Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
File: 5S3osZGTOKPiVWZOiASKVpihINA.mft (raw, json)
Hash identifier: qE0QAYInRCUM8Gjp1DUCWzDCf/y7WpycJ5fwsngn4/o=
Subject key identifier: 39:65:71:CC:1D:C0:B7:FF:3B:20:39:3C:99:74:2D:A0:DA:4D:FC:93
Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
Certificate issuer: /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Certificate serial: 0B55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
Manifest number: 0B4B
Signing time: Fri 28 Mar 2025 19:17:24 +0000
Manifest this update: Fri 28 Mar 2025 19:17:23 +0000
Manifest next update: Fri 04 Apr 2025 19:17:23 +0000
Files and hashes: 1: 5S3osZGTOKPiVWZOiASKVpihINA.crl (hash: 7E9GG0B5uqWEmkEpVCUI7tXctbkN/T3zv0rtbGIgOw4=)
2: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (hash: 3rmLILbAM/KMJx9b9ZtmiW/UU8JiAcyOhmtpDcFmRPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2901 (0xb55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160701
Validity
Not Before: Mar 28 19:17:23 2025 GMT
Not After : Apr 4 19:17:23 2025 GMT
Subject: CN=67e6f5c4-c852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:b9:e5:ef:2b:e1:6d:77:af:49:bb:e8:af:
b5:b4:6e:15:90:39:a1:69:ce:54:6f:10:68:fc:40:
2c:cf:b2:c2:fa:69:89:f1:48:c7:85:07:d4:ab:73:
08:e8:09:e0:80:ef:9f:b1:ec:87:02:35:54:bd:06:
26:2a:d7:42:6d:74:6d:9a:fe:84:21:e4:2e:97:68:
aa:a7:fd:17:97:46:8c:e9:d4:2f:f1:55:93:af:12:
b2:36:80:95:c8:f2:0a:7c:59:0e:b5:6f:38:83:0e:
ef:2f:9d:e4:5d:bf:af:19:45:02:8c:f5:98:98:d6:
0f:a2:52:29:8f:03:b6:73:fe:30:cf:f1:eb:65:9a:
2c:3a:ec:c7:8c:2f:fd:74:11:79:84:67:89:4b:fa:
f6:5c:e7:c1:6d:e5:41:92:cd:57:42:1d:5c:16:d6:
67:5a:58:f2:cc:f7:5c:db:ff:c6:0d:0c:a3:fb:68:
94:e2:7e:44:dd:d2:94:77:77:74:44:cb:48:55:8c:
4b:d2:c9:74:01:83:f8:fd:84:fc:ce:47:b7:bd:69:
57:53:be:7c:7e:ad:7d:fb:75:3c:80:05:4e:41:41:
7d:35:c0:f9:31:27:95:93:7f:b7:a3:c5:01:b9:12:
9e:cc:9c:8d:e3:0f:36:e0:10:67:8c:1d:6a:5d:2e:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:65:71:CC:1D:C0:B7:FF:3B:20:39:3C:99:74:2D:A0:DA:4D:FC:93
X509v3 Authority Key Identifier:
keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dc:06:e6:80:1b:8e:52:f8:0e:fb:41:00:9b:4d:ee:6b:bc:
84:14:f6:6c:b3:c3:ee:18:ca:28:d0:86:94:44:95:fb:82:d4:
d0:7b:c4:c0:9d:ae:4f:79:4c:a8:c2:9a:e0:49:b3:21:09:8c:
60:e9:ab:cd:72:51:a0:22:ed:6b:e6:aa:2b:a8:55:72:54:ef:
24:c7:ea:67:07:fa:f9:fb:3d:62:74:ee:84:be:bc:93:1c:6f:
df:1e:62:a9:8f:f3:d2:fb:1d:24:26:93:d3:75:f1:f3:f0:69:
2a:d5:ae:18:5e:24:34:82:27:48:18:64:2d:c0:a2:a7:4d:4f:
a1:54:3d:51:94:f4:f5:3a:7f:a0:0f:d2:56:b4:89:f8:ff:b1:
0f:3b:e6:65:9b:58:fd:cb:08:91:99:66:fd:ed:d4:36:5a:85:
2a:9e:96:66:11:ab:24:30:53:41:bd:0e:c8:1e:b0:01:21:7a:
33:9a:bf:69:58:97:40:9b:a0:99:70:89:b9:fa:8d:f2:80:e6:
df:b5:28:0e:b9:78:a3:2b:4b:37:33:a9:ba:7a:c2:87:69:a3:
dc:a9:e9:c3:f1:d0:8c:bd:cc:42:f2:47:f3:d3:e9:97:19:ea:
b4:d3:16:b3:42:47:65:f8:5b:3f:53:2f:fe:f3:15:c8:18:51:
67:bd:c1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:16:58 2025 by rpki-client