Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json)
Hash identifier: v9dhJWpu4Rt4qtv3M+aqmPLdM++k2MXIEZ3zVXlqHbY=
Subject key identifier: C1:4C:44:60:CA:07:F5:AF:97:4C:4A:29:D3:38:42:2F:CB:52:EF:4A
Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Certificate serial: 0481
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
Manifest number: 047D
Signing time: Sat 29 Mar 2025 00:19:24 +0000
Manifest this update: Sat 29 Mar 2025 00:19:23 +0000
Manifest next update: Sat 05 Apr 2025 00:19:23 +0000
Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: F1MFX7gT00ieXmQR/5WZgMC/mXBPu+C4rHJcdOh0NW0=)
2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: oSdvyorGuPv/5QDTLowUDTHEVLVsXYxy04DwT+pQi58=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153 (0x481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199836
Validity
Not Before: Mar 29 00:19:23 2025 GMT
Not After : Apr 5 00:19:23 2025 GMT
Subject: CN=67e73c8b-39b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:17:a4:a6:27:eb:14:bd:92:c5:77:de:b4:
aa:69:d5:39:42:b5:ce:29:da:07:cc:85:08:09:67:
63:9b:0c:3a:45:76:b3:5f:e8:3d:35:ca:a7:6e:b1:
3b:13:8e:52:6e:c3:8a:6a:d1:46:26:f9:e4:b3:02:
79:8e:db:39:41:53:e9:fb:46:ad:0f:02:7d:a6:40:
17:db:50:9f:c8:38:81:1e:ea:d4:34:cc:11:7a:6f:
f8:15:ff:fb:15:5a:b7:76:b6:f1:a3:a6:84:ec:89:
40:6e:45:76:bd:cf:ae:4a:7e:e6:e6:6e:bc:67:c1:
a8:4e:da:aa:02:36:87:63:d9:bd:ad:50:1f:dd:dd:
21:73:66:8d:eb:30:94:ed:d9:91:d1:d5:7a:df:56:
15:45:6c:06:10:42:d7:e8:40:37:40:8c:9a:cf:f5:
43:d1:b5:d5:cc:52:ec:ac:59:b0:5c:06:6d:0f:01:
be:f2:c2:bd:e3:74:31:79:d5:24:12:37:0c:f2:eb:
fb:85:f5:f9:ea:51:46:39:2f:64:f3:9a:19:33:e2:
57:fc:31:f6:87:a9:8f:46:63:b5:a0:f3:b9:f0:0f:
be:f8:dd:06:33:28:49:f0:8a:7c:cb:c8:65:d7:61:
60:77:04:9d:fa:24:a0:37:bc:de:5a:09:af:57:2a:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4C:44:60:CA:07:F5:AF:97:4C:4A:29:D3:38:42:2F:CB:52:EF:4A
X509v3 Authority Key Identifier:
keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cb:f9:6c:e1:24:30:a4:08:b9:31:1c:56:04:ed:5d:c4:0c:
8d:ff:68:9b:5c:75:48:da:8e:70:6d:75:2b:ff:01:43:fa:33:
02:bb:a2:17:dc:48:aa:5b:68:62:ff:4f:63:69:52:61:2d:74:
38:3a:af:ae:56:70:fc:15:34:04:b5:bc:6b:71:c1:f5:ab:15:
a5:35:d1:50:43:d5:d1:da:dc:42:c8:5c:5a:c9:dd:2b:24:b8:
8c:6d:a7:1f:3c:a3:90:88:76:de:d4:7d:63:86:a1:34:b7:d0:
63:e9:23:b3:b9:22:d4:b7:a0:b1:c1:ec:f3:7b:90:35:82:95:
50:e3:d6:5b:43:4b:7f:22:83:91:14:93:d5:6e:b9:68:37:35:
1a:fc:46:56:f2:7b:44:e6:54:51:03:ce:a7:a0:98:f8:7a:29:
65:0a:a4:bc:24:fe:25:8f:96:68:76:0f:4d:65:8f:af:70:7e:
bc:62:c8:5b:fd:87:57:ee:12:ce:32:d8:60:5c:81:59:04:c4:
87:4b:a2:32:c5:92:18:78:e8:4f:34:af:d1:58:e0:c1:dc:41:
9e:fb:e2:fd:d7:83:82:fa:b2:bb:34:15:3c:22:7e:1f:ad:a5:
f3:77:6d:14:a3:d1:a9:b2:6d:47:d2:b7:63:6d:6b:fa:25:58:
61:74:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:33:11 2025 by rpki-client