Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
File: xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json)
Hash identifier: JPwpme/+WgHhSlt8HyL2VVdkH2EAJhScTAVJfNnbrVU=
Subject key identifier: AC:2F:CB:EC:F7:1E:6F:AB:B6:D8:AB:A9:03:73:C9:2D:CA:7E:CD:DE
Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE
Certificate issuer: /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
Certificate serial: 12D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
Manifest number: 12CD
Signing time: Fri 28 Mar 2025 17:11:15 +0000
Manifest this update: Fri 28 Mar 2025 17:11:14 +0000
Manifest next update: Fri 04 Apr 2025 17:11:14 +0000
Files and hashes: 1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: r1YdDVIauKWlDYOGkASf6gi1IDdh4SEbGjGfugWIkqE=)
2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: uFyvztQzxevciuQ6NLXE4AsYEtpQjXVKdG3AXeRRVx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4822 (0x12d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161EA6
Validity
Not Before: Mar 28 17:11:14 2025 GMT
Not After : Apr 4 17:11:14 2025 GMT
Subject: CN=67e6d833-c36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:fa:58:20:ee:44:50:b4:5f:b0:68:41:b3:
55:a5:93:98:9d:4b:04:eb:05:55:95:f8:67:10:77:
93:26:bd:cb:ec:8b:7d:94:6c:30:f1:db:9f:5a:00:
57:9c:3a:87:09:c5:bc:e4:0d:d9:82:59:e7:67:26:
7d:4a:67:0d:6d:85:69:7c:b2:0a:aa:eb:47:50:03:
90:42:45:b1:de:2c:94:c5:81:d1:9d:46:85:9d:49:
a7:63:6c:ac:4d:45:0b:5e:c2:c6:11:28:7f:0b:75:
57:b4:0f:c6:ae:bf:89:92:90:0e:8a:a0:00:ab:13:
bf:7d:3e:f6:5a:bd:8b:c4:d1:c8:d1:27:e3:ef:d5:
ab:c0:6b:bf:08:15:86:0a:9d:b6:6c:fa:2d:c9:e2:
43:22:ae:c7:97:fc:d7:49:7d:9b:f3:fd:72:39:a4:
74:7b:58:02:8c:ea:09:e4:68:16:75:3d:3d:f8:ad:
57:46:3f:9f:bd:23:8f:b3:b5:fd:75:57:d9:a2:fa:
b7:98:88:3b:66:99:4c:b6:73:69:d6:e7:20:d3:68:
fd:99:c6:62:6b:c9:cc:65:dc:83:b5:bf:f3:a5:a5:
23:d7:6e:f8:fe:66:05:0d:c9:18:fc:10:e0:00:e4:
a6:2d:ee:38:80:b7:7c:a5:31:dd:93:13:c1:0b:c1:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2F:CB:EC:F7:1E:6F:AB:B6:D8:AB:A9:03:73:C9:2D:CA:7E:CD:DE
X509v3 Authority Key Identifier:
keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:05:25:7c:1c:5c:5b:6c:d5:75:21:90:95:47:6b:ce:6f:fb:
12:b8:fd:c5:a9:e0:70:db:73:29:d4:5f:14:0c:8d:c1:26:98:
f4:a0:15:93:2b:50:9a:00:51:e2:d1:4a:b3:af:d0:85:a8:4b:
8b:7a:70:cb:84:77:95:f9:cf:49:a1:67:b2:1d:67:5f:f9:21:
43:4f:22:46:0e:9f:54:ea:f1:92:c3:dc:b3:41:60:bf:4f:80:
9f:37:ce:c0:5e:bb:05:59:db:68:78:9c:41:af:05:43:2b:99:
b8:62:58:37:d9:7b:c0:01:11:3e:9c:76:aa:f5:2c:99:22:cb:
68:10:8b:e5:19:01:ff:a1:72:87:7f:80:3c:b4:1f:96:cc:4b:
a4:d0:c2:f5:1d:4f:06:ba:ba:b5:55:00:7d:74:18:14:03:db:
bc:7f:4a:99:21:7a:7e:49:4e:15:77:7d:00:06:ad:ff:ca:33:
9f:22:12:02:5a:81:a1:62:65:ee:ec:98:33:0c:83:ea:c2:75:
94:76:95:db:8b:1c:d0:27:f7:c0:f8:ca:62:fd:00:c2:0d:7c:
33:97:8f:09:c1:70:b6:fb:a5:4b:ee:db:70:1f:ce:10:5b:db:
7b:a5:01:54:09:b3:84:57:94:70:2d:ec:5c:b5:18:a2:4f:ed:
b6:14:ca:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:51:31 2025 by rpki-client