Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
File: A0iYvB-xsaJGF6zZvIMq6D6vni0.mft (raw, json)
Hash identifier: jGVtUbzmYrnt+On36BQHYQxemXMHbYPGos6N0grlavI=
Subject key identifier: B8:27:45:FB:D0:6A:71:FE:70:D8:EE:EB:FB:DC:93:ED:BB:7F:2B:AC
Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
Certificate issuer: /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
Manifest number: 0132
Signing time: Sat 29 Mar 2025 03:56:37 +0000
Manifest this update: Sat 29 Mar 2025 03:56:37 +0000
Manifest next update: Sat 05 Apr 2025 03:56:37 +0000
Files and hashes: 1: A0iYvB-xsaJGF6zZvIMq6D6vni0.crl (hash: A4sfuwqzkIesjvxtyWHWJkdDE2aBjgM+Fa8aqJ0/QwM=)
2: A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (hash: 8KhdFf717KdtqIgoQSLRSc05ReV0MsZo2CeN3+2la54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D727
Validity
Not Before: Mar 29 03:56:37 2025 GMT
Not After : Apr 5 03:56:37 2025 GMT
Subject: CN=67e76f75-2222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:5f:c4:a0:84:25:a8:9e:a6:b0:61:01:3b:
51:c3:9c:da:e2:5c:ba:d0:bf:fc:01:66:19:cd:d0:
35:1b:89:99:c6:cb:58:63:5c:5a:07:74:d2:51:ef:
53:74:92:7e:38:cc:9d:d2:dd:4b:4e:63:ec:aa:79:
a8:3e:26:62:c4:94:6d:f1:0b:7a:be:c6:87:75:64:
c6:e1:29:b4:57:5c:34:ed:48:51:c3:8e:9a:57:4b:
67:61:50:ee:70:7a:14:8a:0a:2a:e6:e6:c1:b3:eb:
db:25:65:75:74:94:0a:f9:2a:52:a8:20:a4:1d:c3:
f6:f3:2f:f7:9e:be:59:71:00:ff:20:5f:80:bf:c3:
90:f4:54:56:82:0e:4c:43:fe:25:f0:de:d8:79:a5:
59:b6:12:6b:b7:29:21:83:00:b7:94:8d:73:a1:38:
40:69:f0:5e:da:0f:df:f5:8c:54:fd:18:aa:ec:41:
b1:2b:72:fa:44:e6:99:f2:26:ce:c3:5f:6e:5a:01:
7d:51:12:26:8c:17:9c:96:92:d9:d3:e7:29:d8:27:
94:80:ad:a9:cd:e1:83:29:0f:df:3c:d6:b2:8e:14:
e0:e0:55:60:cf:0b:36:b6:48:3d:5b:a9:95:3e:cb:
25:86:6e:4f:d1:42:cf:9c:5e:e1:8b:f3:82:f9:1c:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:27:45:FB:D0:6A:71:FE:70:D8:EE:EB:FB:DC:93:ED:BB:7F:2B:AC
X509v3 Authority Key Identifier:
keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:64:c4:d9:06:3c:a4:62:30:59:74:37:f9:79:3d:39:63:16:
d7:98:38:55:b9:fa:b6:e7:eb:42:34:78:15:31:1c:26:ee:e3:
a6:d3:3f:b4:b7:1b:d3:56:a3:dd:30:dc:f8:60:59:5e:c2:5d:
e9:6c:1e:ac:7c:66:56:fc:25:88:6e:57:ea:57:e7:66:57:05:
3e:31:be:0f:19:0a:16:d2:63:e9:59:e1:94:2c:9d:ab:8b:15:
81:32:34:b8:f6:c8:4a:92:4f:6e:b0:87:43:62:01:ab:ce:94:
8c:bd:dd:f0:a4:2d:fb:34:75:9d:a1:9b:af:61:ba:fd:f5:80:
fa:18:d4:87:65:7d:ed:92:80:a3:3f:a6:3e:14:13:13:39:0e:
e0:99:24:6d:63:d9:93:ee:6f:68:04:1c:9c:b2:b6:43:ae:7a:
ed:5c:79:35:64:31:61:d1:0f:0a:f3:7f:64:fc:d6:3b:8a:1a:
23:db:2b:3a:15:fd:20:9e:13:35:d2:8e:32:4c:1a:6c:4e:0b:
c2:b9:b1:73:f7:46:29:00:54:a2:5c:db:9e:8b:ef:7c:3f:b1:
03:ef:0a:19:d0:db:6a:22:23:47:7c:c3:e8:79:07:06:bc:d0:
af:cc:92:1f:32:00:d4:cd:ef:4e:8e:59:f9:33:87:4f:b5:14:
4b:3d:b7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:51:03 2025 by rpki-client