Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json)
Hash identifier: x2uWm69UWDAq6q+uoHT/Q9yBwK7U3DGV+u8SXUa6EcA=
Subject key identifier: 70:95:A2:45:79:39:C4:F7:DB:C5:9C:E3:F3:13:6F:D4:EA:4C:1D:28
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
Manifest number: 5C
Signing time: Sat 29 Mar 2025 06:30:04 +0000
Manifest this update: Sat 29 Mar 2025 06:30:04 +0000
Manifest next update: Sat 05 Apr 2025 06:30:04 +0000
Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: AIygBfj791FNOGJgxPehGYRUMIzls6o6NX5j+W10rPQ=)
2: 1976FC0CFA6C11EF99638E1FC4F9AE02.roa (hash: te5PzAkdFI+eQ5CMJL5Z4aIa9hh81p7zUj8QOmt+SYo=)
3: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: WagnJcg5f8efkpfWr+mqkirfnMGP4KyRA+7+p8TOFRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C9E
Validity
Not Before: Mar 29 06:30:04 2025 GMT
Not After : Apr 5 06:30:04 2025 GMT
Subject: CN=67e7936c-7962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:ee:a5:22:76:3a:15:63:a6:46:fe:07:af:
3c:d4:14:80:53:aa:cf:3a:ea:2d:83:c7:d7:54:41:
2e:3b:22:69:f3:53:7d:ef:32:16:bb:00:74:b5:6c:
30:08:e1:f5:ca:e0:a5:30:87:16:e4:a2:94:35:b2:
e9:f6:3d:41:1f:34:ec:38:36:9d:9e:ce:35:4a:ec:
d6:c7:41:ed:16:bd:bc:5f:e5:78:86:9e:4a:f6:33:
d5:4c:6a:71:56:a3:62:c9:33:0c:7b:68:b5:e9:14:
99:57:e9:f0:ff:d5:1b:28:ee:4e:2e:6b:59:42:1e:
8a:0d:4b:75:c2:31:fd:02:36:74:d3:a4:6f:f6:21:
b0:a3:45:be:c9:36:98:c1:4e:82:7b:9f:26:cf:6e:
6c:dd:16:be:61:af:0d:42:e6:ee:38:22:03:a0:02:
d3:74:53:b2:6f:9e:fc:ef:89:eb:1f:ca:11:4e:f8:
83:6c:9e:8a:12:41:47:05:8f:61:bb:8a:31:72:91:
e7:a4:23:9e:3f:be:db:8c:5b:c8:65:2d:20:84:45:
61:cb:02:f0:8b:81:fb:f1:a9:08:f6:2a:fa:e5:88:
70:2a:30:eb:3c:36:0f:16:79:01:fd:fd:18:13:30:
ad:90:72:3f:c8:b2:1a:62:73:fb:be:11:ca:97:8e:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:95:A2:45:79:39:C4:F7:DB:C5:9C:E3:F3:13:6F:D4:EA:4C:1D:28
X509v3 Authority Key Identifier:
keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4d:07:70:63:c0:fe:a9:b8:d2:13:b5:71:6e:8d:03:d8:b2:
4d:c6:e5:6e:81:a1:02:cb:d6:7d:28:23:4f:c0:3d:48:05:b0:
41:50:e5:bd:24:d8:09:2b:6c:bf:f7:87:94:d1:61:1e:be:36:
64:83:f0:4f:17:16:fe:db:2d:55:19:62:d7:73:d4:10:1b:39:
33:1a:8c:9f:25:34:3e:2a:19:45:69:f6:8c:69:c0:94:ed:94:
8c:1c:ed:fb:9e:a9:be:f1:ed:d1:53:a7:d6:6a:91:5e:9c:8d:
8e:96:20:90:79:30:16:19:88:40:cd:8c:4e:51:1d:0b:a8:ab:
75:ee:d2:34:00:d4:73:4b:b0:64:03:81:4f:55:ee:88:a8:39:
a8:54:e0:5d:b2:79:42:fa:15:97:d0:16:ed:c4:03:b2:dd:17:
87:e7:90:0a:81:cf:e2:48:57:45:8f:5e:bf:21:f2:93:4c:a6:
d1:45:7f:7e:50:74:ca:16:ef:45:c4:60:14:4b:47:56:40:14:
37:6e:4a:3f:00:7d:ba:19:fc:ff:ee:63:6f:14:fa:5b:77:d8:
81:63:ad:6c:8e:46:ca:ac:6c:95:c6:3f:5a:0e:41:1c:e0:ab:
89:32:15:af:bb:a8:77:59:e3:fb:8a:0a:06:66:6e:68:6a:98:
4d:43:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:14 2025 by rpki-client