Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
File: _PdT00aqq5WrFMYmdRXN8T-A-7s.mft (raw, json)
Hash identifier: 46sa20HfwiX9PiP012K5YTSzk2DiS3JYpyxokiniQlE=
Subject key identifier: 13:C2:DF:48:AD:1E:86:34:F5:59:D2:71:E4:CE:0B:8B:D5:2D:7D:3F
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
Manifest number: 0102
Signing time: Sat 29 Mar 2025 04:34:18 +0000
Manifest this update: Sat 29 Mar 2025 04:34:17 +0000
Manifest next update: Sat 05 Apr 2025 04:34:17 +0000
Files and hashes: 1: _PdT00aqq5WrFMYmdRXN8T-A-7s.crl (hash: DPcsBceJUi4r27ZM8dP5Lm1bpH9uL0dceECcFAN2LIQ=)
2: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (hash: OCepXKtPM8Ugq1ZnTOeqLJrMwE6SWX8J/dtz+Y3O35w=)
3: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (hash: mRLPSGz3fDg54l8MXzyosEq3sw4/imNOjGKPzEwZfwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F22
Validity
Not Before: Mar 29 04:34:17 2025 GMT
Not After : Apr 5 04:34:17 2025 GMT
Subject: CN=67e77849-b4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:c8:0d:e2:54:64:85:6d:95:5d:67:80:46:
1c:52:9d:12:83:b4:47:f4:41:8b:c4:ae:fb:9e:17:
63:ac:7b:58:cc:ed:b2:32:30:65:a1:72:dd:05:8b:
43:ff:52:33:65:21:cf:4b:35:57:71:0d:00:d3:53:
00:1d:28:9a:0d:9a:59:2b:56:b3:51:59:b8:a6:a7:
86:f8:8e:15:83:ab:1b:0d:a6:23:f6:21:5c:15:77:
2d:90:79:95:0c:a6:37:3a:3f:ef:af:16:86:44:fe:
f9:c9:15:6f:e2:dc:c7:dc:16:68:74:ce:86:7f:1c:
49:e2:ce:3f:d5:8e:60:21:87:d0:f2:52:48:b3:1b:
a2:02:8c:3d:ef:49:35:88:c1:f8:f2:81:77:d4:30:
5b:83:a8:d7:3a:d9:43:d9:70:44:c3:36:44:a2:82:
66:e7:e6:57:b6:69:2a:f0:5d:af:5f:f8:45:8c:c8:
aa:07:28:32:2c:51:e0:50:cf:60:87:4d:61:ca:89:
ae:6b:af:4c:2e:1b:e4:62:68:f6:32:43:17:5f:85:
ea:8b:0f:21:1f:06:2d:11:c7:ce:4d:2a:ea:4f:9c:
0a:7b:08:00:fc:39:ca:79:fe:0b:61:a1:3d:dd:e6:
8b:6d:71:8b:d3:52:d2:25:45:d5:12:60:7f:b2:b5:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C2:DF:48:AD:1E:86:34:F5:59:D2:71:E4:CE:0B:8B:D5:2D:7D:3F
X509v3 Authority Key Identifier:
keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:e9:57:c9:17:a9:33:e4:18:3f:33:8a:d3:1f:6e:af:b4:c1:
be:1f:f4:f5:b8:00:83:dd:c1:17:f2:9b:a4:e0:b9:86:0b:54:
a1:89:f6:6c:c8:07:c3:30:d2:5f:b4:3c:10:7a:d4:ea:79:bd:
05:0a:14:b8:f5:e9:5c:72:6d:40:70:df:d1:69:89:a8:1c:9a:
59:43:cc:c9:19:c8:2f:cc:b9:23:d2:17:7b:52:fc:14:0e:de:
f4:ac:3a:9f:dc:52:88:40:9f:10:95:a5:9b:45:da:9a:57:70:
39:10:b3:a3:f1:d9:10:b2:42:67:61:6e:c8:c4:c7:81:31:55:
41:c1:b1:60:96:11:68:16:c1:02:c5:79:c6:2b:5d:f6:9d:4a:
4b:96:e4:48:25:4b:2d:ad:d6:ef:9f:e6:fc:b3:bb:f9:23:e2:
54:ca:10:cb:12:23:0e:11:8e:27:4d:12:00:77:af:fa:81:e6:
c5:e6:c0:e4:c4:91:76:f6:53:65:ec:77:42:8f:68:cb:93:c7:
5d:25:ad:38:b2:af:e4:bb:9f:3e:48:b3:8e:ac:99:f5:75:47:
55:1e:45:2d:41:4d:6d:42:7b:0a:65:45:54:ee:06:e9:d2:f3:
37:95:b8:cf:1b:b3:69:4f:f0:f2:fb:ea:77:54:0d:bb:cf:2a:
96:3a:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:18:49 2025 by rpki-client