Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft
File: 1ppgVl8zchSc5uL8nnI9SQZ2doo.mft (raw, json)
Hash identifier: wLlP9HCZ4EnnPEgdLapPVbg3TBWAcbwVnZ8VTSqmJk8=
Subject key identifier: 55:A7:B2:41:1C:98:4C:D1:CD:2F:45:2B:BE:C0:40:99:85:BC:D3:C0
Authority key identifier: D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A
Certificate issuer: /CN=A9185F7D/serialNumber=D69A60565F3372149CE6E2FC9E723D490676768A
Certificate serial: 3464
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft
Manifest number: 3464
Signing time: Fri 28 Mar 2025 15:03:14 +0000
Manifest this update: Fri 28 Mar 2025 15:03:14 +0000
Manifest next update: Fri 04 Apr 2025 15:03:14 +0000
Files and hashes: 1: 1ppgVl8zchSc5uL8nnI9SQZ2doo.crl (hash: vWBnNx+6NLlGDzPq9MgwBSP8oT+qexO8yZTlj1KLuVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13412 (0x3464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185F7D
Validity
Not Before: Mar 28 15:03:14 2025 GMT
Not After : Apr 4 15:03:14 2025 GMT
Subject: CN=67e6ba32-1c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:75:30:82:5b:cd:84:e5:d2:54:d3:4c:fc:
82:28:82:7e:42:ce:23:05:00:01:f0:71:e7:17:2a:
0e:d7:12:a6:45:55:ed:33:07:b9:e0:e3:72:4b:cf:
0c:b4:63:6d:d3:c8:11:6c:ba:8a:9f:bd:f6:b0:aa:
10:31:71:d9:28:b7:d3:d2:d6:4a:a8:da:52:e6:9d:
b6:92:0b:4a:36:31:de:56:b0:1b:ef:05:d9:ac:a3:
49:a4:38:97:4b:a1:db:b8:90:50:eb:b0:44:60:c3:
bc:9e:1c:fe:2a:ad:6e:b2:85:29:df:01:98:db:d9:
dc:64:b2:8c:e3:49:bb:a8:60:19:25:5b:57:b7:01:
7e:d4:c8:5e:a5:ab:0a:c5:24:59:ec:c1:e4:e7:54:
06:d2:c1:c5:c0:33:90:8a:57:4a:d3:57:dc:b8:00:
f0:a6:0c:e7:29:27:3a:4a:53:ee:81:d5:4f:50:fd:
92:20:71:d2:61:97:87:8c:8b:1b:a2:0f:52:f5:34:
72:e8:f8:f7:e0:62:a2:94:98:10:ed:f2:4a:58:dd:
d5:df:2a:dc:08:9c:b0:ed:70:0b:50:cd:df:96:ff:
40:7e:5d:a7:ab:25:d7:72:fc:89:71:67:90:62:f8:
04:85:21:ac:19:73:57:fb:78:54:b1:83:4b:2d:33:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A7:B2:41:1C:98:4C:D1:CD:2F:45:2B:BE:C0:40:99:85:BC:D3:C0
X509v3 Authority Key Identifier:
keyid:D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:30:0f:f4:b7:1d:86:78:fc:a4:c8:52:8b:15:b0:7d:bf:49:
16:49:ea:3a:7c:19:62:10:37:08:0a:7e:3c:56:7a:1b:f7:0d:
e7:bd:a8:e2:b7:e8:b5:fe:5b:60:1e:e7:53:22:f3:c1:03:6e:
03:08:56:4b:05:1e:32:4e:2a:2c:77:ac:d4:a5:9d:b2:b2:60:
26:7d:bf:6b:d7:e8:53:b5:78:1a:12:9a:ee:a2:8e:22:82:8b:
8a:0c:a8:79:de:76:c2:59:9b:e5:c2:6f:33:96:6a:e9:aa:94:
91:b4:6c:ed:b7:51:a2:f2:f8:36:15:b2:cf:09:9f:1f:8e:71:
7d:35:8e:d6:d3:a4:c0:da:b2:33:26:f9:ab:f0:ce:b0:c7:a4:
40:09:47:12:a6:3b:52:93:0d:97:e9:34:03:4d:c4:89:90:b8:
b7:43:15:64:2a:97:a1:04:51:b0:75:00:c8:0e:fd:b8:73:5a:
52:cb:91:36:f2:8d:83:16:82:90:a5:5b:5e:7d:b4:79:70:f4:
b7:bf:dd:e5:c8:82:21:30:23:25:a5:4f:ef:2a:26:8b:fd:e6:
2c:8c:21:33:5b:ec:d3:20:64:f5:13:1f:2d:62:7a:f3:ba:fc:
3c:d1:6f:27:ab:cb:17:07:7f:19:d0:5a:6c:51:84:bf:a0:17:
c7:26:2f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:29:44 2025 by rpki-client