Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
File: Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json)
Hash identifier: 19OIWP9DCsulXWI4zbhHAaKIrXPxtSCndMR3seV30OE=
Subject key identifier: 00:F0:E5:95:51:EB:A2:B9:36:4E:19:4E:A9:C7:F3:9D:21:C9:40:6F
Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492
Certificate serial: 0BE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
Manifest number: 0BD9
Signing time: Fri 28 Mar 2025 18:59:12 +0000
Manifest this update: Fri 28 Mar 2025 18:59:11 +0000
Manifest next update: Fri 04 Apr 2025 18:59:11 +0000
Files and hashes: 1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: 9iuorECA3OLveawN44ybloF92IjPJW1/vbgvqIhA/GU=)
2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: t3eros23i5jos6SsnfnITnVUwueCJZ09uU5hK4xc9ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3041 (0xbe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177285
Validity
Not Before: Mar 28 18:59:11 2025 GMT
Not After : Apr 4 18:59:11 2025 GMT
Subject: CN=67e6f180-d7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:38:e2:2b:cc:41:11:af:dd:dd:cd:8d:86:
d4:db:5a:83:33:a0:2a:83:c8:65:1a:9e:2d:ed:88:
31:70:0e:b5:b6:64:77:e0:e0:bd:9a:ef:fd:49:ef:
5a:a3:21:a3:85:4d:60:9a:61:69:32:2a:96:af:25:
9d:f8:93:ad:9d:24:a0:0d:dc:99:a3:03:86:1c:09:
ff:14:df:9e:64:9a:9a:fb:9b:db:3a:2a:e1:ee:c0:
57:bb:9d:cf:db:6b:08:32:59:ba:32:61:eb:ca:e0:
0f:6e:9f:5d:3c:ff:b7:c6:9b:30:84:bd:6f:c0:26:
b3:b7:97:e5:80:c4:77:d8:27:1f:92:e9:21:c2:5b:
e7:2b:fd:73:8a:4c:2d:90:e8:cf:3e:67:36:62:c5:
4a:9b:64:ca:80:d2:05:3d:b1:59:1d:f1:66:e5:1e:
a2:12:07:f8:8c:58:d1:24:a2:7f:a5:50:73:d9:71:
72:3e:31:12:db:04:99:e1:87:db:26:e4:09:26:2f:
66:68:eb:86:ba:84:ee:62:0e:fd:73:78:ac:05:dc:
60:30:04:2d:cb:82:d8:73:ed:b4:ca:05:12:b5:d0:
d6:2f:55:21:fa:60:c7:f8:b3:85:77:52:ac:aa:d2:
80:eb:27:f5:50:0f:4d:23:92:24:e6:92:82:3f:65:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F0:E5:95:51:EB:A2:B9:36:4E:19:4E:A9:C7:F3:9D:21:C9:40:6F
X509v3 Authority Key Identifier:
keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:df:78:12:a5:f0:db:10:3c:05:1c:42:a2:db:45:98:a7:cf:
24:59:e2:b1:35:6d:56:58:25:ce:7b:4a:c2:0b:0a:bd:9d:28:
6e:ec:52:5e:75:00:a8:55:c8:ca:29:17:db:aa:f6:c6:1f:93:
84:c7:62:ab:1e:f7:7a:cd:d9:ca:67:39:13:8d:48:63:60:e4:
f3:42:b1:db:1d:09:66:7c:93:00:19:7f:7d:b0:8b:e2:bc:0f:
64:a2:ff:7f:9b:5b:92:db:b1:f4:4a:8e:d0:c3:c7:c2:da:18:
7f:c9:69:6d:4f:83:ad:53:d6:65:6d:51:0b:bd:cc:2d:16:c0:
5f:c2:b2:e1:c3:ab:8c:e3:f7:12:31:61:d5:ea:60:c7:de:7c:
f0:fa:f6:63:48:ac:a4:db:23:01:9e:3e:34:a0:68:e9:bd:4b:
e9:a3:de:83:4a:98:6d:13:33:72:dc:bc:57:36:76:16:c5:dd:
47:17:a1:51:fb:eb:1b:69:ef:61:44:9f:ca:43:e0:32:66:2d:
e0:77:ae:9a:28:26:ed:13:e3:ab:ef:59:a6:05:1d:10:cf:51:
fc:71:c0:a1:09:42:8c:b8:16:68:84:94:1a:26:69:d8:d7:13:
bc:ed:af:0c:09:d2:16:56:31:43:87:74:2c:18:af:be:13:50:
17:00:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:58:00 2025 by rpki-client