Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
File: JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json)
Hash identifier: HmPItOqURztNsfbmw/Aomf8vkCroqV520bf3rfFiv3k=
Subject key identifier: 75:C7:AE:4E:CC:8E:10:42:48:42:30:2D:1B:50:F2:E2:2F:96:A7:00
Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98
Certificate serial: 0683
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
Manifest number: 066B
Signing time: Fri 28 Mar 2025 22:41:39 +0000
Manifest this update: Fri 28 Mar 2025 22:41:38 +0000
Manifest next update: Fri 04 Apr 2025 22:41:38 +0000
Files and hashes: 1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: Ra7NJl1BEmebtBoIpfFtlfT+vfHTN3rO3vGGRv5XoBg=)
2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: qqj7UCGnWQlkIFv4nnOfekkdwebohncfHRfjEEZBUBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1667 (0x683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197227
Validity
Not Before: Mar 28 22:41:38 2025 GMT
Not After : Apr 4 22:41:38 2025 GMT
Subject: CN=67e725a3-94c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:10:9d:4c:22:a4:05:86:17:5b:3d:91:ca:
27:f2:aa:89:f1:fb:f7:25:26:7f:a9:a0:b7:f4:e7:
99:23:02:49:ab:7d:f6:98:6d:b1:76:cf:23:77:fa:
51:4d:7c:ed:0f:2d:b9:3f:05:f9:c8:89:15:9d:6f:
df:4f:9d:73:9e:bf:5b:9b:f2:57:ee:0a:8f:93:6c:
99:17:af:96:96:a3:3d:3f:9f:a1:3a:e7:6a:4e:bc:
e5:d2:0b:a8:3e:d5:b5:4c:71:d8:60:1c:c3:32:0f:
7f:55:b1:94:49:ad:be:c0:df:b6:c3:b3:c2:e5:ef:
8e:92:6d:8d:a3:db:08:a9:37:3d:f1:bf:ff:05:94:
d6:b0:aa:1e:43:15:bc:da:84:51:b1:d1:17:af:3d:
c5:52:07:08:cc:6c:04:b0:84:bf:cc:b5:9d:e0:20:
6c:bc:3d:cd:58:f7:80:5f:98:ce:7d:1f:8e:a7:20:
93:a1:9d:0f:2d:4a:7d:c1:1f:26:b8:4b:7b:53:b7:
38:2e:b1:fc:cb:5d:0c:48:88:f8:2c:6c:26:f6:f4:
6d:a1:25:ee:e2:4a:a8:66:3a:a6:af:b6:88:64:dd:
26:ef:79:3f:f2:4f:3d:a7:0b:cd:dc:a8:39:0b:c0:
37:dc:ba:f3:da:9c:40:2d:61:08:c0:e8:0a:3f:2b:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C7:AE:4E:CC:8E:10:42:48:42:30:2D:1B:50:F2:E2:2F:96:A7:00
X509v3 Authority Key Identifier:
keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:df:54:c6:a6:06:0e:fd:87:7f:5a:88:10:aa:55:37:0a:f2:
7b:f6:9d:af:c9:4c:6a:f2:93:15:28:3e:54:2c:27:85:b7:7f:
cb:82:1d:1a:c2:be:2b:5a:4d:2c:7b:56:c3:7c:5e:3a:e1:68:
08:a1:15:50:22:72:77:2e:e1:58:8b:bb:15:e1:f8:e7:41:e0:
56:07:3d:91:35:b8:44:18:9f:27:b7:6f:a9:de:0a:48:5e:f3:
5d:ea:ec:df:e4:61:ef:7e:06:dd:be:6a:5f:42:27:43:9c:b7:
84:f2:81:e9:1c:87:54:44:45:09:1e:e9:d6:ae:ea:60:44:92:
b1:a6:96:ca:39:74:cf:73:e4:5b:bc:f0:43:c1:3e:a8:d1:7c:
72:ac:b8:eb:89:dd:c9:99:6f:a7:5d:74:ab:2f:30:2b:62:23:
ca:32:9f:1b:58:00:5d:ea:24:c3:4a:21:ff:97:7f:6c:6d:5c:
f1:13:0e:7c:28:39:77:71:17:38:e3:6e:f8:ac:b2:1d:79:68:
4c:bb:aa:dc:79:a4:ad:b8:98:c7:01:3e:4f:e5:68:a8:f9:4e:
46:9a:dd:8b:dc:83:e7:d1:4b:fc:9f:a0:f9:e1:21:16:45:d6:
b8:ca:d3:dc:85:89:d8:da:3f:75:65:96:54:85:ed:bc:1d:3a:
b9:9e:e5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:03:32 2025 by rpki-client