Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
File: BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft (raw, json)
Hash identifier: gORXVPZ8laYOKvz1e7OKz1BvEvq3n/WKHYeU5DNHp2I=
Subject key identifier: E5:23:0F:26:FF:E8:A5:8B:4E:A8:95:F4:42:B5:B0:FD:1D:FF:EB:45
Authority key identifier: 05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77
Certificate issuer: /CN=A9184559/serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
Manifest number: 01F9
Signing time: Sat 29 Mar 2025 02:17:57 +0000
Manifest this update: Sat 29 Mar 2025 02:17:56 +0000
Manifest next update: Sat 05 Apr 2025 02:17:56 +0000
Files and hashes: 1: BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl (hash: Aar7CToST5+zPy7wboi1KmHAd1QHkMS++A6oYZiz5eY=)
2: FEC28FDE329511EDBF29A211C4F9AE02.roa (hash: 3Nsuy1l5CDxfVHqXS1wMZ/Du4WneIJgwFtAnNJmX/bU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184559
Validity
Not Before: Mar 29 02:17:56 2025 GMT
Not After : Apr 5 02:17:56 2025 GMT
Subject: CN=67e75855-dc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:92:e9:1b:29:3b:06:d6:6f:db:bf:ec:cb:
47:15:32:3a:73:e6:42:45:9e:88:25:e9:fb:ee:65:
37:26:56:71:e4:af:23:d1:8a:74:6b:aa:a7:ad:bd:
43:6b:23:ae:9f:bf:94:e2:f2:14:9c:01:0b:84:08:
88:30:9d:c6:a8:bb:6c:c0:fe:23:f0:d4:19:59:4f:
7e:9e:4d:da:36:c6:6d:4e:49:d5:4e:44:5b:2d:46:
90:6a:30:5a:a3:95:93:6d:b7:ac:70:b7:76:73:25:
d9:42:63:dc:db:a7:2e:7b:40:56:59:b8:8d:b3:ee:
ca:18:36:ad:a6:06:92:06:f9:16:99:1f:1d:4a:b2:
79:d8:23:26:c1:e1:6a:eb:88:40:8d:ad:f2:3f:b4:
9b:02:06:e2:cd:0f:93:34:62:c4:e6:3c:1c:10:19:
34:cd:7e:d9:47:d9:2e:96:d1:c3:80:b5:c6:29:20:
2b:83:e6:9a:1f:3e:83:16:1d:ea:31:d5:a2:94:71:
bf:cb:32:55:5a:ba:39:c9:20:30:e2:19:1e:cc:fb:
34:27:3d:f3:73:b7:9f:c7:83:df:7a:47:f2:34:1f:
24:e1:99:6e:e5:83:2c:5c:96:c8:f5:03:93:6a:3e:
24:69:bf:b3:9c:8d:3c:1b:b3:d6:30:0e:7f:f9:15:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:23:0F:26:FF:E8:A5:8B:4E:A8:95:F4:42:B5:B0:FD:1D:FF:EB:45
X509v3 Authority Key Identifier:
keyid:05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:08:45:ab:13:92:f8:47:44:e3:ca:28:d9:68:b4:87:8f:ab:
1e:e3:49:91:9f:18:09:43:fb:07:a6:f1:0b:f1:dd:7d:96:21:
24:94:c5:33:e5:c8:1c:d5:fc:b9:6a:37:f1:cf:62:8a:26:74:
c7:8f:df:ac:df:93:cd:c4:55:c9:22:bd:13:59:55:04:dd:b9:
33:aa:45:ed:f5:79:5f:c0:44:67:57:02:ab:b2:76:43:eb:43:
f3:99:3d:ac:c9:5f:c2:9b:3e:97:26:3b:a3:7f:1d:99:68:25:
21:61:f6:df:fc:e8:20:06:e1:32:d9:8c:cc:41:0e:1a:22:b3:
c9:e6:4c:93:1b:3d:cb:c6:94:61:ba:1c:80:02:39:e3:58:70:
f1:4f:f8:35:79:af:2a:2d:27:44:5f:c4:18:9a:9b:2d:7c:7f:
cb:c5:94:af:79:fd:13:b2:3f:b2:62:2e:44:e8:1c:bd:12:fb:
9a:9c:86:8b:c4:0f:af:48:82:e0:40:2f:02:0b:b2:4c:03:98:
1e:38:d6:45:c8:28:e8:15:4b:84:8f:0e:b6:b6:ff:01:3b:1d:
da:f1:09:4b:fe:49:72:3b:bd:1b:10:f5:37:98:02:34:c1:0f:
cf:cb:dc:14:03:2d:ee:8a:ab:07:14:07:3e:d8:00:5d:fc:33:
33:3d:3f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:48:09 2025 by rpki-client