Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
File: W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json)
Hash identifier: H2ctql2UgDlnPEA6MGC4mssqPRKxRVZwuxk8qp6VaTo=
Subject key identifier: 2F:4A:49:42:C1:64:7D:E5:5C:EB:4F:92:30:72:DF:14:55:CA:52:DD
Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F
Certificate issuer: /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
Manifest number: B9
Signing time: Sat 29 Mar 2025 05:18:43 +0000
Manifest this update: Sat 29 Mar 2025 05:18:43 +0000
Manifest next update: Sat 05 Apr 2025 05:18:43 +0000
Files and hashes: 1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: wepwONVM+CumdaZQJT04LI42YIMo3UiGLdU2FWKZfjQ=)
2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: XWibtqlVyPdPRt9izLBx3ZYroA9isT1xxkvokh85YPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171882
Validity
Not Before: Mar 29 05:18:43 2025 GMT
Not After : Apr 5 05:18:43 2025 GMT
Subject: CN=67e782b3-2a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:e3:e7:78:1a:5a:f5:cf:ea:fe:0b:e1:2f:
c8:ad:ae:0a:db:66:3f:d6:94:d6:50:5a:80:2b:87:
82:2c:36:66:17:da:f1:d4:b8:98:14:15:7f:e4:5a:
33:17:b7:8c:05:8d:37:72:01:bf:2f:a4:0f:6b:29:
8b:0a:27:d5:ed:6a:b1:c7:14:0c:9a:38:46:0e:e7:
67:12:ce:92:b6:c8:4c:d3:8e:e9:98:92:3e:42:0e:
a3:47:38:c6:4a:c1:89:cb:59:7b:5b:e9:3e:3b:f8:
bc:55:a9:b6:34:00:21:ae:17:e7:24:15:8c:61:65:
31:96:4e:cb:7e:a6:56:bf:32:45:2c:64:6f:7c:8c:
8b:80:16:56:57:aa:d9:02:1e:95:68:22:09:82:37:
6d:b0:7b:34:77:06:61:60:6b:a2:db:43:9a:a6:bb:
97:7c:5a:47:26:22:d2:9b:5c:4e:4d:5e:96:c5:b5:
a4:a9:dc:e4:0c:55:2e:e2:fb:73:45:8b:2f:8e:5a:
90:69:d9:24:e6:26:46:70:c5:92:d0:ed:d1:fd:57:
d4:63:22:48:d4:df:9c:58:eb:ad:77:b1:b9:22:a5:
6b:9d:7a:51:21:c0:8d:d6:d5:b3:1c:0b:28:b6:67:
f6:0d:25:62:36:b9:0f:04:74:11:63:4c:b9:33:5b:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4A:49:42:C1:64:7D:E5:5C:EB:4F:92:30:72:DF:14:55:CA:52:DD
X509v3 Authority Key Identifier:
keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:e4:ae:eb:9e:f8:4b:c8:f0:22:b7:69:88:2c:1d:c2:80:00:
99:ea:b0:cd:a3:c4:d0:15:2c:0f:2f:2e:46:0e:9d:aa:be:75:
5d:ef:d8:ed:f8:79:c9:ce:93:11:75:30:4e:e5:cc:5a:f4:31:
18:c9:2b:ae:30:bd:72:b4:a1:35:ef:78:d7:66:99:ad:21:e5:
dd:7d:e8:22:da:54:b2:d7:67:67:78:2e:e2:92:44:cd:01:51:
dd:eb:ea:c8:28:85:bf:a3:84:a2:18:5c:ce:f3:08:b9:ee:b6:
5a:61:5d:91:70:6e:4a:b1:2a:2e:9d:d3:da:55:f0:10:10:23:
23:0a:b7:7a:e1:75:e2:87:b2:98:f6:b3:0d:c2:b7:64:40:9a:
37:2a:6f:73:ff:01:9f:0e:dd:2f:4f:4b:5a:62:31:b5:8f:65:
d8:71:ed:a0:24:15:54:47:5c:f3:7d:9d:51:ff:d9:f9:d1:29:
8b:dd:3b:27:20:b6:79:cf:66:89:ea:72:34:05:65:82:db:4a:
5f:d8:43:de:5f:53:81:c7:8c:8a:86:2e:e4:7a:62:2b:12:6f:
76:42:26:81:f4:e4:5a:19:89:52:ef:70:fd:ed:7d:bc:bd:bc:
d9:ce:3c:a3:fc:f1:7f:d0:2a:95:40:00:16:cc:51:cd:f8:4c:
ac:91:0c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:26 2025 by rpki-client