Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
File: 44SqQCWhBrVHp8CJsd3-7mzLoi8.mft (raw, json)
Hash identifier: ym3nBkZ84QzWkxiX2ngA8Ecv7QtQqk/t9kRejhjhCvc=
Subject key identifier: 8B:4D:9F:CE:C6:87:6E:DF:35:5B:B8:F7:74:15:F8:55:C3:DD:4D:BB
Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F
Certificate issuer: /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
Manifest number: 0168
Signing time: Sat 29 Mar 2025 03:34:59 +0000
Manifest this update: Sat 29 Mar 2025 03:34:58 +0000
Manifest next update: Sat 05 Apr 2025 03:34:58 +0000
Files and hashes: 1: 44SqQCWhBrVHp8CJsd3-7mzLoi8.crl (hash: ULrtDNXo1reDuH8wFE/p5YZIi3EP17WruAg9GaXZUKo=)
2: 3D940BFAC1A711EFAFD15F46C4F9AE02.roa (hash: 9+qlA4Q9NblMxHBbHQc6/IzU15TwV+ogIZA74gQ+vIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B4C
Validity
Not Before: Mar 29 03:34:58 2025 GMT
Not After : Apr 5 03:34:58 2025 GMT
Subject: CN=67e76a62-f90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:c3:4e:a3:ec:d1:2e:87:a0:46:26:4d:e1:
b2:60:0c:b4:4d:f2:ab:7d:82:07:e9:f3:09:85:4b:
94:ce:9f:4a:2d:69:fa:fc:6b:0f:1e:9e:ba:b1:d8:
32:d8:17:51:47:39:45:ee:ad:12:03:e6:31:52:02:
3d:98:96:fb:ab:37:93:41:74:92:eb:37:02:8c:9e:
5d:80:e6:32:51:be:c9:e6:ce:2e:d2:d2:b0:81:d2:
bd:4b:66:0b:ff:fe:f7:f1:49:4e:5f:7f:c2:4f:db:
ee:3c:57:9c:ed:99:65:69:d9:08:52:31:56:69:76:
90:90:70:fc:34:f8:ea:31:10:ce:08:8a:94:df:5d:
a7:44:54:be:5a:93:11:2c:d8:18:d3:1b:6f:23:47:
c9:e2:8f:42:b1:f9:bf:f4:96:52:0e:44:02:d9:46:
7a:56:79:f5:ec:db:d4:49:c0:84:a5:f2:53:4b:18:
f1:9b:ae:c6:16:a5:af:30:fd:ac:79:b9:c1:60:83:
27:47:dd:32:21:b7:63:ce:bb:63:bb:c4:ed:6c:2b:
d2:7d:89:1c:76:ae:91:02:1c:6e:5b:2c:e1:63:1f:
e4:f2:8d:0f:81:be:37:27:b8:8f:23:66:fa:b3:a2:
fd:69:65:45:26:73:4b:d3:aa:50:2a:fe:b8:ec:7c:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4D:9F:CE:C6:87:6E:DF:35:5B:B8:F7:74:15:F8:55:C3:DD:4D:BB
X509v3 Authority Key Identifier:
keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:a5:bc:c6:26:ea:e1:f9:e4:c5:b1:4d:cf:23:2f:8d:f5:37:
92:e3:15:06:de:19:69:9c:63:4f:74:a8:d7:32:15:fe:bf:ac:
2e:49:5e:5b:c1:7c:3b:14:22:58:7f:90:9f:ef:34:e0:97:c0:
e4:b9:de:4e:36:bb:60:1a:48:0b:b4:88:5d:f5:5c:eb:2c:8e:
1c:76:d8:7d:10:6a:91:82:78:f0:83:e5:2e:2c:e3:1d:03:05:
52:22:c6:60:5e:a9:72:44:9a:e6:f1:a9:70:14:73:fb:00:76:
4c:38:48:52:39:ec:61:bc:d5:98:72:75:93:d9:7a:df:cc:bb:
34:60:ec:1c:d0:d3:d9:ed:ad:be:60:a6:eb:94:8f:cc:1b:bf:
84:7e:bc:cd:f7:b1:a1:21:ae:af:50:4f:2e:09:bd:01:2c:fc:
91:7f:ef:4d:cb:59:e5:85:3a:ad:f9:b2:67:2f:17:e8:b4:f6:
5b:c5:d2:38:47:30:ec:a0:38:55:da:49:a5:0f:5c:d8:03:d1:
da:3c:0d:f7:e5:2e:af:79:fc:b9:14:ff:96:a6:1f:fb:b8:ee:
36:3b:52:7d:13:04:40:db:6c:01:80:bd:4c:c4:54:1c:60:89:
e5:3c:12:4a:c1:30:e2:16:2f:60:cd:1c:db:3a:a5:8b:9f:d7:
b1:8f:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:40:29 2025 by rpki-client