Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json)
Hash identifier: bJD1Ks7slTPWs8R/Lg/vW500kkLKx9nBZU13qnQAG3o=
Subject key identifier: 39:E6:B1:92:DA:C3:E6:B5:0B:49:E0:07:63:F4:33:24:7F:31:2A:DD
Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Certificate serial: 02B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
Manifest number: 02AF
Signing time: Sat 29 Mar 2025 01:43:10 +0000
Manifest this update: Sat 29 Mar 2025 01:43:10 +0000
Manifest next update: Sat 05 Apr 2025 01:43:09 +0000
Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: 9e1LCUYTP2RQGzXzwPmaG0hXOCFBB0SfeoTL5XtRboE=)
2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: PUc54q2WTiia3AT9HsSdWhbagSjmonMUemo/1oF5Qio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E77
Validity
Not Before: Mar 29 01:43:10 2025 GMT
Not After : Apr 5 01:43:09 2025 GMT
Subject: CN=67e7502e-ea80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:07:b1:29:7d:1c:69:56:8d:fa:6c:df:2e:
6a:d4:ef:b0:14:2e:7e:20:71:9e:28:8e:3c:d4:ed:
d3:15:04:eb:c4:fb:c5:7d:f0:5f:e9:5b:df:ad:b3:
6a:68:8b:e5:16:28:e8:f0:35:a7:f0:02:2b:0b:5d:
93:4e:cf:89:ca:f5:d3:6d:5d:fe:5d:8f:7b:77:f9:
02:fe:0c:e8:2e:a4:8f:97:27:cf:87:73:db:c5:6a:
65:64:1d:32:37:62:78:8e:9f:9c:ae:a9:3e:94:bc:
76:6d:39:39:8d:75:11:5f:24:78:db:b1:f3:b3:e2:
56:93:0b:a5:ad:f1:59:a7:3a:6d:24:bc:1a:39:14:
51:da:45:e3:85:07:fc:54:fe:f8:6d:e7:db:06:bb:
c5:a8:df:ec:b2:11:d1:6e:33:5e:07:31:a1:5c:0d:
8d:0c:1b:c6:c6:c6:ea:01:8e:bb:3e:6b:4a:16:a4:
a1:1b:65:f0:1a:31:80:7b:34:6f:f2:cd:91:31:26:
ec:ce:f2:7f:98:4c:ac:13:eb:43:c7:a9:29:6e:02:
29:00:55:8c:b0:6d:a5:b8:32:c6:8e:8c:e7:0f:70:
53:11:88:da:16:01:b7:13:6e:b2:fc:a5:a8:44:87:
6a:46:06:3c:b2:37:aa:4f:b8:81:34:93:e5:6a:c6:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E6:B1:92:DA:C3:E6:B5:0B:49:E0:07:63:F4:33:24:7F:31:2A:DD
X509v3 Authority Key Identifier:
keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:a0:18:3d:e8:d0:80:d5:85:4d:98:28:67:cb:bd:d3:73:90:
53:30:8c:96:5c:ce:40:20:4e:64:c5:99:79:9e:d0:a4:17:8c:
04:d2:81:d3:87:90:46:51:90:ac:af:35:d7:9a:07:9a:ae:67:
0d:28:76:1f:dd:6f:7c:a5:b7:30:6a:33:93:d7:84:91:d8:42:
3b:03:3e:a1:a5:d0:bc:13:02:1b:f7:d3:a7:7e:c0:48:f5:3a:
25:9c:e8:17:c4:85:de:a8:8e:b8:5e:6d:84:18:25:dd:be:4d:
3a:b5:9a:87:04:6e:bb:1c:84:10:a7:74:16:98:7a:79:de:21:
94:88:36:e3:ce:44:d1:40:ca:dd:95:ff:6b:61:8b:74:0c:15:
4f:5f:12:1b:0e:36:f4:5e:c6:a2:40:fa:49:cc:bd:e4:e4:be:
d3:c3:61:0b:ab:a1:dc:0e:7a:8d:9e:63:e8:c7:49:e2:dc:fc:
bd:2a:42:21:34:2e:de:2c:46:76:d2:ce:63:72:5d:35:c5:bf:
68:de:1a:a7:e6:22:74:7c:30:72:20:94:04:65:33:cc:75:7f:
92:b7:83:92:14:8e:a7:8f:91:1f:bb:21:47:a9:40:62:f7:ea:
2c:3a:8e:92:ca:1e:43:86:2b:02:6f:56:43:86:0d:83:64:3e:
00:fb:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:35:50 2025 by rpki-client