Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
File: fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json)
Hash identifier: 2pNzmbO4I9Lo1Lz1nR7j54sZUwgNwicpu5f7qNfRJq8=
Subject key identifier: BD:B4:37:23:C1:88:3B:9D:63:DF:8A:EA:52:D9:75:33:E1:66:25:2F
Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B
Certificate issuer: /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
Certificate serial: 04BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
Manifest number: 04B5
Signing time: Sat 29 Mar 2025 00:08:45 +0000
Manifest this update: Sat 29 Mar 2025 00:08:45 +0000
Manifest next update: Sat 05 Apr 2025 00:08:45 +0000
Files and hashes: 1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: +X1HKuK6u58uZ0s581UR2dNklkVyW2GM/Fh+HGGKJ2U=)
2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: F++NgZIbVXAu/P1iRFKH5as6NLrkIgPyr3KhQBuiQaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1211 (0x4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171845
Validity
Not Before: Mar 29 00:08:45 2025 GMT
Not After : Apr 5 00:08:45 2025 GMT
Subject: CN=67e73a0d-b623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:20:23:fb:05:d6:82:d6:2e:f0:08:9c:db:
bc:bf:2f:e4:d8:f5:f0:33:69:00:81:da:ed:35:1b:
d3:ce:05:50:44:f4:8c:61:90:2e:65:59:cd:9b:7e:
54:c4:82:02:d2:3e:40:d9:76:e6:dd:5f:07:b2:2b:
89:4d:83:de:f2:31:66:f7:ac:8a:c1:cb:a1:e0:3c:
b1:a4:23:2d:d0:4b:48:40:ed:d8:7b:c8:71:d0:1d:
c4:d8:15:23:f9:bc:91:2e:a7:9f:97:45:8e:b9:4c:
91:9d:7e:e1:5b:20:11:d6:4f:3c:3a:30:b1:1d:8e:
3c:61:6f:7e:78:a6:ae:ee:da:64:62:c6:73:3a:42:
a1:25:90:6b:78:bc:bc:43:26:d8:62:28:b2:89:d2:
35:46:7c:d2:c2:73:0a:33:94:e6:e9:cc:48:8a:3a:
b0:c8:6a:11:2d:48:43:76:0e:cf:36:ee:03:d9:9e:
06:09:2f:72:25:8e:ac:58:0c:66:09:41:ad:2c:75:
0c:0b:a7:b3:0f:86:06:1b:b6:e0:d6:08:45:4d:2a:
68:a4:8e:b1:48:bf:c4:62:6f:bc:bd:dc:99:82:cd:
2d:08:f7:c8:b2:e2:fd:ac:2f:28:11:3d:b6:bd:84:
57:9e:3e:9f:e2:38:ad:5f:c0:1b:cf:21:9a:7c:17:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B4:37:23:C1:88:3B:9D:63:DF:8A:EA:52:D9:75:33:E1:66:25:2F
X509v3 Authority Key Identifier:
keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:16:4d:b6:07:c5:f1:e4:dd:74:68:29:f1:1f:db:df:e4:
0b:72:a5:17:08:e7:4a:18:0c:45:dd:6a:19:c6:1a:b7:fd:86:
1b:67:5b:59:5e:98:d9:c0:66:98:00:71:5b:71:a8:87:a5:39:
b0:30:fe:27:5f:c0:a9:38:bc:ba:d6:35:86:ab:b9:18:9a:a1:
1e:fa:55:f6:51:3d:2d:a6:43:62:63:31:76:de:74:67:60:d3:
3b:a8:d5:d7:7e:d1:ce:fc:7f:1d:ac:28:5c:38:0b:7a:9d:ea:
95:95:c9:42:08:e8:b8:64:5d:be:50:33:fa:b3:61:dc:55:72:
9e:c6:1c:ef:1a:38:29:90:a3:ad:33:45:ea:d5:8b:ab:27:1f:
ac:b5:68:06:9f:ef:31:1c:48:d5:ae:b0:df:ee:59:23:8b:ba:
cc:82:66:e3:0b:cf:33:ad:ec:97:7b:ad:59:27:64:1f:ca:9c:
3e:7e:81:ef:2a:01:d2:58:cc:54:0e:05:63:ec:2e:85:1d:0f:
61:51:ba:41:33:5c:e6:65:ab:9c:fa:df:2f:85:e5:59:17:ef:
0b:83:ba:c9:3b:e1:72:a7:b8:d3:40:f8:2e:28:6d:77:62:a4:
1b:fb:b8:d9:c6:72:02:57:e0:f9:15:59:21:c1:89:53:68:38:
2b:bf:8e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:03:47 2025 by rpki-client