Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
File: aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json)
Hash identifier: Xw3zcNppMx3VDaVZhIhD9OcXv2fdwa7QViM8v+aAfXI=
Subject key identifier: 7E:0C:B4:F2:BB:55:6C:56:20:7F:C6:49:F3:34:21:23:E9:82:85:55
Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Certificate serial: 0383
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
Manifest number: 037A
Signing time: Sat 29 Mar 2025 01:07:16 +0000
Manifest this update: Sat 29 Mar 2025 01:07:15 +0000
Manifest next update: Sat 05 Apr 2025 01:07:15 +0000
Files and hashes: 1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: VIgBpDtSPDvriCuDS+p+jnvPTxEtTwvXcLUejiODjAA=)
2: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: ASwdm1L9Wn+Rz2UEXw3LVXx6V8cb6bPFge6o2YPGGR8=)
3: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: ge5i/gUk2rLl8NFshkx3QLIeml4hinyetB2nMALgvq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899 (0x383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CB5
Validity
Not Before: Mar 29 01:07:15 2025 GMT
Not After : Apr 5 01:07:15 2025 GMT
Subject: CN=67e747c3-40f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:4b:cf:e2:e3:f2:26:dd:70:83:53:e5:a8:
df:90:cd:cf:a0:4a:83:41:7e:a4:c6:a6:76:58:ef:
12:91:ec:0a:ce:ce:37:fd:60:d7:05:d9:9d:ff:f5:
43:a7:02:51:b5:30:11:7b:59:0a:f7:28:15:0f:3d:
1f:e7:64:03:15:d6:b7:b6:15:3c:45:e7:c3:d8:9f:
14:95:56:50:a4:29:c7:66:7d:ff:5b:45:32:71:42:
d8:a3:31:0b:f1:31:ac:1b:20:76:8c:ad:29:39:d0:
9a:16:db:34:af:35:e7:4f:cf:db:11:5a:42:41:7c:
1b:e3:c8:cd:26:c5:e9:50:9d:e0:9d:e0:31:05:0b:
4b:6b:ca:17:d6:c0:44:ef:47:8d:86:b1:c2:38:49:
56:6e:44:a4:39:09:f8:e4:62:15:d2:d9:70:45:05:
a8:f3:bd:37:76:68:4a:56:16:1b:76:f7:4f:c0:82:
38:18:3f:5a:bb:fd:7d:9d:9a:27:6d:f7:21:e3:aa:
3c:27:f2:1a:db:e8:a8:6b:44:f3:fe:50:90:4a:0f:
9a:a3:05:86:ae:cb:75:fd:21:de:b4:e3:17:72:c9:
ef:a0:81:6d:58:4d:2e:87:4b:55:c5:1d:82:95:f9:
b2:aa:ce:04:cd:e5:2c:65:db:22:75:44:08:21:2d:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0C:B4:F2:BB:55:6C:56:20:7F:C6:49:F3:34:21:23:E9:82:85:55
X509v3 Authority Key Identifier:
keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:fc:20:c6:ed:c0:19:2c:dd:a7:07:3c:8b:3e:f1:20:75:67:
d6:cd:31:f5:ce:d9:22:6b:98:28:b0:11:f7:6e:d2:d7:f7:43:
a8:93:1b:10:7d:e9:70:da:0a:5c:31:8d:5a:25:63:16:84:2b:
4a:06:09:0d:93:ff:a1:55:0e:2c:cb:c4:6b:8a:f5:85:d2:d2:
89:25:44:bb:e4:aa:2b:49:b7:da:19:88:8d:d0:2d:0a:4b:14:
e1:31:83:df:a9:e0:6f:98:fe:b2:5c:4c:eb:ae:d4:fa:97:02:
ee:e4:ad:b1:37:0b:47:cd:bc:b4:7b:54:65:7a:0e:18:94:a8:
1b:e7:16:3f:80:55:0a:c5:79:cd:63:09:91:51:03:61:13:60:
a4:2e:02:b5:3e:6d:32:92:00:8a:a8:4d:3c:eb:11:b3:d5:b7:
2a:91:0c:15:96:c7:cf:14:00:c2:83:b2:11:9a:bb:79:a3:8c:
fb:61:75:e2:db:d9:2d:54:c7:84:4c:d4:e2:3e:d3:ce:92:07:
39:6b:de:2e:e3:a0:84:b1:12:30:2f:8d:6d:19:44:32:51:4a:
32:87:8c:34:65:90:f4:4c:01:54:a8:7b:ff:45:ce:d5:0f:4e:
96:7a:27:1b:79:6f:d8:35:89:9c:f5:36:f0:c5:39:aa:2f:5f:
fa:d9:50:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:00:25 2025 by rpki-client