Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json)
Hash identifier: JBx5GCJAZibwr0hxnxkijzxVv8PiRcPl/gGthPIg2lY=
Subject key identifier: 2A:63:FA:41:F5:56:25:DB:B1:09:8A:11:FF:E2:69:46:AA:68:CA:27
Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Certificate serial: 1E01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
Manifest number: 1DEA
Signing time: Fri 28 Mar 2025 16:12:36 +0000
Manifest this update: Fri 28 Mar 2025 16:12:35 +0000
Manifest next update: Fri 04 Apr 2025 16:12:35 +0000
Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: xAXvqbfBtUCUUXaNlhMIZbPlm8Qvrk/jvlt61VFa0wE=)
2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: uuU+2b4TABJg99J2eIGANwe1poRJarA5qOxzJJ2GkQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7681 (0x1e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180562
Validity
Not Before: Mar 28 16:12:35 2025 GMT
Not After : Apr 4 16:12:35 2025 GMT
Subject: CN=67e6ca74-0aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:ab:8a:be:dd:43:61:ae:6d:3b:9d:c1:fc:
ad:5e:be:e9:02:fd:8e:41:22:15:af:dd:d2:f0:fa:
dd:a6:bc:91:92:93:c1:0a:03:fe:39:41:b6:9a:c7:
d4:c4:17:bd:91:7e:67:2b:9a:d6:18:b9:45:18:13:
f2:ed:4f:c8:aa:d9:08:bc:4f:cb:fc:1c:f8:4d:06:
3e:ea:9c:32:e1:c3:21:ee:0a:76:ce:36:45:9e:eb:
64:53:44:39:0c:3b:ef:2c:30:8d:c8:3f:44:a3:e0:
91:e9:60:6e:43:cc:7a:e1:41:f7:64:fc:10:fc:e1:
4e:65:24:e1:ca:24:23:67:9a:f8:04:40:5b:19:49:
fd:d1:8b:85:9b:f8:04:bd:9b:51:8f:16:70:0e:55:
07:e0:af:47:84:1b:e6:29:67:a0:23:9c:0a:3b:e7:
b7:00:38:5f:82:96:e5:35:8f:9c:07:03:19:29:d2:
07:ba:69:e3:a9:be:ba:aa:0b:99:e7:05:80:43:a3:
39:53:c7:d2:8a:fb:df:02:a2:70:61:f4:a5:ca:19:
f1:eb:0f:cf:fd:95:5d:ad:45:8d:3b:71:51:2a:de:
2c:bf:aa:a3:42:71:34:f8:93:66:59:07:b2:56:de:
31:37:87:9b:47:1b:56:ef:72:d5:50:4a:d4:af:f8:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:63:FA:41:F5:56:25:DB:B1:09:8A:11:FF:E2:69:46:AA:68:CA:27
X509v3 Authority Key Identifier:
keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:bc:ac:11:a3:f2:1a:90:19:94:f8:25:4e:d3:4e:62:c6:f8:
dc:68:5e:fb:d0:e6:92:57:82:fe:50:eb:1b:03:3e:5d:d4:16:
30:60:80:65:ac:c3:d6:d8:07:0e:05:8d:d5:af:c6:a1:4c:d1:
cc:04:81:ed:8e:dd:d9:d8:73:1a:bb:6b:57:21:55:fc:58:fd:
48:4a:9a:6b:54:d9:c9:dd:fd:07:b6:be:64:82:7c:c4:2f:09:
7a:ce:37:24:95:9f:5a:ba:47:31:2d:fe:50:44:ca:cc:84:93:
23:8e:c3:05:e1:1a:d4:99:28:93:14:47:3e:ff:4b:d1:85:4c:
d1:90:ae:09:b5:71:25:d8:35:33:b0:a7:8d:c0:e3:5f:30:6c:
63:62:61:50:b1:06:94:38:5d:ed:7f:ed:5a:d0:9b:3d:09:fe:
64:3c:0e:7f:db:44:f9:92:38:c3:a1:f6:f6:08:92:5a:f0:eb:
cc:87:61:b9:c8:d8:f5:27:6c:ff:4a:b9:ac:4f:56:d6:49:47:
de:53:d4:c2:ae:37:4e:30:b5:e8:07:ae:0f:c5:cf:66:0a:19:
3a:93:17:ed:9a:24:36:43:c5:16:67:e2:c9:c7:ba:d1:4c:16:
b4:67:9c:8b:86:39:18:09:d3:46:aa:81:db:3f:cb:56:80:7e:
29:7b:9e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:44:04 2025 by rpki-client