Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json)
Hash identifier: w8nPMsen5s2WoSpcqqTR+au7CtVc9nGMAJpRehaeiYQ=
Subject key identifier: 1F:F1:45:37:06:ED:BA:34:B6:92:F7:C2:0E:0F:84:BA:69:DD:9E:33
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
Manifest number: EB
Signing time: Fri 28 Mar 2025 23:53:45 +0000
Manifest this update: Fri 28 Mar 2025 23:53:44 +0000
Manifest next update: Fri 04 Apr 2025 23:53:44 +0000
Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: jSNjB1n66j/YRQnrJXp+lIUo8efM2JqqGyLd1fxaMfg=)
2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: tvLrXzmWLi+yYUfuM7mTXsSMiwGKfb5ZJS93I35M4zg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112320
Validity
Not Before: Mar 28 23:53:44 2025 GMT
Not After : Apr 4 23:53:44 2025 GMT
Subject: CN=67e73688-153f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c2:17:51:7d:d8:9d:e6:1b:4c:14:37:cc:51:
ff:2c:c5:59:0b:51:1b:79:d3:26:73:82:90:a5:56:
11:21:6b:06:b7:ba:8c:89:9e:63:d2:50:d5:9f:5d:
8a:db:09:95:f1:fd:c5:43:0d:2e:5b:f6:ba:39:7b:
e7:b8:f7:bf:2c:33:c0:50:1e:84:17:cc:11:4a:aa:
ab:15:c5:c6:96:41:0e:24:c6:b6:62:72:2d:db:d3:
3c:19:e6:e7:f4:d6:26:48:b9:6b:03:37:ac:18:a1:
16:52:17:e7:2e:ea:d6:2e:54:b5:ad:37:69:82:ad:
90:af:c9:29:eb:89:98:9f:0b:e5:ac:27:68:9f:24:
ee:9e:5f:27:67:b4:a4:6d:5b:74:83:95:64:45:7b:
ad:a3:31:77:73:4f:63:90:9c:c6:af:f2:d7:a5:07:
b3:b6:7e:4b:2b:0e:26:ca:4f:a7:10:47:b0:30:40:
ac:da:01:97:47:1f:62:1d:c2:23:76:c6:ed:75:9a:
56:2b:4b:f2:82:69:7a:20:16:e0:27:6c:98:02:1a:
09:3d:07:8f:60:d2:7a:91:e4:05:4b:85:aa:55:2c:
aa:f0:62:87:42:7e:39:18:a5:d8:f7:0b:25:c7:84:
a5:1c:44:92:3f:59:e4:02:31:ab:6c:50:c9:29:e3:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F1:45:37:06:ED:BA:34:B6:92:F7:C2:0E:0F:84:BA:69:DD:9E:33
X509v3 Authority Key Identifier:
keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:dc:0e:ce:ff:2d:d1:09:7b:2d:2b:80:39:f9:8f:33:d1:8f:
c5:90:58:a3:ab:4e:00:6f:cb:ab:29:9d:8d:e2:2a:b5:01:64:
9b:c8:cd:df:33:c9:09:7b:41:a1:61:7d:52:98:a4:87:cc:06:
8b:5f:f6:54:eb:7c:60:12:3a:e8:3c:ee:69:d9:dd:06:1f:21:
26:ad:b6:91:96:d7:d6:13:14:94:a4:0a:4f:23:9f:37:24:f8:
c0:ca:54:55:89:22:18:c2:d4:be:1e:c1:d1:58:ec:ba:65:68:
01:79:bb:77:21:92:d2:02:ef:4a:bb:c0:85:24:57:78:7d:b2:
c0:41:73:8a:75:31:45:c5:e7:53:83:fc:d3:0b:fe:bd:2e:c7:
2f:3e:a6:01:57:ed:bf:fb:0a:23:74:20:bc:54:63:60:d4:31:
3d:3c:8e:cb:11:c4:d8:d8:45:e3:0c:31:24:f1:1d:05:0d:da:
0b:4b:40:ac:d0:8e:b4:d0:c1:e8:ae:59:00:09:af:ca:49:f0:
f7:eb:d2:8f:fd:84:85:04:21:dd:80:ac:67:e0:14:65:84:33:
94:22:6b:b2:1d:e7:e7:6c:e9:4f:82:74:5f:3f:ff:20:39:a1:
eb:a5:fc:57:e8:4b:d7:88:74:3d:9e:3f:54:47:cb:47:c9:96:
24:95:34:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:25 2025 by rpki-client