Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File: 05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier: OLvV9wx1edPMXZY/1Q31Mq6Q4Of5hqcCgzlIQWTVPWY=
Subject key identifier: 2B:B3:79:DB:25:D3:E2:DE:FF:D6:2A:F9:DD:BC:F1:29:6A:70:5F:3F
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer: /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number: 75
Signing time: Sat 29 Mar 2025 06:07:10 +0000
Manifest this update: Sat 29 Mar 2025 06:07:10 +0000
Manifest next update: Sat 05 Apr 2025 06:07:10 +0000
Files and hashes: 1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: bOmRk4XuUNwEqZ640AbIsn32uZkkQ2yBrXeakix/XFE=)
2: E1EF913A5DF011EFAC9CA43BC4F9AE02.roa (hash: HnEUHlw9gil+mYxp63GxFhUGPoOAuwCoKZnzCLBninA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBC
Validity
Not Before: Mar 29 06:07:10 2025 GMT
Not After : Apr 5 06:07:10 2025 GMT
Subject: CN=67e78e0e-a492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:36:0f:69:61:c0:c7:4c:99:ac:63:64:b2:
d7:6b:ea:2e:d9:46:6e:3c:2b:d1:9b:34:05:f0:7c:
d5:ec:3d:69:a0:69:b1:11:22:95:76:51:3b:28:1a:
14:76:a5:33:12:e6:01:2f:d6:e5:df:bb:d3:5c:13:
73:d5:36:e5:4d:6f:b3:cb:0c:40:b0:60:5a:f8:82:
eb:39:f9:39:63:a0:84:f3:9d:99:d0:90:6c:a7:6a:
fc:29:f5:f5:22:c3:05:aa:67:20:18:4b:8e:da:e5:
10:24:e7:fc:f1:04:2f:a4:1d:1b:38:6e:b8:bb:e1:
63:21:af:df:7c:4b:4c:1a:6e:f7:d2:97:a5:2f:6e:
b0:cb:ce:91:e1:65:0b:a8:fe:a7:3f:b3:58:56:46:
35:b1:d5:16:ed:96:67:3a:b5:6d:d3:45:a1:2f:19:
74:32:68:9c:98:12:07:51:39:d9:55:ea:eb:4b:ec:
8a:a0:f2:59:d4:d4:d1:b2:fe:91:36:e1:d1:23:2b:
2a:06:f9:c3:e4:2a:ae:bf:44:30:d4:67:74:d7:03:
ad:61:94:d8:e6:32:e4:b3:fd:df:f6:87:e7:35:c0:
0a:10:8d:58:48:65:b4:4f:85:33:59:d2:f3:d4:b8:
de:50:f4:b2:71:0b:f3:dc:bc:80:8f:90:8d:d5:3b:
6a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B3:79:DB:25:D3:E2:DE:FF:D6:2A:F9:DD:BC:F1:29:6A:70:5F:3F
X509v3 Authority Key Identifier:
keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:35:76:c0:e1:0d:15:3d:28:bb:7a:9e:b2:09:0e:46:ec:6e:
77:0e:8a:00:92:ad:c3:ee:f9:a6:3f:ce:d7:06:55:05:03:90:
04:dc:f3:f1:09:50:85:c6:aa:a1:25:23:97:bd:d8:8f:30:5c:
dc:4a:9c:95:cd:33:c2:e0:c5:3f:ad:07:19:8b:4f:17:9d:4d:
44:39:d5:f4:be:dd:98:80:0d:91:b1:60:09:89:45:71:f0:ec:
1e:e0:21:4b:69:48:b9:19:dc:64:27:70:ca:38:46:0d:f8:75:
e5:47:be:ba:50:1a:68:03:89:d2:24:68:02:cf:fd:82:11:d2:
5a:5f:bb:25:74:08:cf:05:52:62:a0:6b:48:5b:e0:23:e1:83:
52:f0:05:aa:5b:6f:90:3d:ab:a3:a0:80:91:5e:80:9a:b4:5f:
96:22:57:5b:9f:c8:f2:a1:09:f0:4b:0c:c0:b8:5a:d8:5c:23:
fd:08:5f:e8:3a:33:29:e0:11:b2:03:a6:7e:af:87:53:f4:f0:
e1:e6:ff:d3:0d:56:56:64:75:71:df:93:1c:3b:b9:6a:4f:b8:
0e:7e:1c:c6:fa:2a:a7:b2:85:74:43:d8:56:78:7e:49:79:e7:
e7:db:56:87:e2:59:14:57:3e:12:a0:0a:af:50:d5:a0:d0:2d:
c0:8c:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:37 2025 by rpki-client