Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
File: mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json)
Hash identifier: G4pPW1Bx0uAmw/uYZ8SvXfdXDOR1WvToooCWMieBjM4=
Subject key identifier: 18:FC:C7:DB:D2:E8:2C:74:CF:39:DC:81:FF:8B:45:DE:3C:AC:05:AD
Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09
Certificate issuer: /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
Certificate serial: 0501
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
Manifest number: 04FD
Signing time: Fri 28 Mar 2025 23:56:42 +0000
Manifest this update: Fri 28 Mar 2025 23:56:42 +0000
Manifest next update: Fri 04 Apr 2025 23:56:42 +0000
Files and hashes: 1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: pc5igO7BRxezkw3zyL0tDVV1widcbMdGwsua2kutcu4=)
2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: waxDgjsSvTIC1yAg99PxNdSD6AsFvhhlz5Q0XX8Iie8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178D2A
Validity
Not Before: Mar 28 23:56:42 2025 GMT
Not After : Apr 4 23:56:42 2025 GMT
Subject: CN=67e7373a-4481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:34:5b:82:83:bb:0f:11:d6:0e:80:b7:35:
27:4f:3b:dc:0c:48:99:22:d0:b8:ef:2c:49:a2:f5:
7c:6d:8e:16:28:89:b1:74:2a:4e:2b:c0:5f:fa:f2:
6c:51:4e:1f:a9:8f:5e:4a:3d:70:10:5f:30:8a:5c:
4f:ac:7a:ec:36:4e:9a:eb:bc:be:35:fe:9f:a4:28:
0c:a8:e5:68:2d:b5:d8:a8:16:88:ba:14:bb:76:d4:
40:04:58:17:1d:87:b8:0a:ae:57:77:3d:71:3d:2c:
d4:f5:af:8c:f1:91:c8:86:a5:0b:41:ce:17:61:56:
d1:2c:fb:63:0d:da:ef:24:5e:6a:17:37:25:3f:61:
29:ba:ec:04:4c:43:59:d4:29:ef:49:09:35:11:39:
9a:b8:60:05:58:a9:e6:7b:98:63:74:40:6e:7e:62:
5a:ed:95:43:e9:83:ea:aa:29:6a:f2:40:fb:6b:29:
04:07:78:6f:9c:e7:ed:14:b4:82:59:8d:33:b6:f0:
44:55:b8:85:e1:9b:bf:0c:6b:06:f1:f1:85:a6:4f:
7c:d3:86:d2:b1:77:61:5c:9e:0a:a7:c0:75:b5:0f:
e2:f6:0c:61:df:23:c8:2a:84:c1:36:a4:22:dd:6a:
9a:a5:fe:9e:47:7c:a9:9f:4d:25:cf:73:23:cc:ae:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FC:C7:DB:D2:E8:2C:74:CF:39:DC:81:FF:8B:45:DE:3C:AC:05:AD
X509v3 Authority Key Identifier:
keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0d:fe:b2:84:ad:01:7c:fc:0c:8c:c0:15:cf:73:84:2c:ae:
01:46:ee:8a:a1:e1:09:2c:80:cf:40:b6:52:9e:96:7b:bd:9c:
83:37:87:a7:ab:a9:99:43:96:81:82:b7:1f:9c:fa:a8:72:26:
bf:1b:87:f0:0f:21:df:2e:17:85:8f:1f:ba:76:62:33:35:1c:
fc:cd:26:98:36:b5:33:84:fc:e0:82:8e:c0:26:32:6a:6c:f1:
ed:cd:4f:c3:1a:1c:dd:ce:40:fa:c7:89:7d:a8:53:cc:8d:03:
7e:91:b5:f0:42:19:3f:6e:dc:9a:f9:14:c1:89:29:83:5e:60:
1f:37:a2:04:f9:a9:9e:d1:f4:00:9e:13:f6:47:bc:cb:8d:c0:
3a:f6:87:83:58:fe:1c:30:9d:b7:19:54:46:ed:f7:ca:83:38:
d4:c5:a4:71:26:da:d8:a0:c3:30:81:88:b7:cc:4a:dc:9e:71:
b2:99:c5:c4:6c:c5:1a:40:a1:a0:09:96:ec:be:38:bb:7a:b4:
f0:5a:be:49:80:a7:54:12:64:94:a8:40:0c:44:fb:0f:b1:d5:
18:78:1d:52:11:42:62:12:b5:0e:78:70:de:a1:da:b1:d4:ee:
de:f8:37:5b:43:3f:0b:57:57:e7:35:73:ec:5b:b9:09:b7:1d:
e1:27:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:10:44 2025 by rpki-client