Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json)
Hash identifier: kLXFgf6Ue+sOtTpuEM2BuweLNTX4nJ/bt42qjvVOtYQ=
Subject key identifier: 0A:41:A4:9F:49:46:39:0C:03:CE:CD:8B:04:4A:37:C6:3F:20:DA:AE
Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93
Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
Manifest number: CC
Signing time: Sat 29 Mar 2025 05:05:39 +0000
Manifest this update: Sat 29 Mar 2025 05:05:39 +0000
Manifest next update: Sat 05 Apr 2025 05:05:39 +0000
Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: 6SU14PNX/YtOqSz3MS2h2MsOqi621wbLZN+V1ezP9Y0=)
2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: p/CKDmdi14SpnAXglq6STJnT5JwJ1Aph3AE4B1BxPGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169BAF
Validity
Not Before: Mar 29 05:05:39 2025 GMT
Not After : Apr 5 05:05:39 2025 GMT
Subject: CN=67e77fa3-daa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:43:26:92:7e:ff:4a:90:4d:04:d9:f1:0a:
12:3a:35:a7:79:ea:78:48:10:87:25:b2:a5:fc:ec:
03:ef:4b:67:53:56:66:4f:d3:1d:dc:40:13:90:48:
8f:ce:be:d8:1d:3c:73:a7:a2:32:72:cb:8a:17:6e:
a2:16:b4:35:84:42:de:7f:1b:2a:b3:67:4f:83:bf:
cb:f6:68:83:e2:6c:a9:95:4a:78:b1:11:dd:c2:dc:
bd:78:c0:50:5f:b5:4f:fb:20:d2:f7:68:3f:35:33:
c9:b6:23:61:d8:d3:6f:5f:02:4a:83:bf:e1:12:c9:
21:ae:c7:09:8b:57:aa:1d:e6:ee:fb:f6:ad:86:31:
98:13:df:7b:b4:3a:fd:48:9d:62:d8:bd:87:cb:b9:
ad:28:f5:cf:2b:8c:48:64:f4:cc:e6:ac:f0:d0:c0:
a3:87:56:64:35:54:91:a2:71:cd:43:13:d5:07:dd:
a5:8b:a5:e1:e8:0b:00:7d:37:59:52:4b:52:01:65:
17:db:2c:d4:6f:21:44:c2:b6:16:00:40:81:77:49:
63:ce:85:25:0b:37:f6:4d:8d:f5:df:a3:43:71:85:
93:08:2c:1e:3c:16:d1:f0:63:3c:b2:ec:ad:dc:ba:
15:bf:9f:62:93:15:55:89:c3:9d:b4:ea:f6:36:1f:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:41:A4:9F:49:46:39:0C:03:CE:CD:8B:04:4A:37:C6:3F:20:DA:AE
X509v3 Authority Key Identifier:
keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:c9:10:b7:73:e0:95:6d:b6:2d:b9:22:8b:d2:d4:32:be:8e:
6f:b4:13:76:33:5e:b8:9d:8f:79:82:8f:b0:e1:7d:5a:19:39:
3e:a5:df:0e:f8:c9:aa:65:2f:8c:29:ed:56:08:30:59:68:f7:
cd:5c:21:6c:67:25:2f:45:b6:3f:5a:ac:a0:43:0d:5a:d1:a5:
44:0c:4a:8d:38:5e:cb:06:cd:b5:13:f4:1d:15:80:b5:67:64:
2a:f0:cc:82:93:ff:9e:e7:a9:46:0a:73:de:c8:fb:4f:8f:7c:
3b:76:30:a3:48:88:0e:f4:6b:b4:8e:62:ed:de:07:58:f6:73:
55:94:1f:4d:26:df:75:f9:84:eb:11:1c:aa:ad:6d:08:f1:ef:
c5:a2:a4:2d:27:ae:45:db:81:06:bd:8b:c3:28:93:4b:eb:d6:
f9:37:34:c8:97:94:12:04:9e:8b:f5:f0:93:c3:2e:08:98:d8:
ec:6d:48:20:1e:47:52:f8:7e:91:07:bf:74:f4:27:67:20:87:
b1:fd:33:4d:4e:a5:c2:d0:1d:1f:4c:82:13:68:c5:ba:85:03:
ef:a0:f5:9a:75:10:d9:d9:94:b7:79:fd:8c:64:ac:92:3f:34:
b4:4f:13:c0:4e:d2:3b:ec:09:e2:28:10:45:47:97:cb:0b:13:
57:3b:8f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:26 2025 by rpki-client