Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
File: D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft (raw, json)
Hash identifier: T2wTQzM7694WI69jhz/fPuzvQxo631VMlbIRc+IL2Eo=
Subject key identifier: A8:A2:81:B3:BF:3F:69:3E:2D:C1:D9:0A:29:56:4E:85:62:A1:D6:C1
Authority key identifier: D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
Certificate issuer: /CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Certificate serial: 7064D118D56391A70336A39A0D0837E50109720E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
Manifest number: 06DB
Signing time: Fri 28 Mar 2025 21:40:00 +0000
Manifest this update: Fri 28 Mar 2025 21:35:00 +0000
Manifest next update: Sun 30 Mar 2025 00:48:00 +0000
Files and hashes: 1: D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl (hash: o9uFm4sImDhTRTRR2JD5FNB9cVt66xHmTZSkDLs78rc=)
2: 3139342e3130342e3130382e302f32332d3233203d3e203339353838.roa (hash: s6GpFm++Td2vziv7b8evt+nq8qsZvz/bpd1yFaiS6N4=)
3: 3139342e3130342e3131302e302f32332d3233203d3e203339353838.roa (hash: XNpTfw0GR0xZwJyCQLIkDsV7NTLx+baYV6zLrseLr90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:64:d1:18:d5:63:91:a7:03:36:a3:9a:0d:08:37:e5:01:09:72:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40581ca9ddaca9e110165b11dd2820dd7f532c0
Validity
Not Before: Mar 28 21:35:00 2025 GMT
Not After : Mar 30 00:48:00 2025 GMT
Subject: CN=A8A281B3BF3F693E2DC1D90A29564E8562A1D6C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:23:fd:43:44:7d:58:f8:4d:08:a7:ba:fb:
0b:c6:b3:e2:a6:3d:2f:0c:93:e7:80:e1:60:57:a2:
e2:36:d7:b6:26:8c:30:20:7a:f1:4b:e3:86:b1:3d:
ea:dd:2c:73:c8:13:4d:56:18:8f:53:6f:f1:e4:39:
19:ae:84:c1:30:fb:89:24:45:5f:1f:bd:36:b2:be:
0b:8c:85:47:5e:5a:1f:a8:9e:53:52:0a:b2:20:d6:
f4:54:3c:c2:ec:44:e5:c4:fe:2d:31:68:fd:11:0a:
64:c5:31:81:19:6a:e5:02:dc:49:e8:76:49:51:ec:
e6:ed:9a:69:77:84:97:63:67:16:07:b6:7a:73:55:
ba:53:53:8f:c7:88:fb:30:29:e5:a6:5a:de:28:7e:
22:2d:8d:35:59:55:c0:f7:3b:1b:9e:4d:6a:40:c3:
9d:96:af:ec:20:68:d8:12:43:12:93:7c:dc:67:b1:
db:bd:3a:44:05:eb:17:20:ab:cc:47:a1:52:39:94:
9d:3a:51:da:6c:71:a3:22:7a:6f:6a:05:68:e5:8a:
da:1a:af:16:11:f8:0e:e0:45:60:13:2b:38:83:eb:
bc:85:bc:2c:27:22:19:bc:22:36:3e:dc:d0:e1:bf:
ab:f1:f8:c7:7e:f3:b1:67:5e:37:8d:a9:97:9c:f2:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:81:B3:BF:3F:69:3E:2D:C1:D9:0A:29:56:4E:85:62:A1:D6:C1
X509v3 Authority Key Identifier:
keyid:D4:05:81:CA:9D:DA:CA:9E:11:01:65:B1:1D:D2:82:0D:D7:F5:32:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AWByp3ayp4RAWWxHdKCDdf1MsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/1/D40581CA9DDACA9E110165B11DD2820DD7F532C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:16:ad:1f:1e:f9:cd:aa:44:d8:3d:0f:b9:c2:16:f1:5d:df:
c0:e3:99:88:4d:74:0b:a6:3d:e1:ed:8a:9c:6e:9c:46:db:f9:
62:20:b3:ea:3f:9f:81:34:99:66:ef:05:45:c7:34:15:30:1e:
fa:04:ab:01:b4:4e:32:91:64:28:37:54:e0:d5:56:e3:f0:ed:
e4:a8:49:9f:d3:b2:de:c4:f1:27:92:e7:12:e3:06:b4:54:b3:
07:f9:7b:42:4b:e1:93:e6:1f:37:07:05:2d:d4:e9:d4:20:fe:
cd:11:1f:ac:f2:bb:4a:8e:bf:ac:94:14:53:5e:df:0b:4a:4c:
ae:6a:16:89:6c:80:fa:9e:20:20:b7:08:b2:a9:3e:da:2f:71:
50:3a:71:f6:3c:cc:c9:b9:f7:86:6d:a0:d9:c5:b2:2b:14:11:
3e:12:19:6d:ba:c8:07:19:ee:c2:8f:a3:cc:ef:62:89:89:ad:
c4:06:c8:3b:6d:4e:0a:78:c5:a5:d0:03:1e:bd:d0:1c:c0:5a:
dd:6b:40:f3:f0:ce:c0:be:f6:02:64:1b:81:d7:ef:d1:7c:16:
8e:a5:40:f1:20:58:ce:d9:cd:26:22:df:99:07:c1:ef:ef:39:
a9:90:5b:63:da:1e:cc:39:f5:db:57:95:12:84:36:b4:6c:9b:
8c:43:1f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:50:36 2025 by rpki-client