Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
File: ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json)
Hash identifier: j/eStKaH6EBeY5bJNDgL01+fsLEAeRq1Z/Y2VriKvu0=
Subject key identifier: AD:5F:C8:C5:B1:48:33:9B:2F:07:E3:05:40:63:68:42:EB:CD:C7:FB
Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A
Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
Certificate serial: 0F2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
Manifest number: 0F1E
Signing time: Fri 28 Mar 2025 17:44:31 +0000
Manifest this update: Fri 28 Mar 2025 17:44:30 +0000
Manifest next update: Fri 04 Apr 2025 17:44:30 +0000
Files and hashes: 1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: DN1M9xRCsY8wj6ORctiF2VlMJc8ljqGEXHYh0vbJmLA=)
2: D193920E709411E99F95933EC4F9AE02.roa (hash: 0Os8j4kYKwSeqmj5yGoBBZfTw2aGD2KOY509iiv178E=)
3: 76E5D6AE727411EFAD2ACD27C4F9AE02.roa (hash: seqCKD6Db6uHjZMFtslvwJ+ELyFHvSU96+t1eEuQ2I0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3882 (0xf2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199BDF
Validity
Not Before: Mar 28 17:44:30 2025 GMT
Not After : Apr 4 17:44:30 2025 GMT
Subject: CN=67e6dfff-b7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:79:6d:3d:66:61:4d:64:c5:27:13:4f:ce:
53:98:60:59:0a:2e:09:80:1a:b7:42:ef:08:3b:46:
9f:3b:b1:55:b6:70:dc:de:13:86:be:5e:c6:39:c8:
aa:63:35:c8:5b:d1:7e:65:14:ce:29:2b:e3:62:2b:
17:82:36:f3:65:5e:fb:77:d4:62:ef:3f:55:21:e9:
58:21:ea:85:32:a7:04:5b:d5:03:c2:73:4f:45:95:
72:c0:42:76:12:40:ac:70:d8:16:3b:a0:a7:75:c4:
40:31:ac:cb:15:5e:16:f3:d0:d2:92:79:54:f3:ef:
82:8e:ce:68:29:96:06:03:72:58:87:0b:14:73:89:
49:b2:30:96:ae:2e:c8:87:20:37:af:76:6c:89:23:
a7:8c:72:81:fc:15:2e:40:11:b5:05:e3:b9:85:b2:
73:db:81:ce:6f:3e:0c:3e:f3:15:c5:c0:c8:c0:72:
2c:5a:ce:7e:02:cf:e0:01:35:c5:5e:49:58:03:52:
c9:e1:b2:4c:42:ca:ae:2f:2a:16:a0:53:4a:f9:b1:
37:2e:a1:a4:dd:37:41:91:34:18:ac:3f:3f:44:2a:
62:c4:ab:31:c3:69:c3:2c:86:1d:87:e2:90:0a:ae:
d1:08:aa:6b:43:0e:0f:74:80:43:fc:5f:9e:ed:37:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5F:C8:C5:B1:48:33:9B:2F:07:E3:05:40:63:68:42:EB:CD:C7:FB
X509v3 Authority Key Identifier:
keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3f:f5:11:a2:e3:5c:2e:84:6b:35:cf:b9:92:83:a1:6a:42:
54:57:ee:b2:2e:f8:cd:7b:4f:76:18:cd:3a:73:23:ec:47:6e:
f1:7c:0b:6d:e3:bd:d0:ab:fb:8b:1f:bf:de:b4:8b:ee:ba:8f:
d5:48:44:a5:77:b6:8c:8f:2e:43:6f:2f:93:49:99:92:36:e3:
13:f1:ff:26:91:f0:c0:07:82:3c:3b:3d:92:54:22:aa:e4:f0:
95:55:47:b4:ce:49:f2:b7:60:63:f5:37:f3:31:30:8f:11:5a:
6c:64:97:62:86:e1:d4:1a:ab:19:bd:9f:da:53:8c:5f:7c:74:
fe:3e:6e:3b:23:9f:e1:cb:7d:1e:a9:49:0d:ef:fc:8f:40:1a:
33:26:36:ba:83:7d:03:0e:47:0f:c0:02:27:90:cc:c7:7d:50:
6f:b0:2a:e1:d0:f6:56:01:43:26:dd:dc:32:89:ed:92:9a:7e:
0e:cb:2f:76:3e:a2:44:0f:9c:e9:a4:51:d8:76:09:3b:da:9c:
ec:47:27:13:0c:ce:70:9e:64:51:ca:6a:44:7f:d6:76:7c:e7:
66:2d:50:6e:86:42:a3:d4:0d:08:96:0d:e7:b9:2d:4c:d6:8d:
05:c3:22:fc:19:ed:c3:ef:87:63:c0:d7:7b:3b:9f:1c:12:fa:
ea:be:c9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:10 2025 by rpki-client