Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
File: -T76pqbQVK6ZfIo8_yXxacNvigw.mft (raw, json)
Hash identifier: XNYFsNWusjYmcHtjw+klV8awe6+Z/6XK155bntb3FhY=
Subject key identifier: 14:F2:54:79:27:4F:B7:8C:6A:A5:1A:93:CC:DF:4C:8B:7D:29:F3:3A
Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C
Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
Manifest number: D8
Signing time: Sat 29 Mar 2025 04:59:24 +0000
Manifest this update: Sat 29 Mar 2025 04:59:23 +0000
Manifest next update: Sat 05 Apr 2025 04:59:23 +0000
Files and hashes: 1: -T76pqbQVK6ZfIo8_yXxacNvigw.crl (hash: VNkWMPPvOb8s6g/M1XvAr01X0lEpBAw36/Un8qq8Ej8=)
2: 395803C8CDD011EEB4E50681C4F9AE02.roa (hash: U+mu9E/7fBnjCJrDiP1cAMTZViiPy5KDtk1hEO7aXYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C1E
Validity
Not Before: Mar 29 04:59:23 2025 GMT
Not After : Apr 5 04:59:23 2025 GMT
Subject: CN=67e77e2c-4b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:ee:55:cc:5e:08:27:00:0b:b2:2b:33:d3:
70:bc:0f:90:ce:d5:8f:1f:76:b1:a8:91:11:ad:eb:
fe:06:3c:98:05:85:af:17:b8:a8:7f:bf:4c:2f:54:
54:b3:43:53:f0:d1:41:8f:4c:07:ad:67:29:f3:c1:
97:33:f1:b4:29:7a:0a:22:f6:56:bf:b8:9d:15:03:
f0:02:bf:9b:00:3a:91:84:6d:2a:91:b6:84:52:b3:
41:51:6e:f4:57:a2:c6:d9:a3:06:54:db:d3:ea:fe:
c7:bd:0a:d0:1b:bf:f5:c0:8c:4d:67:93:3f:e3:7f:
f7:bd:05:2d:5f:3a:d1:e2:c5:bb:5d:66:2b:0c:3f:
38:ec:62:04:a6:8d:ac:e6:29:74:0b:59:32:41:86:
6c:28:30:61:d0:1b:57:cc:df:81:62:00:cd:28:1f:
ae:9e:43:af:8c:a1:74:bb:df:c8:4f:79:dc:34:3c:
3d:08:2b:c2:6b:fb:dd:27:52:9a:07:13:da:23:c1:
bc:8e:b8:5e:3b:2f:44:48:58:81:90:5f:40:9c:41:
b7:5f:05:eb:42:94:0a:5a:7d:2d:e9:56:20:fe:2a:
25:29:30:0f:31:e1:09:53:4b:20:6b:4a:15:15:a8:
ab:c4:58:c1:e1:07:a5:98:04:9c:60:32:cb:ff:73:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F2:54:79:27:4F:B7:8C:6A:A5:1A:93:CC:DF:4C:8B:7D:29:F3:3A
X509v3 Authority Key Identifier:
keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:72:77:e6:d1:86:9f:0f:e0:78:2b:19:2a:80:d8:57:60:d1:
51:d9:1f:67:f3:32:5b:91:5d:8f:9e:c3:fd:42:9d:9e:c6:db:
be:40:df:ca:40:42:fe:50:1c:d3:4a:44:3b:15:a6:41:6b:d4:
31:86:f7:b8:31:c5:82:50:f6:86:a9:f7:fe:b4:e9:3a:17:1e:
28:7c:c8:3a:d3:f3:4a:02:e2:cd:ab:eb:26:ca:3f:9e:b5:4c:
7f:96:66:f0:69:61:bf:d9:71:68:8c:99:e0:6a:7b:a0:e6:c4:
b8:a7:a2:ca:f3:f8:68:6b:83:3a:c1:a8:c4:54:91:d1:18:4c:
54:7d:ee:c8:06:69:2f:a4:06:31:52:96:10:85:47:7f:d4:57:
06:66:b2:91:b3:8d:d3:be:11:87:c6:62:7a:7b:69:0d:27:ef:
34:83:c4:da:41:20:d2:4e:c6:19:9f:f0:53:c3:a0:1f:37:78:
c2:6c:c9:9b:0a:2c:44:07:cf:a5:2f:c1:c3:a3:28:e4:e7:87:
13:3d:3f:8e:c6:2c:42:21:38:2b:7e:fa:d5:23:f3:24:f6:07:
39:8d:87:5a:b9:d6:5f:da:38:fd:e2:92:63:7d:06:8c:13:bd:
ac:20:95:d7:5b:10:09:33:22:e1:f5:9f:92:a0:1a:7c:52:4c:
c8:18:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:06:28 2025 by rpki-client