Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft
File: Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft (raw, json)
Hash identifier: vVgA5DTB1qhldrxFHQtcSrvt5FnrI+HuZ1dNULGshTI=
Subject key identifier: 64:60:6A:E4:F9:FF:BD:57:E5:0A:D1:30:A4:AD:98:0E:81:AA:78:43
Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40
Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40
Certificate serial: 0BAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft
Manifest number: 0BA5
Signing time: Fri 28 Mar 2025 19:06:52 +0000
Manifest this update: Fri 28 Mar 2025 19:06:52 +0000
Manifest next update: Fri 04 Apr 2025 19:06:52 +0000
Files and hashes: 1: Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl (hash: nIwQCIFh0PH9E4wP2s+puXDMqf23ggOC9qzUQNCkT64=)
2: EE985C561CEA11EA8B382C0BC4F9AE02.roa (hash: Tj2VTOrTG521eWfpmsriO03fMas744CeHkfVcMr3bEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2987 (0xbab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D20
Validity
Not Before: Mar 28 19:06:52 2025 GMT
Not After : Apr 4 19:06:52 2025 GMT
Subject: CN=67e6f34c-d5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:14:3a:ee:86:d6:15:11:8b:6f:93:ce:ed:
c3:7b:bd:90:cf:f0:d3:dd:22:c1:89:3d:5a:e7:ea:
7d:34:8a:70:3c:d4:59:2f:e4:80:65:19:1a:15:aa:
d2:d6:5e:54:8d:c0:95:15:e4:f2:d9:d5:23:e4:6d:
3d:5d:0c:ae:3c:9d:b7:41:58:bc:b7:fb:9a:24:27:
85:4b:72:a6:f2:2f:b1:ca:af:1e:8f:ac:d1:e8:f8:
3c:d8:29:a9:88:85:24:c6:8f:e8:0a:63:88:32:96:
a6:37:10:b7:2c:a8:ae:6a:98:82:87:e0:c7:db:3f:
fd:b3:8a:4d:3d:fb:1c:62:05:8f:8b:2a:ff:7c:43:
91:d0:4d:b7:3b:cc:66:b2:1b:b9:ec:81:fb:9b:2a:
e6:3a:18:2b:66:b3:74:39:0a:75:73:28:1f:bb:b8:
39:65:d2:c3:5b:f9:1d:87:2c:db:ec:8d:ba:84:55:
92:15:79:8e:8f:f3:dd:f4:cf:26:b0:8c:0c:c8:76:
ef:99:56:f8:01:df:4b:f8:13:07:f8:82:4c:ab:6a:
86:52:ea:67:93:4b:99:98:58:12:82:e6:ef:e4:05:
4f:d4:da:f3:9f:35:6e:67:47:74:da:35:5c:4e:09:
e9:1d:03:8c:ab:a5:8e:01:ef:17:aa:de:e5:0e:15:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:6A:E4:F9:FF:BD:57:E5:0A:D1:30:A4:AD:98:0E:81:AA:78:43
X509v3 Authority Key Identifier:
keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3e:f4:93:03:c9:0a:ed:c3:15:00:8d:87:63:37:88:ec:f4:
7a:19:07:06:c4:89:ab:dc:29:b1:b4:89:08:a4:bf:c5:74:a8:
ff:eb:3a:6c:6c:09:fe:3e:50:1d:95:d3:45:52:f4:d2:24:fc:
59:f8:a6:3c:8a:64:bc:d2:c2:59:ac:6c:04:f3:b1:c3:30:c0:
2b:4c:47:fb:1e:3c:51:76:78:7d:8f:e0:d9:7c:2d:dd:3a:08:
10:60:6a:1e:39:d1:07:10:b6:b5:58:7b:1e:96:fc:3e:9c:d2:
cf:60:fe:64:19:41:f2:10:48:1f:b4:1f:c9:d2:72:9d:f8:1c:
86:d0:e4:d9:4c:9c:5b:d1:2f:29:a9:ff:ae:e2:bb:99:38:61:
66:8a:f3:d2:b9:a5:fe:4d:e2:71:a8:91:a0:b1:9f:ae:7d:df:
de:2d:ea:5a:1c:d0:7c:38:c8:53:ba:6e:8f:66:f2:17:c0:18:
d4:0b:83:46:15:7b:af:6d:22:4e:76:5e:a2:d9:92:90:e8:2e:
ad:31:db:55:3f:43:c4:50:2d:6a:36:32:93:d9:89:be:ef:5c:
08:97:fb:9a:36:db:d7:ff:83:94:f4:f6:0f:9e:6a:50:a8:8f:
e1:67:6b:62:8f:03:3a:ce:4f:22:eb:71:d7:ee:f1:fb:ed:2e:
be:3b:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:08:39 2025 by rpki-client