Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
File: O0irhhZS-u7X4dElg_Frt_uyiRM.mft (raw, json)
Hash identifier: LAJMOa8MLVdzGlM6B+0zXrN5nX3VQ3bxDvhmD0HK1NU=
Subject key identifier: D9:04:76:32:B7:DC:75:E6:37:6D:C0:F4:0B:98:FE:0A:99:EC:46:0D
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: 01EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
Manifest number: 01DC
Signing time: Sat 29 Mar 2025 02:27:22 +0000
Manifest this update: Sat 29 Mar 2025 02:27:22 +0000
Manifest next update: Sat 05 Apr 2025 02:27:22 +0000
Files and hashes: 1: O0irhhZS-u7X4dElg_Frt_uyiRM.crl (hash: wUCMtC0fmo7LFcpTMH+zoxcA7+vInKbX3SP4e9E0pYw=)
2: EDE89884DB1711EF8929832EC4F9AE02.roa (hash: tqa1Ixra7BMwCWoNM3olfzFpbEkXEWmJXa4eDjgnFBc=)
3: 8FFF9C5AAF1A11EFAF122A6AC4F9AE02.roa (hash: oSZdhfGWwwKdH63s+SExbmyRtKVUZJS009bBjLK65o0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909
Validity
Not Before: Mar 29 02:27:22 2025 GMT
Not After : Apr 5 02:27:22 2025 GMT
Subject: CN=67e75a8a-cca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:b6:b3:8f:9e:22:66:99:b0:c9:dc:29:77:
23:a2:cb:f2:b5:36:8e:ab:80:11:5c:6c:ab:d6:cd:
38:72:c0:b4:8f:53:2a:9e:35:56:e7:24:22:74:ed:
2a:57:1e:17:35:a3:4d:2c:d7:bf:51:6e:99:e8:f2:
50:c2:99:bc:fd:1c:8e:51:8b:86:dd:c6:c0:78:86:
c9:ee:26:b4:ae:69:46:a7:1f:5b:66:7d:df:15:b7:
00:98:22:d3:f3:76:03:11:cc:45:86:ba:37:6f:11:
51:ae:44:3d:37:0c:67:e5:8d:93:3b:85:1b:3b:3b:
6d:99:70:0f:dc:22:06:86:23:d7:19:ef:6c:49:8b:
88:8a:29:ef:a7:cc:8b:da:02:c7:f2:32:52:60:26:
02:1d:99:36:dd:2b:c3:34:cb:ca:ed:14:59:67:c2:
65:89:2d:8d:ef:05:c2:c0:9b:05:4b:ef:4f:26:82:
ef:3e:6f:16:26:b2:6e:08:7f:22:88:1f:4b:af:bd:
02:c8:cc:82:39:cf:b2:e2:23:cb:3a:64:ed:57:86:
1c:4f:2d:30:99:7a:f6:93:35:00:07:f3:8c:c4:25:
6e:9c:6d:5c:d3:ba:66:66:86:4b:2b:e4:68:9d:bc:
33:dc:6c:73:e9:ac:d4:81:51:2b:44:0e:7e:e2:53:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:04:76:32:B7:DC:75:E6:37:6D:C0:F4:0B:98:FE:0A:99:EC:46:0D
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:71:2d:51:5c:56:4b:c2:53:5b:49:d2:be:86:7d:d6:ed:93:
ca:8c:e5:c8:06:9d:cf:b3:3f:15:e0:4b:dd:c1:eb:d7:75:a1:
6a:2b:24:f0:44:04:62:04:aa:16:f5:3c:d3:f8:af:38:4d:38:
85:9c:c0:ae:61:ba:64:5d:f7:53:67:02:6f:59:af:4e:c6:bc:
d5:93:4a:76:a6:87:b8:83:1a:92:c9:4e:56:b6:40:fc:8d:a2:
48:9a:42:f1:2e:d1:1d:42:fc:be:75:be:fc:c3:e5:4e:6e:d4:
f4:14:47:55:45:7f:a3:84:1e:87:bc:bd:5f:76:ca:c5:10:21:
f6:1e:f0:5e:b1:fe:9f:8d:a5:cb:f8:6e:28:0e:6f:8d:4f:61:
38:76:08:20:2c:dc:f1:c6:d9:b9:ae:6b:77:eb:40:dc:21:62:
51:67:e6:34:4c:10:34:53:4f:44:36:3d:8f:a3:16:3e:ee:18:
95:6d:24:c2:b0:dc:99:d2:80:86:b8:e7:66:25:15:5a:ac:62:
d1:33:3b:3a:0b:4f:45:90:67:7d:16:80:5b:d2:2f:2a:fe:83:
15:dd:5a:a1:b0:3a:b7:fc:f6:63:79:0f:15:e3:36:f9:4b:24:
e4:f3:5f:e3:82:27:fa:ca:9d:a3:5d:bb:00:58:91:3c:1c:9f:
29:5e:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:25:49 2025 by rpki-client