Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File: y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier: 0i+aAGhF0TlHgtG8XS9uvv+KnXb/uBbdOfn0P2CoHDo=
Subject key identifier: C8:3B:35:F1:7B:F9:6F:3A:D5:BD:77:5E:78:05:07:F3:9B:56:75:0C
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer: /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number: A8
Signing time: Sat 29 Mar 2025 05:35:15 +0000
Manifest this update: Sat 29 Mar 2025 05:35:15 +0000
Manifest next update: Sat 05 Apr 2025 05:35:15 +0000
Files and hashes: 1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: 3/nbZRIF48s6m0UpDfyk+xxsArvpYgC3EQlcelPxZfM=)
2: CD802A9A1BE511EFBC630883C4F9AE02.roa (hash: de4vNWdwOETkj9mhz2ImDDVKUmbG+1KIQgOwEqbfGeE=)
3: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: 2ZvR8MHi7NyojTKS1eQiZr7s7ixPWXKlZzJWOILwSsE=)
4: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: wXFw1WCYOzN+C3+tE/wlw+YhUZwlxJ82iP5vfZ3R23g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169C00
Validity
Not Before: Mar 29 05:35:15 2025 GMT
Not After : Apr 5 05:35:15 2025 GMT
Subject: CN=67e78693-54eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:e0:ab:81:42:3e:13:ea:b3:84:ee:b7:7e:
02:2b:3a:2a:aa:43:86:90:cd:97:d8:b1:3e:35:db:
0b:45:15:73:0c:f5:79:33:70:4a:e7:e3:d9:6e:b2:
11:38:09:ba:b1:e9:b3:56:d4:eb:cd:f4:83:bf:13:
3b:a8:a4:f1:3b:83:9a:30:76:63:86:e9:a7:06:05:
2b:2d:ea:d3:2e:69:01:22:b9:c2:cb:7b:ae:9a:89:
34:82:d6:b7:dd:a5:d1:79:b7:88:d5:e6:04:20:0b:
2a:a8:ff:98:f6:a4:a0:e5:53:15:d6:1a:21:1f:43:
ef:94:9d:86:22:4b:ea:c6:c4:26:c0:d7:53:ec:70:
82:8b:be:09:31:e0:d1:ce:6f:f5:42:77:71:58:48:
77:13:9a:fd:be:64:de:ae:d3:b5:b6:de:94:d9:4c:
43:60:f0:85:3e:cc:6e:3b:dc:f3:a1:3a:f7:15:42:
c6:48:ec:a4:a6:43:c7:f1:f3:c1:90:3a:c1:2f:5d:
33:ca:ee:6e:db:94:1e:d0:87:80:05:6e:6c:99:fb:
ca:26:82:0f:8f:47:3d:08:8a:ae:8b:46:21:64:7d:
7a:cb:03:4a:88:af:52:b9:67:20:71:c1:4a:10:e3:
e5:7a:8d:f8:85:f1:2c:bb:aa:1a:51:87:54:12:2f:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3B:35:F1:7B:F9:6F:3A:D5:BD:77:5E:78:05:07:F3:9B:56:75:0C
X509v3 Authority Key Identifier:
keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:cb:e8:df:85:a1:20:f4:1b:6a:67:98:a2:de:04:3b:2e:ce:
18:d9:23:a8:4b:46:5e:e2:7b:64:17:32:d0:bf:11:a3:49:39:
49:e7:e4:ee:54:fc:b1:14:ca:09:5e:51:da:ab:6f:26:14:e9:
ff:7b:90:f6:41:55:67:4a:96:3e:10:de:aa:99:cd:80:3e:83:
69:51:47:d2:8e:49:66:7d:3f:ae:00:ce:46:3a:a7:95:43:7d:
3f:55:ff:a7:66:1a:b5:25:c6:55:d1:f9:b7:65:25:bc:5f:98:
70:7e:c0:42:4e:6f:02:37:30:37:c2:56:93:21:46:73:55:84:
9a:25:86:4a:f4:4c:a2:b4:2b:02:be:80:58:7a:be:84:7d:3b:
47:a6:84:18:50:d7:0b:3e:e4:d2:7f:fb:c9:4b:9b:23:a2:d4:
e8:04:09:c4:c1:ab:16:af:5e:9e:82:49:fa:50:3e:31:3d:14:
db:ae:a3:41:64:fc:cb:42:d4:8b:b3:f8:fe:7d:f1:16:ea:57:
55:78:24:ed:38:02:79:98:14:f1:a6:61:3d:71:28:8d:59:c7:
ae:23:c4:5f:1d:7f:e5:93:70:b4:6f:3f:a8:60:d6:3d:b2:3d:
07:e2:5a:86:a3:fd:80:d9:d3:be:9b:ce:69:ed:c3:5b:6e:d9:
fe:82:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:04:24 2025 by rpki-client