Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json)
Hash identifier: OqLNbKEY3bbPtI/T+97mHK8Ny2FmOmIUAv/0HxMkazw=
Subject key identifier: F9:1A:D1:F6:3F:D7:F6:FE:5C:6C:A4:8F:64:4C:DF:B0:EE:B3:16:CC
Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7
Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7
Certificate serial: 09E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
Manifest number: 09DF
Signing time: Fri 28 Mar 2025 20:09:45 +0000
Manifest this update: Fri 28 Mar 2025 20:09:45 +0000
Manifest next update: Fri 04 Apr 2025 20:09:45 +0000
Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: 7l/gob2FwTvt59Gl4ItOQev6OEpMew+jqeoX8Gib5vk=)
2: 8DA4D91477EF11EAB5508A28C4F9AE02.roa (hash: ET14uths/QUA4uUBVbff9R12DTawrriACnHopTjr8Ws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2537 (0x9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173780
Validity
Not Before: Mar 28 20:09:45 2025 GMT
Not After : Apr 4 20:09:45 2025 GMT
Subject: CN=67e70209-0834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:d3:da:2f:14:49:7d:d7:98:00:c1:bf:65:
c4:b7:9b:01:c0:8f:15:2c:0b:d7:11:10:0b:3c:6c:
82:4a:5c:b6:14:4a:61:f8:d1:ed:df:c9:c4:b6:18:
11:b2:45:3c:ad:89:41:b8:5f:f8:a8:e6:3a:2c:85:
a4:26:76:d9:2f:d9:71:4d:bb:52:83:0d:2e:a2:5d:
62:95:cd:77:6d:60:fa:78:0b:08:93:6e:09:49:25:
14:b0:d1:37:4a:6f:e5:11:6b:f3:94:81:8b:8e:7c:
79:b1:f7:81:f8:88:d9:b0:cc:2b:e9:8a:ba:2a:52:
56:9d:d2:8f:a9:e5:cb:02:d1:da:07:9c:8d:d6:d5:
b8:fb:ab:05:15:1d:5f:2b:84:74:be:b9:e8:24:70:
bf:b0:2a:63:a4:d3:69:f2:32:4f:cd:05:aa:04:ce:
de:54:a1:6d:d0:22:0d:8d:71:0e:6c:e7:48:ed:75:
c6:49:c3:bf:f9:09:60:fa:25:2e:01:d4:2d:ec:e1:
a8:14:d0:19:48:8f:d8:dc:5a:a1:bf:26:6c:b9:37:
32:25:93:59:46:1c:16:64:45:fc:64:ab:8c:32:e0:
88:4f:dd:84:72:ac:b0:8e:62:6d:6b:17:32:d5:bd:
b7:6d:79:06:2d:9d:76:d0:71:d0:e8:be:4f:f1:f9:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:D1:F6:3F:D7:F6:FE:5C:6C:A4:8F:64:4C:DF:B0:EE:B3:16:CC
X509v3 Authority Key Identifier:
keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:9b:13:85:6f:7c:5a:b2:22:c0:ae:3b:4d:66:7c:25:17:79:
4b:18:ef:52:dc:31:23:7e:14:35:55:02:f4:85:fa:f7:f3:89:
8f:63:01:9a:45:f2:d8:9a:b2:31:40:59:07:5e:ad:b5:45:08:
2a:1b:17:7e:11:7a:46:25:9f:09:c8:1d:09:bb:a1:fd:3f:73:
e3:98:1f:c3:af:57:5a:2e:af:d2:b1:ed:a0:3d:c2:b2:14:81:
48:c2:0d:a7:8d:79:84:98:61:d3:2a:fd:5c:49:f0:ef:fb:2d:
10:51:bb:29:5a:d2:d6:27:61:30:5b:51:a0:c1:0d:6f:fb:e4:
73:a4:c0:e6:71:79:b2:91:65:49:44:89:04:e0:fd:98:0d:a0:
9b:ab:d5:5d:ae:70:61:cd:c9:00:b0:77:9b:95:d0:dd:d6:4b:
4f:72:04:2e:2b:5d:03:d9:8e:35:5b:5d:72:30:6b:8d:1b:ec:
74:7c:3f:dd:ce:50:c6:d9:71:86:29:06:4d:c7:10:a1:01:34:
4c:47:3e:fa:ff:7e:1b:b0:52:33:6d:d5:9a:b2:38:13:ca:12:
f8:32:08:6b:de:f7:bb:4e:fc:a0:e7:12:9f:00:2d:44:c5:b0:
7c:8f:b5:5c:5f:46:98:50:ae:91:78:2f:f1:7a:09:b4:c3:41:
26:f0:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:24:55 2025 by rpki-client