Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
File: 9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json)
Hash identifier: 2Ahnd+Jisze7NfgWGT/dblR3SIwMuvBYNP0t8GQ3gQ4=
Subject key identifier: 0B:16:C0:9A:21:11:1B:26:1E:16:EC:65:07:21:DD:21:B5:53:8B:C5
Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2
Certificate issuer: /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
Manifest number: 0131
Signing time: Fri 28 Mar 2025 15:53:10 +0000
Manifest this update: Fri 28 Mar 2025 15:53:09 +0000
Manifest next update: Fri 04 Apr 2025 15:53:09 +0000
Files and hashes: 1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: pofi3ApWirEKqpnMSTjzef0qQClRkd8t6asQlHp8MSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA
Validity
Not Before: Mar 28 15:53:09 2025 GMT
Not After : Apr 4 15:53:09 2025 GMT
Subject: CN=67e6c5e5-0755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:b2:f8:fe:42:95:ac:73:92:46:29:82:1f:
d5:3a:27:4c:33:0f:47:3e:d1:3d:91:22:2d:3b:3f:
0d:4b:e6:5d:63:4b:2b:33:06:df:e2:d3:32:39:de:
9d:24:48:36:10:e6:ed:72:71:4c:12:cb:dd:41:0d:
b6:6a:c3:c4:c9:41:7c:d0:16:e5:49:31:46:1c:85:
f5:8b:bc:a5:88:7d:3a:16:1d:53:f0:0a:22:66:44:
c3:b8:3c:33:3e:3b:bb:10:0a:53:df:2d:4b:b2:46:
e0:d8:93:f3:e3:db:d1:67:46:e4:4b:06:e4:b6:03:
c3:37:60:d7:66:9a:0f:0f:81:9e:36:e1:8f:4b:ce:
0e:11:67:1c:70:d9:14:24:c1:47:2e:be:c4:e3:1a:
99:26:ab:78:c4:2f:e6:ac:e7:1c:76:38:f3:63:ce:
e8:44:a1:ab:0b:cc:20:86:66:9e:28:36:a5:70:e6:
7e:d9:bf:64:0d:c6:52:de:91:b5:27:e8:80:83:f5:
ed:67:94:49:60:63:f0:d7:be:26:4e:21:e4:49:23:
c4:87:07:d1:b8:cc:ba:bd:2b:6b:e2:dd:1d:12:a6:
cc:89:e3:45:fc:9f:2c:14:4e:c7:85:5d:aa:16:c3:
bc:bd:6b:d0:fc:66:94:6c:1a:58:c9:af:bb:ac:26:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:16:C0:9A:21:11:1B:26:1E:16:EC:65:07:21:DD:21:B5:53:8B:C5
X509v3 Authority Key Identifier:
keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5d:08:14:6d:f5:2d:88:88:ef:95:99:ae:30:5b:c9:1c:41:
a1:c9:6d:87:07:b7:ee:ea:bb:60:c0:bf:e7:89:3a:4b:ff:95:
2b:85:2d:df:d8:71:19:8e:23:24:51:6f:57:9e:b8:5c:25:4b:
b9:95:65:5c:25:d2:9e:d7:4c:e1:ae:88:20:d3:c4:0c:69:1a:
d8:c2:22:16:63:49:c9:42:2e:7e:c8:ab:f7:f3:0c:c2:89:0a:
3b:40:73:d4:20:03:ed:2c:2a:d6:da:89:ab:1f:44:f4:61:bc:
99:6c:0e:8c:57:e6:11:fa:7e:4a:16:9f:f3:36:01:ee:42:e9:
4a:91:b5:35:9a:22:d5:b3:c6:3f:a1:45:43:7e:2d:2e:5e:a2:
88:49:98:33:71:b0:53:41:71:12:f3:3d:5c:2f:bd:20:8c:2b:
e7:ee:ac:7d:61:a2:e5:1b:3b:10:42:43:50:5d:21:14:d8:81:
0d:0c:3f:9d:94:ac:64:17:84:61:24:01:45:86:5d:7e:33:71:
fa:da:1a:2d:2f:30:b2:7b:62:80:32:4b:e2:b5:45:fd:0f:01:
de:f4:b2:ca:f3:ca:a8:cf:61:8c:1e:17:e6:e7:df:ec:12:03:
07:cd:dc:bc:2b:02:10:d8:0c:a2:b2:86:43:7a:15:b2:f3:20:
85:6f:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:39:35 2025 by rpki-client