Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json)
Hash identifier: dXlnID52puQSRQIqtV5JSY3qmOCmxbeFKF4ayK7Lve4=
Subject key identifier: 5F:54:1B:BF:A2:10:39:FD:ED:01:AB:E9:24:EE:35:CC:7B:8D:D0:26
Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5
Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5
Certificate serial: 0C32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
Manifest number: 0C29
Signing time: Fri 28 Mar 2025 18:39:37 +0000
Manifest this update: Fri 28 Mar 2025 18:39:36 +0000
Manifest next update: Fri 04 Apr 2025 18:39:36 +0000
Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: C/5kvSQTwIZ37sOdBm5jhAtngmNAMjnUNfmsNO8eyuw=)
2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: zDl80I2OXRgu8XAGzajWbluuoVqJ4qa8l1cE9aEJ0WU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3122 (0xc32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3D50
Validity
Not Before: Mar 28 18:39:36 2025 GMT
Not After : Apr 4 18:39:36 2025 GMT
Subject: CN=67e6ece8-bcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7e:b1:4e:18:97:31:8a:a0:6b:1f:e0:db:f5:
cf:2a:3e:64:7c:ab:53:1d:39:41:7a:01:3a:4b:fe:
06:b1:70:56:a0:2e:a4:62:a3:26:34:16:06:4c:45:
17:57:14:9e:76:7d:4a:97:f8:fd:88:47:69:82:16:
c3:00:bf:af:49:08:6f:25:ac:f9:48:5c:6f:6f:73:
37:47:69:a7:27:53:d0:44:49:67:cf:99:1e:d0:e7:
e2:22:de:f2:b8:b1:d3:b6:2f:49:c7:9a:c6:83:74:
1c:06:0c:64:46:b9:ca:00:2f:a7:16:15:33:da:a0:
ff:29:24:ca:79:50:a5:9a:5c:92:ae:af:6f:d6:e9:
f4:47:95:7e:33:a8:9d:c9:6f:6f:df:a6:a7:10:b0:
62:47:1a:52:04:78:9c:db:33:a8:b3:33:70:5f:0f:
4d:9e:e1:33:df:e9:bc:75:dd:61:86:37:83:04:81:
29:0e:c3:80:5c:d6:2e:d7:09:c9:14:22:ec:8f:52:
9a:38:d6:ec:99:a0:d9:8b:72:02:e2:f3:a6:37:db:
b3:99:83:36:8f:c9:55:a9:f5:d4:02:2b:fd:4d:72:
c1:7a:f7:88:c0:5d:18:00:f1:96:3f:ff:e1:eb:58:
99:f2:2c:e4:62:14:fe:a6:29:fc:d7:15:a6:3e:2d:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:54:1B:BF:A2:10:39:FD:ED:01:AB:E9:24:EE:35:CC:7B:8D:D0:26
X509v3 Authority Key Identifier:
keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:7a:24:cb:29:2a:70:6b:af:20:22:13:3a:11:4b:d3:96:85:
ea:0e:c4:f5:53:44:df:23:c7:ca:6c:6b:7f:e4:e2:dc:44:eb:
ee:2e:f9:87:89:40:38:64:a5:a6:f4:86:b4:0b:de:c3:b2:bf:
f7:25:5a:2d:c3:43:cd:fa:06:90:f5:d1:e0:dc:c8:27:a6:6c:
38:c8:35:64:ea:b2:fa:2e:82:ff:21:3f:48:ec:47:0f:c5:47:
6f:64:73:30:e0:91:98:d1:e7:e3:df:6f:40:11:76:17:56:cc:
3e:7c:64:8e:68:18:9d:ce:f4:b2:80:0c:b5:e8:d5:2c:5d:bc:
af:53:81:00:52:86:95:44:f2:17:d6:0a:44:8a:07:3b:25:29:
34:66:a5:4b:00:fc:90:6b:d2:b9:a4:62:b5:c8:89:b6:00:13:
6f:b3:46:a9:bf:6a:05:ca:1a:9b:31:30:b5:75:93:23:7e:98:
44:3c:fe:38:02:50:e7:5c:f1:bb:95:51:0a:ad:3f:06:a7:44:
d1:d1:fa:44:46:b8:e0:8a:37:a5:95:8f:bb:03:d1:cf:a3:b8:
14:c8:7a:83:84:32:29:dd:db:02:5a:d6:e2:8f:64:84:2c:76:
12:ab:b4:a1:05:5e:8c:55:de:11:4a:7e:40:49:ec:06:ca:87:
b4:fc:a7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:23:49 2025 by rpki-client