Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json)
Hash identifier: VeEIT0YQKAAt/HlKIaQ842MSGzsR2gMZn0NUimZnhKQ=
Subject key identifier: A8:56:61:22:2E:EC:92:79:44:63:05:47:B6:7B:CC:E9:91:C3:E0:F0
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial: 2A90
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
Manifest number: 2A6F
Signing time: Fri 28 Mar 2025 15:41:01 +0000
Manifest this update: Fri 28 Mar 2025 15:41:01 +0000
Manifest next update: Fri 04 Apr 2025 15:41:01 +0000
Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: ZDThDmPNXlu90pub5VIbnENFYftkgRdtcsoXbcZcSL4=)
2: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: h6LaGc6kyZukCUqqYzIxqwzDNG7IrAkyoRHl1/dzGpU=)
3: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: fvGOEcDamDrvii5lTVdwqyxJJEnDbSq0cSF/6Idf/Qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10896 (0x2a90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214
Validity
Not Before: Mar 28 15:41:01 2025 GMT
Not After : Apr 4 15:41:01 2025 GMT
Subject: CN=67e6c30d-ed70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:2b:41:34:74:80:25:88:d6:db:a0:53:e0:
3c:e1:90:b0:25:53:10:bb:11:94:b2:20:d5:42:a8:
54:d8:eb:f9:6d:70:d1:55:34:99:28:0a:f5:7c:7a:
1c:4d:3e:2c:4d:e1:ba:96:ef:80:9a:ad:ff:7b:4a:
eb:5f:6d:df:50:d0:5b:30:d5:5c:93:ea:e0:87:ac:
2d:a2:87:d5:11:ff:40:09:e9:99:3f:32:7e:da:cd:
49:29:04:f1:1f:9b:8d:6f:3b:74:6f:e8:cc:83:fe:
53:64:98:fd:44:73:f2:37:65:0f:96:85:a2:f3:2d:
3c:a1:45:8d:e2:24:78:ca:2b:66:5a:6b:e4:f6:44:
a4:60:6b:76:cc:20:50:35:55:95:6c:02:a2:ba:49:
94:ad:e8:33:d1:b1:74:76:c9:51:f5:36:6a:00:2d:
d0:b8:a6:49:52:ca:3e:77:4e:55:44:d8:d4:bc:5a:
4f:de:59:f1:77:ee:6e:c0:21:a5:47:36:a2:26:42:
f7:ed:0a:d7:6d:01:b5:62:b3:6f:c8:24:b5:e6:db:
73:88:83:e2:d6:5d:fa:f0:a0:de:07:7f:67:1a:ca:
b4:1a:1b:51:26:65:b4:2d:a7:17:c7:10:21:f8:79:
f6:19:d7:1f:ba:2d:f2:bf:71:b1:5b:5a:a5:c8:36:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:56:61:22:2E:EC:92:79:44:63:05:47:B6:7B:CC:E9:91:C3:E0:F0
X509v3 Authority Key Identifier:
keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:92:c0:e5:d7:06:da:1d:ea:41:9b:88:73:1b:46:39:47:fb:
80:d7:38:b5:09:56:2e:cf:ce:32:48:62:fd:bd:c8:b0:f4:9e:
9d:90:48:2e:21:55:39:83:a9:8d:24:e8:b8:76:9b:8a:57:a7:
b1:06:32:85:3c:db:0a:2a:a6:03:46:27:6c:02:b4:70:dc:23:
fa:9d:a8:4d:88:53:66:09:7e:35:d8:d1:6b:01:fd:37:34:6c:
61:60:70:cc:ce:fa:64:7b:77:8b:12:9e:36:56:a2:4c:f9:7d:
fc:86:ee:12:74:c5:66:c6:ec:b7:51:fa:86:65:f8:7b:17:c2:
87:0b:f0:fd:64:77:84:c9:98:f8:9e:95:60:aa:a3:5f:02:d7:
2f:e0:ee:22:29:bc:67:23:5e:7c:8c:12:16:dd:7c:d1:68:32:
f4:84:1c:67:1f:00:56:9d:df:a7:da:28:8a:50:57:e1:ed:26:
73:80:1c:4e:a1:9a:c8:a9:25:44:13:f4:9d:e0:5d:34:24:be:
da:d6:62:f4:9b:ea:2b:b8:93:31:5d:cc:56:a5:91:1c:f3:35:
55:5f:24:59:1b:77:ab:11:d2:45:64:1d:9c:5e:fb:2d:a8:c3:
61:3d:bc:bb:38:e8:d9:47:9a:6c:c6:16:cf:14:a3:83:2c:5f:
48:54:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:17:47 2025 by rpki-client