Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json)
Hash identifier: 9eVZq55sTNHSfV22W8kkKArTdBH8B6lD9mIdtqmWz2g=
Subject key identifier: 0A:A7:BE:21:ED:61:EC:36:A1:95:D0:E8:D4:5C:56:25:C3:24:BD:4D
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
Manifest number: 01A0
Signing time: Sat 29 Mar 2025 02:58:05 +0000
Manifest this update: Sat 29 Mar 2025 02:58:05 +0000
Manifest next update: Sat 05 Apr 2025 02:58:05 +0000
Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: 5PVj5UKxBIKVkZlbEW/OwDgCrrFXJBtT6FlNxpsl7pE=)
2: F8582E301E6411EF99A50843C4F9AE02.roa (hash: ShXADDJpnj7w4eyyUS0fvnc0x0GGma16cf7GD5v3SiE=)
3: CF4B4BC61E6411EF8AA5A942C4F9AE02.roa (hash: kzhQlx9+qX+tcsUYqFntEgfacYCnpt0zMHVXOQLV78s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DBBF
Validity
Not Before: Mar 29 02:58:05 2025 GMT
Not After : Apr 5 02:58:05 2025 GMT
Subject: CN=67e761bd-7f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:a4:b9:33:82:fa:bf:c0:bb:89:18:df:81:
12:a6:7b:a1:54:39:e4:e0:b9:14:b5:bf:f2:79:74:
1f:fa:43:cf:d9:61:2c:7d:0a:53:a7:0c:5a:ad:8d:
fd:a4:54:a7:c8:71:a8:8c:d4:1a:bb:62:28:63:a0:
4d:3a:9b:38:f7:c2:06:91:d8:87:89:57:e9:d9:ef:
8b:c8:d4:1f:d8:61:0a:3d:00:d7:dc:d1:f6:02:86:
34:56:37:10:0a:db:d7:27:d9:e1:c1:18:12:70:02:
7e:61:2d:28:f2:83:ea:b3:5b:1d:a2:80:a9:be:d4:
4b:85:fd:4e:7c:23:00:7f:dc:b4:a1:3a:2d:d8:4d:
cd:2c:10:a9:33:1a:5a:7b:5e:e3:5b:7f:58:29:22:
83:66:4b:0c:8c:27:2d:93:30:a3:6d:65:e7:eb:79:
01:d2:a9:ae:2f:be:c7:97:59:69:24:e7:c9:28:11:
8c:93:2b:ce:49:ee:eb:f2:34:67:ff:be:f9:6b:60:
89:5c:df:0a:73:35:45:08:65:5a:10:dd:20:54:b8:
54:5f:69:74:e3:01:aa:9c:3c:46:72:25:95:3e:8c:
9d:f8:ab:7f:bc:af:56:09:78:97:03:3b:20:29:dd:
d7:17:cb:29:8c:50:7d:23:7e:3d:f8:ab:93:5f:a2:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A7:BE:21:ED:61:EC:36:A1:95:D0:E8:D4:5C:56:25:C3:24:BD:4D
X509v3 Authority Key Identifier:
keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fa:3f:95:1e:58:23:a4:64:38:60:67:43:81:ba:23:9c:15:
de:87:8d:e9:3b:b4:ae:ee:16:7e:08:67:ab:86:3c:09:a1:e2:
81:82:21:3b:16:76:07:29:aa:90:0a:61:01:9a:66:67:8a:11:
d7:73:77:b4:b8:e3:ad:0e:52:e7:74:99:bb:21:b9:81:fa:ef:
a9:48:e3:5d:b2:67:a5:34:26:16:d7:34:40:2b:fe:d4:4d:87:
3f:56:e9:f2:1d:0c:ff:52:d7:2f:b4:da:8d:f2:d6:3d:08:68:
92:66:1b:eb:38:a7:53:e9:16:e5:27:9e:de:3a:b9:a5:5d:20:
10:26:59:92:93:52:73:1b:1f:91:4b:0b:65:e3:ed:e9:64:e6:
26:47:c2:c5:58:2e:30:27:3f:5e:88:15:39:8f:d3:97:bd:bf:
fe:52:f7:14:1f:73:91:70:1f:e9:79:90:38:2f:30:3d:6a:da:
56:2e:a5:3e:a3:b8:76:49:27:a9:40:21:1f:e7:b3:49:ec:2b:
4d:4e:fa:cf:40:50:89:f7:0c:00:03:ca:a5:3e:f5:7d:6b:5a:
fe:1d:01:7e:1c:b7:49:9b:0f:c4:e5:0f:1c:01:8a:85:92:f6:
1b:76:08:2b:79:63:2a:e2:87:d5:14:4f:75:a3:37:9a:b2:60:
5f:59:a1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:49:14 2025 by rpki-client