Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json)
Hash identifier: uCHQgZ3Gr+ncaiGukdEGGz1GNAZfl9IBphS1ZKmgojo=
Subject key identifier: 0F:B4:C3:09:A8:A2:7A:D1:5C:FF:B2:63:B4:FE:1B:DC:F8:1A:20:05
Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
Manifest number: D4
Signing time: Sat 29 Mar 2025 05:05:12 +0000
Manifest this update: Sat 29 Mar 2025 05:05:12 +0000
Manifest next update: Sat 05 Apr 2025 05:05:12 +0000
Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: azRipxrmzKpJjxfhIX9EZ7wTmLdshyMGNagUBcPhQZ4=)
2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: 2EzfaEZcvEqdfL3o4m+mh66hiNoNCrlQkH2IaWK10g8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186249
Validity
Not Before: Mar 29 05:05:12 2025 GMT
Not After : Apr 5 05:05:12 2025 GMT
Subject: CN=67e77f88-1c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:e1:fd:b4:0a:02:9d:d8:5a:83:10:61:1c:
7a:60:6e:ca:50:ba:ec:ea:9d:ca:e4:05:8d:41:0f:
27:64:f2:f4:9c:97:ac:14:4c:64:28:3a:34:d2:1c:
f9:1c:57:81:a0:1d:66:59:f8:bf:c2:92:4c:85:c9:
29:41:f9:55:be:38:9a:fe:7c:23:83:db:1a:29:cf:
4b:d9:f6:b3:86:5f:59:f7:e0:6c:88:f0:80:d3:8d:
b9:fd:15:28:06:9d:1d:10:c6:07:79:0b:33:c7:f2:
bc:d5:a2:af:aa:63:41:1f:94:02:3c:a2:cd:94:7e:
96:33:f3:21:0b:9b:fa:09:70:e2:fc:21:d9:16:ba:
18:85:5c:7a:1c:f9:c1:a7:29:81:a3:d4:74:a8:c2:
83:50:5c:70:d3:15:d8:9b:9d:f6:80:f4:98:ef:e6:
15:56:d6:64:42:f4:2f:77:b8:dd:1e:b5:68:cf:41:
e9:47:01:05:78:a1:cc:16:0c:da:d2:61:fa:55:4f:
ef:16:8d:42:91:33:7a:8b:42:2d:42:cc:64:63:bb:
66:3f:40:99:40:ec:0d:af:f2:e8:2b:f8:a5:98:6f:
18:18:7a:65:cd:04:26:08:c4:62:59:70:17:ae:3c:
94:a4:da:a0:c4:e4:51:04:82:34:8a:8c:34:2d:99:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B4:C3:09:A8:A2:7A:D1:5C:FF:B2:63:B4:FE:1B:DC:F8:1A:20:05
X509v3 Authority Key Identifier:
keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:24:de:91:73:12:b3:7a:3b:95:48:22:f1:d4:30:c9:24:89:
13:46:e7:a5:df:b0:2c:ff:06:44:3e:38:4e:69:29:5f:ff:5f:
1f:84:38:3e:0e:42:ec:af:c8:7d:e0:15:01:48:a2:38:b8:7b:
bf:69:b5:5c:17:5d:0b:4b:1d:71:52:a8:45:0e:25:17:93:23:
0e:0e:e9:d4:f4:07:9b:3e:55:a8:55:4d:ae:29:99:33:36:14:
a0:81:a8:f0:f4:c1:7e:61:fd:63:db:82:4b:60:f4:4b:6d:c4:
80:d6:6c:8b:27:19:4d:10:18:ee:aa:8a:47:ba:c4:73:0b:7e:
a3:79:e1:9a:73:e9:ca:d6:8c:46:5f:09:03:cf:4e:52:34:67:
ef:fb:3c:fc:8f:62:77:7b:e5:45:70:11:7d:8b:f9:21:9c:af:
29:76:07:62:8a:fc:61:f2:67:f6:4a:b1:f0:f7:7a:38:d1:9d:
de:8a:dc:2b:ad:b9:8b:79:ad:32:80:30:2d:c2:1b:c7:5e:65:
03:1d:33:ea:bb:4c:6c:b3:f5:69:21:f4:a4:fc:86:f1:21:ab:
a2:dc:2c:29:8a:55:65:da:f8:88:de:d4:fd:04:d2:0a:f7:4d:
18:f5:97:f7:ba:0f:86:d4:b4:13:50:0d:d9:45:33:73:90:e0:
d2:a5:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:37:59 2025 by rpki-client