Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
File: t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft (raw, json)
Hash identifier: +PgBoH1jjZ8zKfxE24oVUGgwSirRn/1ZxDoV7aTWSiE=
Subject key identifier: FE:19:20:29:34:EE:FA:CE:90:B1:41:CA:FB:FB:40:E3:7D:21:C6:A3
Authority key identifier: B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43
Certificate issuer: /CN=A9191EE7/serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43
Certificate serial: 0679
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
Manifest number: 0672
Signing time: Fri 28 Mar 2025 22:35:49 +0000
Manifest this update: Fri 28 Mar 2025 22:35:48 +0000
Manifest next update: Fri 04 Apr 2025 22:35:48 +0000
Files and hashes: 1: t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl (hash: kacD+Ew/YBoVgt4e1iG3WkJ0fN6gHM8YGJH4wt9St0M=)
2: BF289EBC6F7911EBA5D39C85C4F9AE02.roa (hash: AaF3FcFShOiafDSRHmqVYnDEeJGLyPeUuLGsOLhjuVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191EE7
Validity
Not Before: Mar 28 22:35:48 2025 GMT
Not After : Apr 4 22:35:48 2025 GMT
Subject: CN=67e72445-efef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:01:97:a1:48:7a:71:cc:e2:c6:57:6d:12:
1d:15:e4:ed:84:99:ce:76:91:04:fc:d4:72:0d:ec:
34:37:16:c6:36:27:d3:c9:21:d7:9b:4f:9c:00:fe:
d0:c9:1a:82:bc:0c:25:2e:15:a0:7e:ee:71:ec:f6:
60:db:ad:76:3b:aa:5f:d4:20:d6:67:50:03:6e:cc:
4e:33:d8:26:3c:42:35:87:18:e5:77:a5:93:fc:e1:
31:61:78:3e:7b:d7:6a:87:b6:29:7e:5f:01:41:8b:
37:b5:e1:8b:71:d1:c1:40:c9:87:16:6f:37:58:d8:
2a:44:f5:ec:77:39:f3:f6:a9:59:18:35:90:29:da:
5c:e9:c1:8b:87:e6:5e:46:fe:08:af:e4:b0:a4:2d:
96:7f:81:e2:70:d3:a8:b6:c9:b6:19:19:bf:14:11:
29:83:43:fd:9f:f5:96:c6:23:e4:9d:19:96:c5:d8:
8b:68:3e:33:be:5a:75:84:62:8c:90:01:bf:52:f8:
34:ba:2e:37:e2:42:f7:0a:92:e7:54:a4:24:04:55:
e8:e6:12:0d:93:75:6f:e3:f6:63:2d:3b:ec:50:87:
fc:2a:44:c6:db:70:54:e5:58:75:1b:1e:c7:93:ea:
8a:ab:ad:80:3b:01:bd:6c:2c:82:09:5c:9d:2b:08:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:19:20:29:34:EE:FA:CE:90:B1:41:CA:FB:FB:40:E3:7D:21:C6:A3
X509v3 Authority Key Identifier:
keyid:B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:03:bb:c2:1f:be:86:80:27:52:d2:10:43:68:bc:8c:97:6f:
ab:8b:c4:88:66:96:85:06:86:91:e6:8a:fc:43:5a:6b:47:a8:
8f:cd:59:43:94:18:0c:68:f0:60:71:2e:37:3b:41:2c:92:5b:
de:68:c2:e9:b2:d5:a9:7e:f1:d3:83:30:b1:a9:2e:25:46:cc:
9f:ab:52:e0:a4:93:68:97:bd:59:a3:ce:bc:9f:80:08:07:c7:
d0:f5:0e:06:81:20:38:88:7d:36:71:d6:cf:db:ce:9b:d2:a0:
e8:75:16:28:d1:48:fb:13:7b:2b:19:2d:a6:dd:3f:40:63:79:
f0:72:71:4e:a5:eb:18:14:94:a3:f1:82:6d:2d:48:64:f9:4d:
56:53:8b:19:a6:aa:a3:ea:ee:82:fe:7b:cb:be:46:07:d7:b8:
7b:49:ac:ce:12:13:40:03:7c:78:e0:70:99:54:5f:7e:f0:94:
e5:90:72:0d:7f:db:61:8b:e3:82:16:72:7a:d4:0e:84:03:a5:
c6:5c:16:84:c2:a2:0a:4d:34:d5:d5:00:f7:ad:d3:b3:ad:95:
cd:75:a3:9b:8f:e6:28:0c:a0:20:07:70:49:0c:37:e4:de:f3:
5c:ca:ec:a2:1b:1e:24:e2:ca:dc:f0:65:f8:e7:12:1c:7d:ee:
c9:73:8d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:40:13 2025 by rpki-client