Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
File: rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft (raw, json)
Hash identifier: nGjUSh2yWN/X0mCOS57m6A1SULNhbTBRtmvKKJAbfoQ=
Subject key identifier: C1:70:D5:E4:5A:54:FC:BD:C5:B0:ED:1F:E3:A6:81:92:8B:1F:C9:21
Authority key identifier: AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02
Certificate issuer: /CN=A9190057/serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
Manifest number: 0160
Signing time: Sat 29 Mar 2025 03:30:28 +0000
Manifest this update: Sat 29 Mar 2025 03:30:27 +0000
Manifest next update: Sat 05 Apr 2025 03:30:27 +0000
Files and hashes: 1: rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl (hash: etMy3YCB5Ia62fVsLoDdjvY0u29pZOhFAIXX5RZ9nXY=)
2: 1EE23948F8F411ED96463014C4F9AE02.roa (hash: P12MNrI/Sv3x/5WhhR/xkFqPpUABisLPf88NE6poKHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190057
Validity
Not Before: Mar 29 03:30:27 2025 GMT
Not After : Apr 5 03:30:27 2025 GMT
Subject: CN=67e76953-a1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:12:73:e0:34:16:49:33:ba:69:74:ee:9e:
af:44:74:9b:18:f8:05:e6:bc:5c:8a:f6:f9:92:29:
d2:26:97:7a:b8:1a:7f:ef:9b:d3:bd:30:30:67:33:
00:dc:e4:15:ad:3f:68:91:fc:da:f6:12:dd:c9:35:
70:39:9b:9e:30:11:c8:b8:21:ed:14:7e:42:88:cb:
08:48:e2:f8:39:c5:c8:54:ee:99:eb:c4:3f:c5:97:
43:4a:d4:3a:33:89:a1:07:0b:64:63:94:67:f5:ad:
22:26:f3:81:e9:78:4d:8f:1b:50:41:47:63:f2:75:
22:57:88:4b:61:55:26:14:3f:c4:2d:3a:83:1f:54:
e6:25:c8:3f:b4:c5:9c:58:6e:c7:76:9f:7c:55:69:
ea:89:ff:ef:14:25:a5:7e:72:bc:f9:48:f0:36:e7:
e1:a9:c3:23:ed:7e:b1:aa:87:26:ec:d4:bd:12:8f:
94:a0:13:c6:f3:32:1a:77:ef:9f:fb:70:2c:04:51:
ec:75:cf:15:a7:89:14:b7:0e:03:85:a6:d2:33:ae:
e0:7f:3d:aa:38:16:f6:d0:dd:a0:13:4b:c1:47:17:
b4:9f:26:42:af:06:a0:4b:7a:7c:c6:43:a5:a2:5c:
6a:cb:fe:8a:b6:50:41:f0:49:11:d8:9f:36:2a:29:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:70:D5:E4:5A:54:FC:BD:C5:B0:ED:1F:E3:A6:81:92:8B:1F:C9:21
X509v3 Authority Key Identifier:
keyid:AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:03:fd:ff:88:42:74:cd:5a:9f:9b:1b:0c:66:03:5b:ad:c7:
8c:09:c4:12:92:af:65:01:16:05:7c:ed:c0:73:4d:89:92:bd:
bc:98:51:27:e2:b1:30:6d:7c:39:12:87:d2:0f:cb:06:26:d4:
63:1f:01:54:18:88:38:72:08:81:11:3d:22:a4:cd:a3:cd:61:
18:3b:17:8b:50:de:81:73:48:24:42:0e:b6:12:1f:63:86:b8:
61:85:93:37:72:a2:bd:14:5d:8a:7f:25:10:b4:78:cd:84:a1:
f9:f6:18:32:23:8c:34:36:87:52:e2:e2:e1:a0:1e:07:70:8e:
d2:78:60:2d:ea:20:f9:de:ed:6b:eb:46:c8:1d:fe:99:cf:d3:
76:32:99:a3:7d:6b:ca:84:51:29:5a:38:57:36:57:08:8c:d0:
61:f6:c6:63:ec:16:14:cb:f1:5f:f2:47:32:57:dc:b5:8d:d8:
80:ab:1d:78:6c:81:84:8b:01:13:f1:2a:ef:7f:ad:cd:80:62:
a6:e7:2f:40:75:c4:1f:54:49:5e:a4:b7:b0:d3:ad:65:50:92:
26:e7:49:74:74:a2:f1:80:1f:0f:61:f4:2a:b7:25:97:71:45:
22:af:c0:d6:9c:ff:53:68:76:a2:cc:3f:e2:90:76:eb:12:1c:
89:2a:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:22:59 2025 by rpki-client