Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
File: fuTdyziTyc2__3a-xeAwLlIZJQE.mft (raw, json)
Hash identifier: ICmfvSHNiNw5iSN9W9vQjEFGlQ7yzge1r9PQyt7YAGc=
Subject key identifier: 89:EF:73:FE:29:D1:CC:11:83:44:A3:A5:23:1E:FC:91:16:A7:AF:89
Authority key identifier: 7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01
Certificate issuer: /CN=A9168939/serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501
Certificate serial: 0642
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
Manifest number: 063B
Signing time: Fri 28 Mar 2025 22:51:17 +0000
Manifest this update: Fri 28 Mar 2025 22:51:17 +0000
Manifest next update: Fri 04 Apr 2025 22:51:17 +0000
Files and hashes: 1: fuTdyziTyc2__3a-xeAwLlIZJQE.crl (hash: lyjaSacSZiblTMLG/u+IzIumgn1B2PanR2brx83XLrU=)
2: 50548100855311EBBAE75616C4F9AE02.roa (hash: /SE7Aja2BBR+I+6zyJWrhq+Bo9c2jJI7JkKvXdCSdE8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168939
Validity
Not Before: Mar 28 22:51:17 2025 GMT
Not After : Apr 4 22:51:17 2025 GMT
Subject: CN=67e727e5-b855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:56:20:1d:16:35:57:a4:c5:8b:05:ec:19:
0e:ec:78:37:23:de:c5:d7:3c:d5:38:85:32:3d:8f:
fd:0c:bc:3c:df:91:86:96:83:99:bf:5c:62:89:b1:
b9:11:0a:e5:b2:42:3e:d4:7c:79:ad:88:57:ed:4f:
e8:9d:e5:2e:4a:6c:89:b3:19:85:f1:b9:b6:4e:0d:
a4:8f:f1:d8:db:aa:30:e1:53:e8:2f:33:32:25:db:
16:e0:83:96:19:5a:4b:b7:2e:29:08:33:fb:ef:16:
00:77:20:98:4d:73:2d:04:ce:27:a2:7a:25:84:59:
f2:03:c9:7c:cd:91:fc:cd:f9:e0:12:93:3e:da:d1:
ff:51:85:9a:ff:66:c1:1d:66:fb:60:7b:9c:fe:37:
d3:f1:8b:b0:99:32:37:de:06:33:b9:ab:26:bf:af:
78:49:8b:b6:01:15:f0:f0:03:8f:8c:6d:2d:eb:8e:
74:98:9a:6e:da:6f:ee:25:c6:52:d3:d4:46:a8:30:
2a:2a:58:97:4f:db:e3:2e:f2:89:07:7d:b2:51:15:
5c:64:2e:e5:44:3f:90:83:49:5c:cc:c6:8e:07:69:
f0:76:e3:c2:52:86:4f:74:aa:5e:92:d0:fe:61:f5:
b5:96:3a:6c:14:b9:ea:f9:f7:b5:ba:ce:25:f3:d2:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EF:73:FE:29:D1:CC:11:83:44:A3:A5:23:1E:FC:91:16:A7:AF:89
X509v3 Authority Key Identifier:
keyid:7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fc:9c:e6:31:d7:e5:5e:b9:df:b3:20:91:59:51:f8:eb:71:
87:24:f2:19:c3:19:0c:ba:07:fc:e8:a5:36:99:37:45:dc:7f:
ee:d3:b8:c1:31:20:38:fb:c1:a8:44:12:1e:20:37:24:5a:2e:
8a:6d:01:e1:28:67:c6:7c:9d:89:75:b9:72:2f:cb:ef:f4:18:
9c:13:f4:d3:0f:d2:51:a7:71:5e:68:dc:a5:b7:9e:42:a9:10:
8e:86:4e:83:d7:88:5e:62:75:4e:9b:01:b8:47:d3:10:5c:4f:
f2:ba:89:20:f1:f2:77:ad:0a:80:d6:e7:58:74:9a:1c:18:2d:
61:0a:f2:28:7e:d0:bc:87:97:8b:45:5f:89:ad:3e:af:b3:d5:
5b:1f:fb:cd:d2:74:20:d7:1d:d3:3a:01:43:6d:91:29:b4:fb:
6d:55:fb:e0:0c:00:a4:ce:b1:ca:9e:3f:2c:19:d2:85:69:b6:
de:17:14:89:3c:c7:01:58:b3:bb:4a:7f:7d:e5:9d:6d:39:e3:
13:14:76:d2:51:b4:85:fc:2e:b0:04:da:cd:13:81:8b:50:04:
35:01:73:d8:ee:41:c9:75:ec:22:4e:25:93:43:af:b7:16:d4:
38:a3:d4:10:06:b1:84:1b:a4:c6:4f:79:a3:fc:ba:00:6e:8a:
5e:c8:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:06 2025 by rpki-client