Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier: AqmhyFe5wSy4meq1U4IPZAorT5gDfxYtlbw5Z4Wt2Pg=
Subject key identifier: 15:DD:07:6F:99:73:CD:E1:DA:31:F9:C2:7D:CE:AE:76:FD:67:8B:25
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial: 0BFE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number: 0BE9
Signing time: Sat 29 Mar 2025 05:48:18 +0000
Manifest this update: Sat 29 Mar 2025 05:48:17 +0000
Manifest next update: Sat 05 Apr 2025 05:48:17 +0000
Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: QdUxIRGcSc6ISXpwIya7Eu0BUEEAK+9DuHPyEwnQJWc=)
2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: FmIgsBhn26Msitd9uYBqz2EKKDjWry4yTM+2My3/Yyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3070 (0xbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91829E3
Validity
Not Before: Mar 29 05:48:17 2025 GMT
Not After : Apr 5 05:48:17 2025 GMT
Subject: CN=67e789a2-1c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:45:91:31:8e:dd:02:5f:62:54:da:f4:dd:
f4:b0:0f:9a:bf:0c:c9:bb:62:a1:3c:e0:c6:e1:bb:
76:0c:d2:e0:76:e8:57:85:dd:16:e8:cc:f7:54:9d:
ce:27:66:69:a8:4a:14:01:81:6c:f3:d1:2f:41:14:
46:2d:fe:2f:9a:35:3e:88:63:b2:e6:78:d5:9f:ca:
f7:11:dc:6b:b7:c6:cf:d5:90:87:3d:56:cc:c0:04:
f4:15:e5:47:0c:13:a4:a8:a9:1d:ed:6f:82:89:dd:
60:4f:36:9c:ac:c9:3d:28:6e:c8:5a:04:fc:60:62:
e1:b0:88:b7:d3:96:87:b0:a3:29:46:67:d9:47:27:
8b:17:f3:20:2a:1a:ba:2d:24:9a:ad:76:92:d2:ca:
77:b6:ae:c2:78:59:05:84:fb:68:67:dd:f1:14:f6:
73:e0:29:bb:eb:e7:6d:48:fb:64:93:09:82:ba:9c:
86:dc:6c:27:9b:a5:42:0b:09:54:5f:be:a2:ca:9c:
7a:93:84:67:2c:4a:cc:05:01:c6:e8:29:b0:cc:02:
c3:b0:64:05:9b:a6:4f:8e:4d:65:c7:41:7b:8d:af:
34:ce:de:69:02:32:92:8a:8f:b8:a1:5d:05:d5:3f:
1d:68:d3:20:53:7c:53:37:f8:4a:a1:ec:be:65:58:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DD:07:6F:99:73:CD:E1:DA:31:F9:C2:7D:CE:AE:76:FD:67:8B:25
X509v3 Authority Key Identifier:
keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:ea:98:d6:57:88:ed:fa:41:11:64:bd:d6:aa:72:38:0e:56:
cc:7b:29:d4:9b:c9:98:d8:5d:d0:dd:38:5c:62:05:cf:da:99:
95:af:45:1c:09:f4:7e:21:d9:18:3d:3e:12:15:9b:e1:7a:f3:
0c:df:d1:54:7b:c1:5d:03:5a:03:f0:1a:8a:11:c4:36:ac:02:
54:3c:43:39:db:6a:ae:86:bd:96:2a:e9:14:ff:b8:12:58:b9:
b7:a5:50:d7:f8:4d:65:77:97:45:6c:15:8c:d7:7e:af:ba:2b:
fb:04:da:13:0b:c2:58:d7:1f:9a:b8:46:ff:39:17:78:6e:8e:
d4:28:dc:29:89:61:a8:54:12:eb:46:47:98:fb:7b:b7:72:0f:
e2:2f:55:cd:da:2c:97:49:28:b6:5b:b2:19:c4:35:ae:a4:9f:
f6:fa:62:35:ad:3c:3d:78:0c:ea:d8:54:ed:5d:0e:76:37:e6:
61:69:be:5d:f9:00:62:9d:19:fb:92:ce:45:9d:02:d2:f2:05:
34:40:06:53:0a:2c:f7:69:55:02:4d:60:06:24:c0:29:42:3f:
6b:2d:b0:c1:94:f0:4c:c9:73:6f:1c:63:41:7d:ec:fa:07:2f:
0f:8d:ca:4e:af:90:fa:9c:49:ec:cc:1e:3e:b7:8d:d4:42:2a:
f4:46:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:58:57 2025 by rpki-client