Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json)
Hash identifier: TE9KKokY50Au08fbZ6goTf5tx72FybEoJEbMGmnxgas=
Subject key identifier: 4B:96:ED:69:A8:7E:8A:FC:52:CC:A5:6F:45:34:CF:FE:BA:8D:39:BA
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
Manifest number: 0216
Signing time: Sat 29 Mar 2025 02:18:42 +0000
Manifest this update: Sat 29 Mar 2025 02:18:42 +0000
Manifest next update: Sat 05 Apr 2025 02:18:42 +0000
Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: jOoVnbFj9gwQBUVF5Q6vL5PjrESDyj+cBh2x+XVjt58=)
2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=)
3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=)
4: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=)
5: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=)
6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47
Validity
Not Before: Mar 29 02:18:42 2025 GMT
Not After : Apr 5 02:18:42 2025 GMT
Subject: CN=67e75882-efb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:f7:72:ee:6e:d9:b1:e1:39:00:1b:d3:25:
41:99:39:c4:1d:93:83:fa:d4:7d:74:0f:6a:d6:7f:
b3:c3:58:15:f2:05:79:1a:f6:27:fb:39:01:28:a4:
a5:1d:99:cc:cd:73:d7:91:a4:d0:47:53:13:86:8c:
15:c7:0a:cb:f1:a8:26:26:cf:00:18:3d:d2:d6:7d:
c8:af:25:5a:67:4d:d5:65:30:f1:cd:ce:20:0b:d0:
8b:ff:9f:bf:c7:28:09:5c:39:65:4d:e5:47:6e:9b:
05:e1:3f:31:c3:7a:ea:a0:df:fd:9f:36:39:c0:56:
58:68:43:cb:7f:cb:ec:a9:cf:cd:45:fb:62:9d:ac:
ab:c3:3f:d5:a6:9e:cf:f6:c5:88:d2:5b:13:21:3d:
38:11:0f:09:1a:af:d4:ea:6a:11:7b:9b:05:01:5f:
54:a6:04:f1:2f:5c:1a:5c:45:58:b7:95:fe:30:5a:
9f:cf:cf:b3:a9:f6:c7:24:54:f7:3a:d5:e1:ae:28:
7b:3b:da:7e:f4:0b:c6:f2:62:cd:44:5b:8e:f4:43:
80:c6:ab:af:ac:ee:42:07:26:94:dd:5c:16:6b:16:
29:4e:52:9c:95:09:72:53:fa:33:fe:f6:fa:a8:c8:
c0:dd:42:eb:80:2e:f3:c1:04:d1:06:ce:73:e7:25:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:96:ED:69:A8:7E:8A:FC:52:CC:A5:6F:45:34:CF:FE:BA:8D:39:BA
X509v3 Authority Key Identifier:
keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:59:7e:27:89:f2:a1:6e:d8:b4:5e:7f:cf:b9:e9:82:81:9f:
f0:f9:56:03:2a:fa:ff:bf:08:90:86:d2:a6:6d:61:de:e1:46:
a0:3b:5c:60:36:5e:9f:64:6f:d5:4b:c5:48:b1:44:8b:5e:09:
59:3d:65:d7:7b:dc:bc:1d:41:ef:43:e1:c9:6a:5f:48:50:dc:
9a:f5:de:c4:d2:0a:56:37:54:d5:e0:80:1f:98:ca:c7:99:b2:
6a:42:45:a7:48:2c:a1:37:e4:a2:47:18:15:a4:91:fd:e8:3f:
d7:ba:c1:38:13:18:dc:ae:9e:16:de:5a:f0:77:08:11:e4:bb:
94:2a:a0:a2:ad:ef:69:d2:e4:b8:74:92:64:58:98:e1:f8:69:
32:7a:a3:d0:90:7f:93:d2:a7:f8:67:9b:22:53:a4:78:5d:e4:
1f:80:2a:8a:25:a0:5a:b2:79:f3:36:e6:8d:0d:80:c1:68:96:
85:47:f2:c6:5c:15:9a:78:27:ca:88:fa:14:42:6c:f3:93:c6:
88:8e:33:ba:c4:e8:a5:2d:58:89:19:8f:83:66:0b:12:1f:c6:
34:e6:04:b6:bc:b5:4a:b9:e7:9d:e0:b0:9d:78:b4:d4:7a:ee:
d3:e0:9a:f7:e6:3f:e3:df:2d:90:a8:c8:9f:c4:06:94:e4:7c:
8f:80:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:28:54 2025 by rpki-client