Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json)
Hash identifier: ynhPIEDuCFx0AMER1hoZtwVpkYAq15bVrerCnEsyJHk=
Subject key identifier: D4:87:26:ED:27:76:7B:0A:4E:A0:15:05:63:07:8A:02:9B:4B:E2:B0
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial: 07DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
Manifest number: 07D6
Signing time: Fri 28 Mar 2025 21:16:06 +0000
Manifest this update: Fri 28 Mar 2025 21:16:05 +0000
Manifest next update: Fri 04 Apr 2025 21:16:05 +0000
Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: uQ+ZbL9Ebz1NLsGq0LYxSkZG5pSncUCW0BzzMXe49Mc=)
2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: uoOD9ug4cYWw7XbQbk8d35Oe55TFSJv/qRJ/jB7pYDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013 (0x7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AAB
Validity
Not Before: Mar 28 21:16:05 2025 GMT
Not After : Apr 4 21:16:05 2025 GMT
Subject: CN=67e71196-488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:ac:5e:2b:e3:6f:bc:61:e8:ef:7d:40:5f:
63:41:c7:1d:ae:3f:db:48:7d:16:c3:9b:57:94:35:
cd:e1:12:5d:2a:fa:ae:38:f0:03:d1:6f:71:94:90:
65:cf:e7:f3:69:3b:0e:f7:48:ee:d7:6b:4f:de:5f:
92:b6:68:b1:67:a2:66:6c:3d:f0:2b:93:f5:f2:a5:
01:87:f5:90:4f:55:d2:f0:95:05:2b:e1:be:ff:e3:
67:38:ae:4e:b4:58:ec:8d:05:d8:d7:75:17:4d:03:
2f:2f:2e:75:19:bd:87:02:81:a4:6c:18:97:4b:fc:
20:67:98:83:c1:64:78:5d:f4:2c:2f:85:73:d5:df:
8b:f9:a3:da:08:37:b7:ff:89:44:d6:31:56:1d:9a:
19:f0:8f:18:d1:46:fd:c2:ae:f4:73:35:e5:eb:0b:
c8:ae:1a:d6:8b:1b:95:4e:77:57:6c:c7:8f:a3:6f:
86:ec:fe:68:00:e3:11:08:4a:04:34:c6:fa:5f:4f:
90:9b:4d:81:eb:67:2f:6e:11:e9:53:a1:70:71:6c:
cd:da:ba:e1:d2:75:7c:30:69:91:30:87:8f:0d:6d:
a1:bb:d9:2a:fa:d0:b0:50:3c:22:26:37:5d:52:e6:
f6:d8:57:a2:35:96:b3:c7:f1:f8:41:06:bc:37:ac:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:87:26:ED:27:76:7B:0A:4E:A0:15:05:63:07:8A:02:9B:4B:E2:B0
X509v3 Authority Key Identifier:
keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:00:19:d4:b9:a6:90:7e:d2:cd:18:8c:d8:ce:27:06:7b:b1:
1c:d6:bc:c4:09:76:f1:80:94:07:d1:c2:38:09:91:61:83:99:
6e:0a:4b:d6:6a:c5:b7:eb:d3:7e:9e:94:2a:e5:25:a9:de:cb:
31:41:c3:27:0b:c2:a0:a2:98:52:02:66:a7:f3:b7:c7:b1:68:
22:0e:7d:af:a0:07:0e:24:01:ff:ac:65:b7:a0:13:06:9f:93:
28:4a:47:14:26:3b:cd:d9:1b:3d:ec:ee:4d:de:67:2a:ea:45:
92:47:1e:29:13:7b:2a:6a:50:64:fe:0a:1e:fe:c0:5f:6d:48:
1e:bc:b0:ed:cd:f1:72:04:31:e6:37:0c:dd:20:14:26:53:cd:
8a:49:26:91:2a:f0:85:b2:98:e8:ae:bc:8b:d8:12:5e:82:07:
d6:d0:65:e5:9e:78:b6:1a:ca:e8:93:a6:1e:78:84:6e:15:5a:
e8:d4:de:5a:04:8b:a0:0c:d1:33:7d:87:05:b3:e7:3a:ab:e2:
a6:ef:54:48:b3:0d:c3:96:88:00:c1:4c:3f:73:95:51:91:fc:
e1:43:db:3f:c7:10:b0:a6:7f:ef:c1:cb:1d:4e:14:b6:39:76:
e1:0a:06:8e:3b:27:99:d1:32:67:35:3c:62:22:71:39:91:2b:
00:4c:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:24:14 2025 by rpki-client