Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
File: scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json)
Hash identifier: qugE4xLZT+VDx3sr5JLvJetBCB/4O5FTlGWFI5dUNfk=
Subject key identifier: 9C:7E:D5:F4:CC:70:3C:77:70:D0:53:5A:68:30:9F:E6:89:AB:BA:15
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial: 06AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
Manifest number: 069D
Signing time: Fri 28 Mar 2025 22:29:23 +0000
Manifest this update: Fri 28 Mar 2025 22:29:22 +0000
Manifest next update: Fri 04 Apr 2025 22:29:22 +0000
Files and hashes: 1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: HI5LJrHGHTe8fthW6/DR7rXaZ5QEeCvmLMvb0eG3w9M=)
2: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: H1d0qtWMbN/ZLehnM+qkk/9VJSqY96iabdAlvpWRnf8=)
3: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: YNpH5Q9f52SuXXmbgomoqSZtciJ+QBf4TgDm3Z8IhyI=)
4: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: IRUZ+HQ+rrY+P2Ftx4LEZSfF4IIIe7sj7QLj+A7Ieao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1709 (0x6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160438
Validity
Not Before: Mar 28 22:29:22 2025 GMT
Not After : Apr 4 22:29:22 2025 GMT
Subject: CN=67e722c2-4ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:18:9a:2a:64:3d:4f:65:d2:e8:99:43:87:
2d:70:cc:8c:5c:04:6e:95:c7:b1:4a:ad:09:da:70:
1a:8b:f0:10:1d:ae:ea:04:46:d3:0d:6b:f3:46:c7:
93:23:ca:5e:3a:5a:1f:4a:bf:d9:fc:ef:bd:9a:00:
52:39:8c:80:c2:a5:df:fe:ac:27:cc:28:59:1a:a0:
6a:74:5f:cf:f1:b3:48:f5:b3:8b:22:42:fc:aa:4f:
d2:bf:a4:36:12:e7:02:b9:c2:2e:29:f4:f7:d4:a7:
a0:92:d2:28:c3:cb:ad:38:77:69:45:09:50:af:22:
2f:8b:d1:4c:6e:c5:95:b5:88:2d:13:5f:dd:ef:a8:
c5:c5:af:d2:71:f9:30:6a:dc:d2:18:56:a2:fe:8e:
53:1e:95:3f:f0:2a:09:8c:40:d0:79:dc:60:aa:e6:
cf:c5:c8:6c:de:f9:3c:27:6d:6c:3c:e4:9f:b8:61:
85:3c:a8:99:b6:91:58:30:d1:ac:55:c8:13:0a:2f:
81:cc:e6:51:bb:4b:75:70:93:de:60:2e:e4:e1:50:
b1:44:a4:be:dd:f5:5a:09:97:dd:a5:6b:fb:46:cb:
44:fa:63:5f:d4:c6:8d:45:8b:34:5b:91:39:3e:17:
d8:28:5d:0e:49:b2:14:e4:80:d4:18:f4:e7:1d:b6:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7E:D5:F4:CC:70:3C:77:70:D0:53:5A:68:30:9F:E6:89:AB:BA:15
X509v3 Authority Key Identifier:
keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bf:17:78:6e:11:f0:66:0b:ba:cc:06:12:bf:85:5a:6d:fc:
8b:32:a4:e2:06:72:31:f0:85:c7:d4:e5:f3:9b:02:25:a1:3a:
40:7f:2c:82:84:22:30:4d:22:8a:99:a7:a0:39:c9:05:29:42:
56:e7:6d:af:d3:a0:91:ae:7b:60:b7:99:ff:e8:27:06:7d:7b:
2b:f9:36:ed:d7:1c:e4:15:46:d7:b8:ea:63:7d:30:f2:4a:9f:
0f:4b:65:ff:1a:e1:bb:7e:a6:fd:de:91:a3:81:29:b7:56:1b:
5d:4f:83:57:28:5c:65:f8:28:77:fa:0a:40:e9:b6:a1:fa:1b:
69:e5:93:55:7f:df:e1:80:70:c3:21:2a:28:ef:43:45:68:09:
dd:78:71:0e:9c:ab:63:60:73:38:c1:e0:b8:31:fc:16:c5:4c:
a3:93:ed:74:4e:fa:02:bb:1c:39:02:7d:b9:7f:c1:d5:00:7b:
02:f6:f0:08:fa:b9:64:47:2a:a3:8f:d7:f5:a8:54:07:00:ff:
39:05:fe:74:45:9a:15:06:43:70:5d:1f:ea:88:ab:e7:4a:e3:
0b:c4:2c:d9:f8:52:e9:76:27:d9:51:61:e0:14:29:d4:ed:0a:
60:2b:9a:66:3f:85:1b:6f:eb:69:b5:c0:f2:4e:91:43:e6:45:
c4:9d:16:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:42 2025 by rpki-client