Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json)
Hash identifier: B/rHxy/bUoxdLm1x1IFwoie5HXQaXC8vfWrevPBd88o=
Subject key identifier: 11:5D:FF:39:EF:71:A8:43:48:AE:E1:90:B8:B4:75:B1:80:F2:3C:EE
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
Manifest number: FD
Signing time: Sat 29 Mar 2025 04:31:57 +0000
Manifest this update: Sat 29 Mar 2025 04:31:57 +0000
Manifest next update: Sat 05 Apr 2025 04:31:57 +0000
Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: 8Na7JHGcbZg1GiHiot0rBJKgQi70tY144bni3IVQvzk=)
2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: xXj+TZCLhrIdzyPWF6AJ+EZHZBHKwdF6FraC4iYNXC4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169591
Validity
Not Before: Mar 29 04:31:57 2025 GMT
Not After : Apr 5 04:31:57 2025 GMT
Subject: CN=67e777bd-3b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:ab:fb:a4:e5:4f:2f:f3:c9:6e:04:d9:97:
7a:fb:18:dd:ff:24:91:de:98:ea:68:89:b1:bd:27:
e8:89:e0:d7:47:c6:fa:d7:9f:74:fe:d8:20:57:60:
93:f0:57:19:5f:4d:88:3f:f3:90:c4:60:28:79:d9:
27:30:c8:34:36:46:57:ad:cc:3a:a1:f9:d6:61:28:
5b:08:d5:7f:86:2b:ea:8a:f7:80:0d:ea:3b:87:01:
af:a2:84:d6:95:de:12:ff:b9:53:52:41:7c:90:ac:
ea:10:07:77:fe:b0:cc:b3:20:09:f5:89:06:93:36:
6e:d1:d7:84:e3:1f:f9:7c:cf:e2:90:00:2a:87:04:
2b:7f:32:3b:a3:d6:e0:34:fd:5c:18:99:97:64:18:
35:28:69:4c:cc:ed:17:f7:38:bb:a0:53:61:cf:59:
8f:b3:58:0c:e9:c6:ad:d7:98:bc:23:8e:24:a9:00:
b2:66:b9:ee:95:6d:db:3f:8b:c1:55:e7:9d:9a:f1:
47:be:73:9a:ef:4d:3f:f8:a3:88:3b:6b:7e:28:09:
1b:3a:eb:30:0e:66:98:75:ba:b8:8b:fa:77:ff:be:
7f:9f:ce:cf:f0:72:0c:11:53:7c:b3:d0:71:5d:6c:
c4:da:0e:7f:b9:8a:1b:d9:8f:25:45:94:15:ac:7e:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5D:FF:39:EF:71:A8:43:48:AE:E1:90:B8:B4:75:B1:80:F2:3C:EE
X509v3 Authority Key Identifier:
keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cd:24:a4:84:72:36:97:ff:16:13:d6:66:e3:d1:1b:e9:6c:
13:59:9f:69:44:e7:49:97:87:1e:dc:e9:41:ec:e3:cb:6a:d0:
e2:36:6e:cd:2f:a8:ee:bc:dc:47:03:cc:43:de:63:64:65:dc:
0f:b9:2c:8e:37:9d:a9:08:62:01:5c:26:9f:0e:65:b3:d4:ad:
a2:a5:d0:a3:26:0f:96:81:8a:1d:5c:0c:18:06:4b:95:29:12:
e7:27:ec:4c:fd:35:7f:58:53:b3:35:1c:08:b6:d0:32:67:ee:
48:73:f0:0a:14:f6:d4:03:ed:c0:f5:1d:f2:62:45:08:69:24:
d9:84:4a:0b:a9:99:93:fc:d3:cd:b0:ee:37:79:a5:e0:12:7d:
80:cd:2c:3b:4c:61:12:ae:1a:f0:d5:0e:d7:94:f2:cf:6b:b8:
21:d4:23:93:d9:7d:38:aa:fa:7b:4c:88:aa:e8:77:fd:a7:2b:
3f:66:48:2e:52:a5:b6:77:a5:70:e8:f2:82:51:97:b9:33:85:
b1:28:b2:c6:ca:17:c8:52:07:ee:74:e0:20:3b:f3:89:b0:a0:
67:98:2e:2f:fb:e7:cd:86:2f:2e:2f:b1:f1:92:ec:38:21:d7:
ba:5d:63:a5:2f:57:05:92:5a:87:a1:93:29:79:d3:62:be:7c:
98:01:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:17:03 2025 by rpki-client