Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
File: jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json)
Hash identifier: UJ7XrhadFtveXMKCWroqGfGkLKbTjN29mhYKm/1MHIQ=
Subject key identifier: 87:1A:B0:71:6C:C9:8A:10:9E:43:FA:2B:43:53:49:25:90:A0:F4:D4
Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
Manifest number: BF
Signing time: Sat 29 Mar 2025 05:15:22 +0000
Manifest this update: Sat 29 Mar 2025 05:15:21 +0000
Manifest next update: Sat 05 Apr 2025 05:15:21 +0000
Files and hashes: 1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: bwr8g5P+GubkZAtrVTL7ZZcFhal3B1TlH5HO3l4wb/I=)
2: 5A32E8DAE79111EE972FC923C4F9AE02.roa (hash: mY/bcg2+Nm0bHgEr5ZTRXdk5A4XIUo9DciT4aIgm6Hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D
Validity
Not Before: Mar 29 05:15:21 2025 GMT
Not After : Apr 5 05:15:21 2025 GMT
Subject: CN=67e781ea-fd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d6:a0:20:5e:89:7e:44:6d:a7:71:db:2d:ac:
b9:a0:66:26:86:4d:41:fd:e6:ac:c3:39:33:e8:d8:
5b:de:b0:d6:99:da:35:fa:df:55:3d:13:fc:32:a2:
ed:4e:52:85:6d:7b:7f:b9:d2:34:6e:75:f8:3a:95:
71:41:74:18:83:67:65:fa:22:57:91:fe:64:82:a9:
84:24:e0:a3:e2:7e:d4:12:d3:6d:b5:ba:4f:0a:33:
bc:6e:1a:e8:b1:82:4b:0b:56:1e:50:4d:27:0d:4d:
77:1e:78:45:97:3e:09:3b:6a:38:34:f5:00:3a:17:
df:59:d4:69:d8:ff:7b:94:1f:91:fc:cb:11:77:19:
1f:a1:71:81:32:4e:19:0c:87:e6:31:68:5b:bc:1a:
5f:87:7c:4a:ce:95:91:65:bf:a2:6e:76:62:6c:11:
1d:7a:72:f7:41:1d:8b:19:7d:bb:ea:67:14:eb:9d:
c2:d2:06:ad:43:88:2e:61:c7:1c:b3:55:68:de:50:
6d:fa:ed:08:62:c9:3a:e1:f0:f4:d7:b6:cf:29:77:
2e:64:24:f3:2c:d6:40:43:c2:45:68:d9:fa:08:f1:
56:2f:3d:a7:a3:2a:64:75:22:40:0b:d7:c3:0f:15:
92:0f:d9:66:52:fe:06:e9:8e:80:47:e7:0c:50:87:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1A:B0:71:6C:C9:8A:10:9E:43:FA:2B:43:53:49:25:90:A0:F4:D4
X509v3 Authority Key Identifier:
keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:32:f4:d8:e3:e7:58:bb:2d:0a:fe:3f:43:e0:7b:5a:76:cc:
37:18:19:f9:dd:62:b1:16:4d:58:31:f5:d0:bc:f6:e1:31:71:
95:10:d8:f7:e1:02:8e:81:15:6e:1d:a2:7c:3b:3c:49:b3:66:
95:89:44:c3:69:fc:ef:88:b7:50:15:6c:09:da:2b:9d:40:cd:
ee:15:3c:aa:24:65:6e:2c:39:f8:4b:5d:83:05:d0:86:bb:f0:
57:3a:88:80:9a:90:d0:cc:d4:f6:d9:bd:8e:d1:82:4e:84:b1:
02:9e:81:3b:e3:d2:9c:e7:4c:ab:eb:cc:6d:99:f5:9c:3c:9e:
0f:6e:ad:5b:07:ed:d6:95:b0:06:55:4e:70:05:aa:89:90:e0:
83:f3:37:3e:3f:26:f9:96:44:a1:0b:87:3a:da:96:38:bc:af:
0c:e7:50:38:5f:c3:96:61:4e:20:c5:e3:eb:6d:0c:03:99:8d:
7f:fe:8b:c9:a2:64:60:86:06:4a:a7:de:9f:9c:13:a8:10:a0:
ad:15:70:66:c3:89:2b:12:5c:01:5b:96:c4:7a:4e:34:98:f1:
c8:07:ca:83:80:b8:30:57:11:e4:7b:4e:de:af:50:80:e7:28:
9b:ca:2f:7a:fc:58:d1:6a:69:b7:76:42:18:85:fd:45:ea:6a:
ca:d1:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:13:47 2025 by rpki-client