Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json)
Hash identifier: ShpZXQ/2VQ5RMO2LAV6CU+MyXDGU5xJp3QgGygo3OFY=
Subject key identifier: C4:ED:A2:9A:68:39:A6:04:5F:94:F3:17:0E:21:1B:74:EC:AF:B3:3C
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 049F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
Manifest number: 048C
Signing time: Sat 29 Mar 2025 00:19:58 +0000
Manifest this update: Sat 29 Mar 2025 00:19:58 +0000
Manifest next update: Sat 05 Apr 2025 00:19:58 +0000
Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: m1TFm4lCzHA1HNszrw25kTzG4SqKf8KQEvP04sbhNX4=)
2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: xNVbMWOJTNr+TWQdJDNkDpjKnJa72sxLxfgu1hE4Y3w=)
3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: yMa9anpM1Fx5awM2ELLejmDtWuOQ4e92GvLkjwBL1Wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1183 (0x49f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB
Validity
Not Before: Mar 29 00:19:58 2025 GMT
Not After : Apr 5 00:19:58 2025 GMT
Subject: CN=67e73cae-5b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:b5:89:89:6c:36:48:39:72:72:f5:02:69:
c2:6e:31:80:18:e5:81:50:69:10:c8:f3:f7:54:94:
c1:9f:78:45:92:62:56:18:a5:80:2f:13:5f:81:3d:
df:cc:6e:75:ac:26:12:19:7b:54:d1:05:73:54:f8:
e8:0b:8c:8a:01:ce:99:61:b4:43:9e:ff:c0:1c:39:
8f:5a:b2:89:39:c2:2f:c2:cc:56:f9:29:f3:43:ba:
03:0c:e7:67:40:65:04:3f:a4:45:cd:b5:8b:23:6b:
57:90:0f:93:13:60:7d:a0:04:ef:1b:d8:81:a6:04:
69:da:ee:77:16:07:1d:0b:2d:e3:be:d1:1b:a6:c5:
1d:fe:e3:37:90:8a:54:ca:cc:fa:ef:41:97:ac:43:
55:20:cb:b9:5c:8b:db:f0:f7:07:f8:e4:69:ff:3c:
87:c5:d7:79:ac:15:ec:33:98:39:73:42:97:87:7e:
aa:56:65:b2:7c:52:94:17:56:4e:18:9c:21:5b:ee:
70:8f:b8:b8:24:a5:39:d5:bd:e2:c9:3b:99:ac:66:
50:aa:1c:c5:4a:f7:ce:66:5a:41:f4:0f:fa:e3:3e:
66:ed:41:b9:e5:c0:60:5e:95:5b:30:e6:ea:bb:bb:
62:88:0e:9d:44:cc:c0:1a:7d:45:0c:01:0c:26:91:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:ED:A2:9A:68:39:A6:04:5F:94:F3:17:0E:21:1B:74:EC:AF:B3:3C
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:74:db:19:f8:d3:a1:bd:12:da:ea:47:c0:7f:77:6d:ec:3d:
1f:42:e7:6e:ff:c3:47:26:8f:fd:82:be:55:bb:a7:30:ac:3b:
bc:dc:5a:a3:35:e5:6a:b9:5e:0f:a8:cf:2a:d9:94:07:8e:b5:
61:74:bf:21:ea:3b:5d:07:60:12:a3:6b:89:d4:ce:62:b0:a7:
af:8e:8b:8a:a7:34:35:01:a5:29:28:89:13:15:53:70:ff:57:
83:7e:1a:98:90:5d:87:49:fe:68:2b:77:38:bd:2d:af:04:08:
d9:0e:fd:c2:5d:b7:17:44:a0:b0:d6:87:98:9d:54:6f:7a:5c:
a1:e5:8e:f9:95:45:db:71:04:76:a7:26:58:3b:3c:98:b5:6e:
8d:87:20:98:4f:42:eb:7f:4d:f8:36:95:5a:e9:75:8c:f0:66:
65:af:41:9c:c2:04:d5:56:d0:77:46:b6:5c:14:5a:86:21:e8:
6e:13:8d:13:66:9c:11:cd:aa:cc:89:26:59:f1:ce:19:fe:92:
ea:32:df:b8:c4:51:bf:0f:55:94:02:56:f7:57:2e:7e:13:ad:
6d:c9:08:67:d9:1e:e5:36:f7:f3:03:41:12:4c:f6:10:47:e0:
5d:76:2c:76:a0:ec:66:43:f6:34:f2:82:46:7e:cd:50:25:f2:
cc:e1:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:00:27 2025 by rpki-client