Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
File: punLpSnAWpYkymA1SKPjFJF1jys.mft (raw, json)
Hash identifier: BKzcQRJULfrNCwBIBo9f399Pql6v/N/WK2euxupycOY=
Subject key identifier: F0:BE:10:3B:B3:EF:6F:39:62:9D:A9:4F:BA:09:57:5F:B2:87:85:0E
Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
Certificate issuer: /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
Manifest number: 72
Signing time: Sat 29 Mar 2025 06:09:32 +0000
Manifest this update: Sat 29 Mar 2025 06:09:31 +0000
Manifest next update: Sat 05 Apr 2025 06:09:31 +0000
Files and hashes: 1: punLpSnAWpYkymA1SKPjFJF1jys.crl (hash: 9nixcYknKvehOvLmB91s96QYv/QMXtHFmtzznVopPF8=)
2: 17AF252C605A11EFB7F45361C4F9AE02.roa (hash: hIohGLAEr9r6SYuLg+aGzwQmujzK2d8ao66pEwxDxz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189B41
Validity
Not Before: Mar 29 06:09:31 2025 GMT
Not After : Apr 5 06:09:31 2025 GMT
Subject: CN=67e78e9b-7b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:bc:15:10:4e:a4:8f:0a:d1:80:9b:e8:85:
9a:14:d5:a4:da:b2:d2:e4:d7:29:04:aa:8b:5e:0a:
9e:78:98:d3:32:88:58:fb:e8:5a:ae:d5:6e:6c:08:
fa:1f:39:0b:55:40:ff:58:8b:63:d9:b1:fe:59:89:
05:41:bd:e7:03:4f:05:ff:df:62:8e:e7:64:38:0d:
c2:ca:82:44:10:cf:4d:6b:14:b2:f5:83:3d:d8:63:
78:d7:b3:32:a2:fd:b1:fa:43:3d:85:fb:4d:f2:d9:
2f:06:f4:6c:cf:7c:4d:64:a1:9d:ca:a9:b5:5f:14:
de:0a:0f:73:93:92:8c:e2:df:90:1d:a4:36:c0:76:
0b:03:6e:d7:39:82:76:5e:8c:9f:4d:71:af:f0:28:
e2:3e:5d:cf:12:9c:b3:cb:18:8d:3b:9f:f9:fe:a2:
4d:f1:57:21:fb:65:c8:1a:97:8f:fe:20:a0:42:62:
df:c5:9c:d7:89:b0:37:50:26:ae:5f:7e:8c:e3:48:
25:fc:f2:75:db:dc:4e:c6:e0:c8:b8:65:39:80:4e:
79:cd:e3:c2:4b:bb:f8:2f:73:53:60:72:69:1d:95:
43:b2:ce:c4:51:03:29:ac:9b:9b:0e:59:e3:77:9a:
57:a4:19:58:b4:b6:2c:68:b4:7f:d4:50:cb:9d:7b:
d1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BE:10:3B:B3:EF:6F:39:62:9D:A9:4F:BA:09:57:5F:B2:87:85:0E
X509v3 Authority Key Identifier:
keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e3:38:7c:15:96:be:aa:47:c5:57:7c:86:f1:03:42:55:7a:
74:90:81:57:8d:e5:2c:17:a3:0c:f8:eb:66:c4:4d:55:60:a5:
8e:28:b6:8a:8a:b5:96:e1:6b:3b:d2:7a:c3:fd:0a:57:61:20:
90:27:1c:cd:c7:ec:cb:0d:80:fb:f3:30:76:a6:94:2d:65:15:
73:ff:65:91:40:53:d9:23:e2:e7:f7:39:27:43:0f:76:ee:51:
f0:5c:b0:55:2b:41:c6:77:4a:04:a1:f6:69:0d:4b:a9:d8:3b:
a1:77:be:ee:ae:9d:ab:50:8d:be:a4:c3:48:66:8f:2a:c6:7e:
c8:90:28:f5:c5:dc:bb:60:43:b1:69:29:b7:d1:d1:d7:76:3e:
47:b3:43:12:c3:59:cb:6c:e5:d8:53:33:7c:f4:f7:ec:cb:ea:
cc:7c:04:76:98:9b:13:5f:ca:90:f4:08:f5:ff:90:96:3e:ec:
b3:88:ad:9c:16:0f:17:af:0e:df:6f:d9:88:0b:09:82:bd:b2:
7a:8e:35:6d:67:89:83:ee:d7:82:9e:8a:9a:30:a9:b6:5b:f7:
c0:b8:54:31:f7:7c:8d:8a:43:4e:3f:79:4b:eb:53:45:3d:83:
31:60:b1:f2:87:02:4c:77:20:4d:e8:9b:39:27:04:0f:65:5d:
01:08:fd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:30:53 2025 by rpki-client