Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
File: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft (raw, json)
Hash identifier: IQcmKMf2gFVeX/NryHeMBTEjbO0zaaySC+0C8gorZvA=
Subject key identifier: D2:69:E5:AC:87:B9:00:1A:21:78:52:6F:B6:4D:EA:EA:1A:55:29:CE
Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB
Certificate issuer: /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
Manifest number: 010F
Signing time: Sat 29 Mar 2025 04:19:51 +0000
Manifest this update: Sat 29 Mar 2025 04:19:50 +0000
Manifest next update: Sat 05 Apr 2025 04:19:50 +0000
Files and hashes: 1: 9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl (hash: NJBenJd7VfemMepSfTokNsx3MOLjk7ygteqKQedOOfw=)
2: 37E179CC6F0011EEAFD97016C4F9AE02.roa (hash: sf8Mnz1qsHdpKeF1ILemxPeqebYjdCIUvrzVLMZpW/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1B9F
Validity
Not Before: Mar 29 04:19:50 2025 GMT
Not After : Apr 5 04:19:50 2025 GMT
Subject: CN=67e774e7-7b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:88:f2:dc:79:0b:2c:9e:b5:df:44:ed:c8:
81:46:37:5f:af:9d:0d:27:5b:03:1f:1c:36:71:ee:
34:0a:6e:3d:db:4d:31:10:67:b8:28:c5:fa:b9:b5:
44:f5:62:c0:65:3e:0d:79:e2:65:7d:8b:12:e4:68:
44:58:1a:b8:5c:45:f2:b6:9c:56:b3:75:bf:60:54:
2b:0f:2e:5e:63:18:e8:c8:c0:b1:9f:2d:42:70:77:
99:d3:7f:a0:49:f2:49:8a:79:18:8c:63:11:03:c7:
7c:3f:d3:eb:3d:c8:96:7d:73:4d:6e:f1:24:05:76:
a6:e4:b3:fa:25:67:b1:df:6a:e8:5b:54:73:de:d1:
76:0b:bf:c9:19:07:e6:f6:f2:e7:b8:6d:db:84:00:
22:32:ce:ac:60:93:0b:28:cb:c8:b1:34:78:71:00:
19:63:3c:35:0d:c0:23:39:21:97:98:42:5a:f6:36:
9c:14:ea:f5:85:f4:7b:51:90:4a:2e:60:ec:a2:c9:
fc:3a:61:91:fa:ca:51:3a:24:1d:bd:6e:75:8d:f7:
07:22:b0:7f:9d:09:44:4e:48:4f:e1:67:4b:90:7d:
b2:a5:f0:a1:ff:ea:6b:54:81:42:b0:1c:f0:e7:a4:
68:ee:e6:0b:7c:f5:2c:fe:c2:f6:df:d1:06:09:d9:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:69:E5:AC:87:B9:00:1A:21:78:52:6F:B6:4D:EA:EA:1A:55:29:CE
X509v3 Authority Key Identifier:
keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f3:69:e5:78:bf:92:cb:a1:e8:f3:f9:d9:90:05:f9:9b:d3:
de:2f:0b:48:29:d4:8b:62:78:af:e1:c9:9c:1f:e4:19:50:14:
58:71:8c:9e:83:7f:11:a5:28:e5:6d:22:62:26:df:75:d8:f4:
d2:62:ef:d7:1c:c0:ea:82:2f:29:c2:88:df:e0:32:81:5f:0b:
4b:db:97:ff:db:e7:e2:38:7c:d3:57:d6:1c:ba:50:45:d0:3a:
d8:9e:a7:fc:6e:b8:40:d0:85:85:e2:e9:df:19:69:ee:2c:ef:
9e:3a:83:d5:91:5d:8f:4b:3e:6c:41:80:09:e6:da:fa:dd:52:
6a:5e:68:c5:b3:39:ec:24:5e:0d:96:dd:2d:b5:4c:dc:d9:31:
e5:ab:b9:bc:0f:99:34:69:81:2a:46:b9:0a:ce:d7:44:0c:1a:
17:79:bb:c2:b0:b9:3e:b7:0a:d8:78:1b:b3:93:fc:79:f9:74:
15:cd:81:40:90:d0:82:47:7d:32:f8:df:06:3a:16:5e:05:9d:
b6:d6:5d:13:39:47:1b:96:e4:c6:20:27:10:4f:14:68:2d:ff:
78:17:08:0a:fe:f8:06:27:bf:39:97:e9:9b:58:f8:c1:9a:50:
27:fc:66:6d:8b:a5:ec:f7:cc:b8:ce:3b:5f:18:15:e2:5e:b6:
4b:81:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:27:29 2025 by rpki-client