Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
File: os0QpH7XI-HEi19Q1oDPT2f8sdM.mft (raw, json)
Hash identifier: 8YBSfn+pZk+5bwDo0KGHKWTH73M2KsrD3ZsyJZBD+4U=
Subject key identifier: E5:81:13:9B:E9:C6:2C:CC:FC:8E:25:A8:80:8A:AC:3B:DB:C2:19:37
Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
Certificate issuer: /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
Manifest number: 0122
Signing time: Sat 29 Mar 2025 04:09:14 +0000
Manifest this update: Sat 29 Mar 2025 04:09:14 +0000
Manifest next update: Sat 05 Apr 2025 04:09:14 +0000
Files and hashes: 1: os0QpH7XI-HEi19Q1oDPT2f8sdM.crl (hash: tH3/Un3Z6WXmp9Uib8Qixk+uNYCZ2/tAU9rIE/0OEt4=)
2: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (hash: S579X7Eg58aEG3SPKUs0UURwjN76vzCVTAQS2DSPcNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D
Validity
Not Before: Mar 29 04:09:14 2025 GMT
Not After : Apr 5 04:09:14 2025 GMT
Subject: CN=67e7726a-ecd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:16:17:f0:98:88:dd:70:71:b1:01:73:5e:
48:44:53:58:41:29:69:bb:4f:fe:b0:51:68:06:4d:
f5:7a:d2:6a:2b:81:15:f7:a2:a1:f4:84:83:de:42:
99:8e:c4:da:4f:97:49:bd:a3:a0:7c:a0:4e:bf:75:
f3:b2:98:44:6f:2e:3b:ca:da:0b:c6:2e:19:32:40:
61:49:f6:fe:f9:5f:41:4f:25:ed:4d:5c:38:48:2d:
41:22:fa:c4:fd:3f:8d:ed:38:fa:b7:6a:68:a9:55:
56:fb:27:27:5f:3e:53:69:0e:b2:ba:23:10:2a:f8:
30:3a:b1:bb:dd:f0:21:83:e1:e5:6f:e8:27:88:90:
b7:14:48:c1:23:06:ec:36:a7:4a:f9:8f:ff:02:c1:
fd:2d:34:7e:79:9b:90:e4:e6:75:09:dd:ef:25:97:
0e:da:9d:b6:ba:51:da:d8:6b:f6:63:6b:f5:11:be:
ca:fc:e4:e7:55:e8:91:77:73:b0:32:68:78:b6:f2:
cd:1e:14:eb:63:a3:42:23:32:b5:08:32:80:d2:8d:
21:62:6f:52:5b:6a:42:c9:c7:34:04:e3:e3:73:bc:
82:c8:74:1b:1e:aa:35:34:6b:99:ef:5f:1d:50:43:
af:dd:8d:30:39:16:7b:61:33:d5:33:72:90:19:e6:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:81:13:9B:E9:C6:2C:CC:FC:8E:25:A8:80:8A:AC:3B:DB:C2:19:37
X509v3 Authority Key Identifier:
keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7c:6e:ec:cf:3c:dd:73:68:20:fd:8d:f0:8b:e0:9f:d1:8b:
18:8f:0c:68:6b:59:84:3d:30:a1:4d:d0:9c:0c:81:02:ce:e6:
fc:b2:05:ad:c5:aa:fa:1e:4f:26:c9:6a:a1:95:a8:8e:c2:91:
fe:7b:ed:aa:1d:27:b1:d0:0d:69:02:ba:e6:de:00:d5:c8:55:
f9:71:ae:a8:50:7b:74:dd:c7:59:a0:de:7e:b8:f1:1b:d2:94:
3e:df:69:8d:a5:6a:88:1e:30:7f:f5:c9:16:d3:11:d6:e7:77:
30:39:21:85:92:b9:6d:0c:23:be:94:a1:20:75:4c:e3:3a:5f:
3b:ca:f4:c3:24:10:87:23:1d:cb:f7:80:8f:77:b5:a4:06:f8:
ba:ff:06:01:fc:76:07:f3:d9:a9:00:bd:63:44:9d:1a:0e:ae:
c3:9a:49:72:64:f2:65:be:59:b8:e5:5d:6c:e5:78:1b:3c:ce:
de:cc:ad:e6:43:5a:c6:2a:b3:cf:4b:7e:71:fd:8a:d3:12:15:
32:c3:9a:b3:47:f6:b9:18:4d:47:5c:a9:8a:30:90:32:f1:27:
a5:76:d6:d6:fd:40:b1:69:35:7c:82:24:48:a1:7f:93:3d:fb:
67:6e:c1:24:1b:f3:22:67:62:7d:51:d7:3e:90:4f:5b:4f:8d:
ed:ca:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:36:58 2025 by rpki-client