Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
File: MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json)
Hash identifier: pwN2WxW7TYcszR8Lpdck81KGMqsqBq5+vSeTRbjNsAk=
Subject key identifier: 99:90:14:66:61:C9:BB:44:56:B3:40:42:C0:C3:16:3F:D5:AB:2A:75
Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
Certificate issuer: /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Certificate serial: 047C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
Manifest number: 0477
Signing time: Sat 29 Mar 2025 00:21:02 +0000
Manifest this update: Sat 29 Mar 2025 00:21:01 +0000
Manifest next update: Sat 05 Apr 2025 00:21:01 +0000
Files and hashes: 1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: xsKB0RKdILV0SSkcBZJ3NaybOYywXh3BDyQIEtUXYNM=)
2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: xMR/YnguGQ65JG/6TJojLxvfAgA6ZYA0z3zusRzziKw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148 (0x47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199371
Validity
Not Before: Mar 29 00:21:01 2025 GMT
Not After : Apr 5 00:21:01 2025 GMT
Subject: CN=67e73cee-c21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:5f:71:6f:18:c8:33:34:1e:47:5a:19:33:
0b:99:94:ce:30:74:ed:93:b1:04:e2:6e:dc:38:8b:
f4:7c:40:78:b1:0f:7e:6b:10:11:34:25:92:db:0e:
38:1b:bc:ab:a9:34:db:e5:84:6a:4a:60:fb:d5:c4:
91:90:ce:87:11:8c:7a:5d:ee:9b:82:7c:0e:e8:9c:
a5:0d:39:81:16:1e:73:51:9a:e7:14:05:f9:7b:d1:
33:2c:c6:5c:81:18:81:83:3d:55:74:7f:b6:b2:46:
06:4a:9a:a4:51:3f:23:84:08:7c:ed:40:70:a5:c6:
ec:14:91:fc:a6:ad:14:fb:ba:41:db:40:0f:54:6b:
88:74:a8:47:65:fb:8f:9d:01:be:be:08:79:89:b9:
30:63:2e:b2:da:5d:d9:ec:bf:5d:76:95:42:b2:57:
a2:93:5e:30:5c:6e:8a:8d:d6:71:e3:59:06:0e:55:
6a:10:a1:5d:60:6e:4a:9e:8e:54:29:e6:17:14:08:
a5:50:e0:39:8d:8d:9c:f7:1b:a7:4e:2c:ee:07:9a:
8e:1d:d3:22:41:78:a4:6d:28:df:1d:83:17:4f:63:
77:f6:ef:8e:91:f8:92:66:6f:1b:90:2e:4c:9e:1d:
35:72:c0:ed:6c:cc:18:32:1d:de:07:e6:23:80:45:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:90:14:66:61:C9:BB:44:56:B3:40:42:C0:C3:16:3F:D5:AB:2A:75
X509v3 Authority Key Identifier:
keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:b3:96:58:87:00:f0:da:cc:6e:6e:c4:81:6d:84:5f:09:ea:
c6:14:d3:62:e3:65:e0:a1:17:0e:80:73:22:ce:26:6d:03:df:
3d:3f:2f:8c:6a:61:6e:46:eb:dd:d3:42:50:1c:a6:d0:0b:b9:
6b:2e:f8:67:dc:54:e7:63:35:30:12:08:87:cc:e1:e7:50:d7:
91:8a:09:aa:25:41:61:04:ff:b9:9b:44:98:42:fe:35:d5:fa:
d1:c8:c0:ff:a5:19:8b:dc:0b:ac:e5:41:31:08:f0:2b:c2:d8:
96:89:82:10:ad:a8:66:f0:b7:00:80:a6:b8:68:7c:d3:64:f6:
88:cc:1e:fb:cd:7a:3e:a3:f7:40:7e:74:35:37:54:bd:0a:48:
ed:03:36:b3:0a:87:75:16:b8:42:82:cf:df:8a:55:49:26:6f:
b9:43:8f:f2:ba:a0:17:3c:5a:4f:b0:e6:04:7c:bf:c8:e4:56:
b2:f9:38:4c:60:8b:fe:04:bd:95:4c:3f:20:ee:8a:4b:d2:d9:
b3:cf:08:c5:5f:1e:f6:41:ac:2d:d3:75:a3:30:4d:6f:94:24:
97:24:b4:e5:88:d1:78:13:4a:29:13:82:73:dc:a0:4b:fc:be:
bf:d1:3f:f5:96:42:e7:8d:39:d3:79:f1:91:ab:04:b3:a4:20:
d6:66:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:01 2025 by rpki-client