Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json)
Hash identifier: KRSHGg8DpAt1uxIpT0afIYIZ9XmFgbtJmiRCmo+PTCg=
Subject key identifier: 16:9B:20:B9:68:70:DF:3D:D5:2F:CA:36:D3:41:51:96:F3:EA:0D:2F
Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F
Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
Manifest number: 011A
Signing time: Sat 29 Mar 2025 04:11:58 +0000
Manifest this update: Sat 29 Mar 2025 04:11:57 +0000
Manifest next update: Sat 05 Apr 2025 04:11:57 +0000
Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: 72glLbuPBoPAO+FrEo2sSzsxVU5Yj0IhhpjLCrQqgKc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186883
Validity
Not Before: Mar 29 04:11:57 2025 GMT
Not After : Apr 5 04:11:57 2025 GMT
Subject: CN=67e7730d-cedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:e7:ed:d0:ae:ed:f2:6d:f0:44:70:f5:68:
cd:ea:2a:eb:de:76:5b:d7:b3:3e:b9:42:fe:d1:86:
b4:1e:b2:a6:99:86:5c:af:b7:86:1e:fa:e7:81:86:
f7:4e:f9:cc:03:84:2a:92:a2:f1:5c:ed:9b:4a:6c:
f1:33:bc:4c:b8:1a:8e:8e:3e:ad:fb:44:ba:28:91:
0f:0b:7e:26:9a:96:7c:36:8f:7c:bb:33:99:27:bd:
85:68:f9:36:4f:5d:59:96:87:01:b1:f1:e1:0e:01:
db:11:e7:14:50:33:c6:69:0d:53:82:cf:9c:55:91:
dc:c7:f5:fe:49:b8:a1:76:2d:93:36:cc:b2:bd:27:
9f:f1:00:ff:eb:a7:14:9d:14:02:a4:e9:a2:5d:53:
ba:24:d6:c2:65:25:98:9b:d8:27:9e:69:3d:64:03:
58:e6:25:4b:5e:28:dc:a0:00:2c:83:0b:24:19:f5:
98:8f:8a:5e:9d:a8:9d:52:f9:f7:cc:72:89:af:e3:
54:63:ca:be:25:3a:83:80:7f:54:bb:e5:b0:79:78:
d8:ac:02:ba:68:ad:3c:3d:00:d4:85:38:d3:fc:34:
13:48:8b:d1:8b:e0:04:f7:13:50:1d:12:c4:48:ab:
49:63:04:1e:a3:6c:b2:d7:87:d2:90:72:48:17:b2:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9B:20:B9:68:70:DF:3D:D5:2F:CA:36:D3:41:51:96:F3:EA:0D:2F
X509v3 Authority Key Identifier:
keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cb:96:7a:b9:17:1e:09:c0:6c:44:6d:ed:2b:d8:4e:93:cb:
55:78:87:a7:73:4a:a7:be:c5:7a:20:96:01:24:29:97:bb:30:
9a:34:16:0d:67:7a:51:a9:c4:1d:41:d5:b2:ed:56:c5:72:e5:
e2:a2:41:60:87:bd:9f:7f:31:d2:86:71:e2:9c:5b:53:36:35:
5a:ac:5f:f6:d0:d0:61:bd:26:2b:e2:09:76:80:f1:ad:7d:15:
9b:c1:ad:6e:50:8b:e6:63:dc:8e:ce:84:19:0e:f0:14:6b:6c:
f3:d2:6c:c9:89:5f:1e:47:ef:78:e3:1e:28:f1:69:5b:3a:b8:
7a:6a:a9:3e:d6:da:e8:46:d4:a3:ca:52:cd:e6:07:41:73:67:
7e:a3:f9:87:b9:32:2d:48:42:94:d9:53:32:02:93:e4:d9:a8:
cc:46:88:7f:23:ff:9c:dd:00:dc:77:7b:92:6e:e0:9f:9e:d3:
aa:83:54:23:7f:fb:b7:71:af:d9:e7:cc:2b:95:7c:51:8d:85:
2f:4d:08:0f:20:61:9f:9c:f6:4f:b6:7c:f8:67:90:14:fd:a8:
1e:6d:65:2b:1e:f3:69:bf:27:61:88:eb:0b:b0:5d:11:0e:5a:
a1:ab:49:7e:c2:de:b2:10:6c:67:a0:6d:bc:7e:25:7c:47:39:
85:4c:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:41 2025 by rpki-client