Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
File: 5zsrW0iY5HX_6GmyTTSFzsh90Us.mft (raw, json)
Hash identifier: CIOK/0ohe3P/3SX9uWJchrdoSrOBUx8ocStBwQG+Ujw=
Subject key identifier: D5:0D:68:AA:F1:04:85:01:A9:2A:4C:CE:27:08:91:A9:A9:C1:B1:3C
Authority key identifier: E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B
Certificate issuer: /CN=A9181C93/serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
Manifest number: 0119
Signing time: Sat 29 Mar 2025 04:13:28 +0000
Manifest this update: Sat 29 Mar 2025 04:13:28 +0000
Manifest next update: Sat 05 Apr 2025 04:13:28 +0000
Files and hashes: 1: 5zsrW0iY5HX_6GmyTTSFzsh90Us.crl (hash: 3756d5usXjtYLkxMqCLmaWqb+85GrXdEVJl5+XaTGv4=)
2: A2ED9CA2619D11EE8699DD20C4F9AE02.roa (hash: nKra6kgkDLZMACl29cue2PgvN/WmZ6IhO1y9ruMhiD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181C93
Validity
Not Before: Mar 29 04:13:28 2025 GMT
Not After : Apr 5 04:13:28 2025 GMT
Subject: CN=67e77368-4586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:72:46:b9:ec:44:0a:91:94:2a:e5:f5:00:
1a:68:e2:99:cc:7a:ec:28:8e:d2:a2:12:01:50:24:
dc:ea:eb:6a:f8:6d:e0:c3:7b:9b:54:60:4c:9c:95:
f9:e7:2e:ca:a2:74:66:bd:72:31:5f:08:b1:e3:a9:
84:44:24:a6:72:7a:dd:ab:89:d9:f6:02:e5:c9:36:
2d:b8:74:e1:bf:55:a6:93:2b:58:a3:02:2e:e3:b6:
f6:b5:41:47:52:db:1b:c3:ab:d5:7c:05:41:ee:4b:
ff:93:f2:e0:7c:ea:2a:aa:41:2c:ce:55:47:56:e5:
5a:df:61:16:c4:f4:c6:3b:34:d2:b6:8e:5f:17:93:
08:12:05:61:78:c4:ab:ea:f4:f4:ac:01:2b:81:75:
37:b8:c9:46:ce:03:77:9d:c5:4d:07:27:df:34:56:
6b:20:a4:1c:1c:4f:8c:30:e0:85:21:f2:16:ab:16:
44:ec:84:c1:55:45:48:5b:94:05:a5:6d:80:5d:71:
07:a5:4c:89:ff:8d:99:ab:9f:be:0a:34:c9:c3:af:
dd:23:13:58:33:50:58:9a:0b:88:3c:01:43:f0:15:
f1:07:c7:07:12:ce:93:0c:a6:43:be:d1:50:7a:14:
20:9f:87:43:f2:9e:0d:eb:b2:3c:c6:d1:24:e5:02:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0D:68:AA:F1:04:85:01:A9:2A:4C:CE:27:08:91:A9:A9:C1:B1:3C
X509v3 Authority Key Identifier:
keyid:E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:29:7e:9c:43:70:a9:84:89:97:5b:b6:38:09:2d:91:5a:e0:
4e:85:53:e9:22:69:8c:0c:73:a5:97:04:e8:18:f2:fe:d9:4c:
34:65:37:86:47:60:12:20:3d:71:bd:db:4a:2c:d8:41:4f:e9:
07:2e:3c:2e:66:9c:83:2c:01:92:8a:c2:92:d6:e7:ea:37:9f:
19:78:65:4e:d1:93:d9:b0:8b:14:a3:0b:5f:69:14:3a:85:ad:
df:cf:89:96:dc:e2:fa:63:9c:5e:47:91:79:70:69:79:8c:74:
6e:d9:c4:21:8a:ae:a2:b8:a7:06:6e:49:2f:63:d4:c0:fb:00:
ca:4b:d0:1b:a7:0d:c2:c3:6d:56:b6:2c:0c:5b:c8:6c:be:66:
4b:75:a6:24:9a:16:8e:a8:55:eb:99:cd:1c:4d:d8:00:78:80:
b7:40:64:c6:5c:ec:50:b5:89:18:54:8f:1a:a8:c1:2a:2a:c2:
17:ee:d7:67:a5:08:28:dd:d7:5b:ba:88:d1:34:e6:3d:b0:aa:
59:83:22:ca:58:88:91:3f:23:5a:f4:f9:c0:ff:85:65:02:a2:
e4:5a:9a:d4:4b:2c:0a:1f:c8:7c:60:93:9e:de:33:92:8d:cc:
5b:dc:a8:e3:2a:a2:27:39:56:ed:e1:95:85:73:00:9f:00:ac:
63:bb:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:44:41 2025 by rpki-client