxjDAj6LNjeLZZbI4gZ97wcRJycwdi4g6JM8=
Subject key identifier: BE:C3:EB:6B:7B:FB:2B:6F:00:81:42:1A:1D:71:42:6A:DB:DF:16:02
Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
Manifest number: B4
Signing time: Sat 29 Mar 2025 05:24:06 +0000
Manifest this update: Sat 29 Mar 2025 05:24:05 +0000
Manifest next update: Sat 05 Apr 2025 05:24:05 +0000
Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: 2DpyCZ7osvIV6YDOpqY6lpcvfQZ4NkyHEwmg0CcU70M=)
2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: /piRZvXAAsh1mpg66Okc/aC7aZTe1kUD5ojc4AIc6UQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7
Validity
Not Before: Mar 29 05:24:05 2025 GMT
Not After : Apr 5 05:24:05 2025 GMT
Subject: CN=67e783f5-4af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:61:c4:1d:93:3e:2f:25:b5:19:79:93:a2:
5e:2c:7d:b3:57:5a:24:57:c4:0a:5a:0e:1d:82:1e:
df:7c:59:bf:13:79:b6:90:27:2c:8a:c6:6e:60:7e:
15:5e:3e:b2:b2:b7:a7:83:aa:65:7e:b9:4f:d6:71:
24:99:de:d5:55:1f:a8:c4:a1:df:4e:1d:be:06:b9:
e7:67:48:23:e9:a9:92:93:9b:d7:4e:05:36:c1:9f:
1e:ae:ef:5d:c8:c7:8c:44:b6:a8:2e:94:a5:ef:f2:
99:0a:07:93:a0:0e:a7:df:24:97:1f:03:d9:ef:38:
6a:d7:75:9a:1b:35:c1:19:74:66:c9:ad:87:fe:8c:
60:47:86:79:f8:a8:a5:0e:41:18:40:d6:87:59:c2:
13:06:36:04:9b:f5:87:d0:8c:52:6a:ea:12:fa:ef:
8e:8a:e8:70:fb:eb:2c:1e:82:42:17:0d:27:3c:a4:
12:12:b3:93:01:50:02:19:62:00:f9:54:23:d2:b1:
5a:bb:78:96:73:b2:ab:a0:e0:2d:36:9a:76:5a:72:
f4:fd:49:f9:98:61:3d:e3:a3:de:6f:46:35:58:c5:
5b:00:b9:80:50:56:e8:96:79:78:52:95:18:87:8b:
ad:57:73:52:a2:18:87:59:74:07:a6:1f:0e:2e:98:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C3:EB:6B:7B:FB:2B:6F:00:81:42:1A:1D:71:42:6A:DB:DF:16:02
X509v3 Authority Key Identifier:
keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:e2:26:8e:3d:9d:3a:e7:44:6a:e6:32:a7:5c:f3:31:1c:a5:
6b:ca:93:9e:3e:64:76:98:eb:3a:c8:1e:b0:67:4a:78:27:86:
4e:3a:fe:c9:22:35:1c:0f:df:46:f3:a2:d8:fb:fc:1e:43:9e:
0c:a3:20:fa:c8:40:5b:cf:76:82:30:f3:e6:73:3c:8c:1d:40:
8e:2f:3d:5f:e0:d8:c0:ec:28:db:b4:cf:57:66:0b:ca:fe:c6:
0d:1e:9c:b1:5c:88:fd:37:7d:3e:ff:bb:2f:c7:ee:ca:f5:7f:
ad:b1:c0:29:39:a2:0a:dc:99:41:c7:60:24:47:b4:20:b8:12:
2e:e0:98:f1:3b:9d:ce:78:ae:05:e3:dd:1a:7f:55:e0:4d:e8:
cd:47:72:b6:de:0d:7b:50:f1:6a:fd:d7:5e:bd:96:5a:43:10:
a1:77:d8:96:eb:b0:ef:73:07:ad:fd:56:d5:29:2e:51:fc:4a:
d4:45:e1:ed:d2:3c:22:fe:7a:45:51:4c:e1:d7:b3:bd:2c:43:
7a:ea:13:1a:f1:ac:64:8a:d4:66:33:40:a8:27:fd:6e:4d:48:
ae:cd:b9:50:88:32:65:dc:97:73:3e:1c:6e:ad:91:41:00:09:
5b:92:74:e7:70:78:25:78:73:28:08:e5:b3:d9:d7:d2:39:4d:
38:b9:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:40:05 2025 by rpki-client