Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft
File: oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft (raw, json)
Hash identifier: mTmz2Z30IAgdgFm7J7POki3RcSGScQhaJoupEeN+v60=
Subject key identifier: 7D:7F:50:FD:FC:F8:CF:82:CE:99:1B:70:AE:B1:33:2E:30:4F:A9:E1
Authority key identifier: A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0
Certificate issuer: /CN=A9194040/serialNumber=A07CD3D1021A58C240A12137400B97B18B7998D0
Certificate serial: 036B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft
Manifest number: 0367
Signing time: Sat 29 Mar 2025 01:12:26 +0000
Manifest this update: Sat 29 Mar 2025 01:12:25 +0000
Manifest next update: Sat 05 Apr 2025 01:12:25 +0000
Files and hashes: 1: oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl (hash: ha018YDnMwnO86RYlrOsLRWQnrZQ7dVUVqJvImbrt/0=)
2: D1E294C2A34411EC803D2585C4F9AE02.roa (hash: 9gufT/8L47ewBvsedXGTY9SOVItSQOfXiC+UqlsipuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875 (0x36b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194040
Validity
Not Before: Mar 29 01:12:25 2025 GMT
Not After : Apr 5 01:12:25 2025 GMT
Subject: CN=67e748fa-b4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:fa:e0:eb:66:25:4a:8a:72:db:54:1d:5d:
c8:4a:ee:31:31:7b:38:6d:3b:e9:f6:d1:39:2c:99:
ad:07:fc:8a:36:0b:aa:42:1b:bf:d6:a6:1f:22:68:
f9:14:3c:72:36:d6:e3:c5:05:3c:f1:22:04:23:94:
8b:0a:0b:6e:09:02:73:58:e4:13:dd:10:1f:7a:19:
04:b0:88:d5:0f:8b:36:2f:d4:d7:a6:b4:b5:00:22:
2a:17:97:e8:93:aa:8f:55:1c:93:7d:9b:19:d9:81:
44:5b:ff:65:79:ee:67:83:2d:0b:e2:b4:aa:ca:cf:
30:e1:8d:1e:99:a7:e1:c3:eb:c8:7d:88:b9:70:78:
77:49:63:b7:18:0b:1b:51:f3:7b:3d:e3:22:5e:41:
e3:c8:00:99:f0:c8:56:5d:0e:a1:e3:cb:6f:52:94:
62:d8:38:62:43:e4:0a:8c:5c:1c:4b:b7:24:c3:ce:
f0:fc:5b:61:f6:83:5d:9c:2a:e8:44:bb:7b:84:a4:
0f:f9:f0:e0:59:2d:9f:83:aa:29:7a:dc:4f:38:a7:
5c:0a:f4:4d:14:e7:d8:52:34:6d:ff:80:25:60:c2:
3e:9f:70:5a:8b:bd:99:14:54:7c:b6:c1:d5:55:e6:
ea:c8:18:49:dc:7b:94:4c:7e:81:83:54:77:c7:eb:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7F:50:FD:FC:F8:CF:82:CE:99:1B:70:AE:B1:33:2E:30:4F:A9:E1
X509v3 Authority Key Identifier:
keyid:A0:7C:D3:D1:02:1A:58:C2:40:A1:21:37:40:0B:97:B1:8B:79:98:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHzT0QIaWMJAoSE3QAuXsYt5mNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194040/9B04A0F2A34011ECB3FA047BC4F9AE02/oHzT0QIaWMJAoSE3QAuXsYt5mNA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6b:73:4a:9a:79:49:6b:41:1a:8b:0f:43:0b:71:83:10:8e:
25:36:42:52:99:03:52:d9:2a:2e:3a:4c:cd:0a:2a:61:0c:a0:
53:4e:0f:ea:e3:01:ff:4f:09:1d:d7:94:fb:86:4e:31:6c:2f:
15:1f:5f:44:65:0f:2e:37:62:0b:84:0f:05:b9:3b:25:15:cf:
76:1c:23:bf:8f:9e:13:51:19:f2:89:d3:d0:03:60:89:5b:33:
9f:7d:4b:2e:b2:16:4b:61:3a:20:3f:f2:4d:5a:4d:1f:96:31:
ef:15:db:4e:a6:2f:95:88:79:f6:4f:09:ce:84:e3:1e:5c:81:
a7:88:33:c3:9b:c0:5f:97:79:9b:0a:cb:67:fa:8d:d2:f4:ec:
6d:5b:42:c6:28:e9:5d:03:0b:fe:4f:a2:72:53:7e:7f:e5:f7:
e3:93:23:87:a2:d6:29:7a:4f:00:90:5a:d7:4c:c0:ae:76:74:
33:32:ec:6f:d3:fa:ad:75:a5:dd:70:03:6e:15:9b:28:bf:0a:
f5:db:4d:4d:84:8b:27:94:47:fb:7f:4f:1f:88:64:96:bb:6f:
4c:25:6f:fe:ef:c3:e8:4e:d6:2e:31:9b:6e:73:d2:8b:be:58:
9d:2d:f7:a7:f2:ad:47:21:ad:4c:ad:c1:2c:99:3c:e9:76:9e:
e2:fd:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:46:20 2025 by rpki-client