Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
File: nPMspRGaIvijMFkQ1ANfaLP8IUw.mft (raw, json)
Hash identifier: aB5oUuPd+4UPvUkP76BZJzeJbNVB0dMzNpplztK7byc=
Subject key identifier: 15:FA:94:7B:02:E1:EF:CD:AB:37:4C:EC:90:FA:0D:52:48:08:D0:24
Authority key identifier: 9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C
Certificate issuer: /CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C
Certificate serial: 04D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
Manifest number: 04D0
Signing time: Sat 29 Mar 2025 00:03:34 +0000
Manifest this update: Sat 29 Mar 2025 00:03:34 +0000
Manifest next update: Sat 05 Apr 2025 00:03:34 +0000
Files and hashes: 1: nPMspRGaIvijMFkQ1ANfaLP8IUw.crl (hash: gtSE+4HJ0/vl/CMuJF011BjmRexxAInGpu8rk14Sh9I=)
2: 55D5848813E411EC9BE4C87FC4F9AE02.roa (hash: IhuzHy2i1HilFEQnpW2ccDVOUFu06otCgruwg3LwU+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236 (0x4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113E79
Validity
Not Before: Mar 29 00:03:34 2025 GMT
Not After : Apr 5 00:03:34 2025 GMT
Subject: CN=67e738d6-efea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:d2:81:32:cf:8c:4c:3a:41:6b:f1:05:a6:
c3:f6:51:0b:14:11:6c:0f:b4:b2:27:5d:bb:09:9b:
70:0c:6e:e0:f9:2e:c6:ce:60:ed:e3:2f:85:4d:e1:
f7:fc:83:01:93:c6:e6:22:bb:e1:0f:53:22:59:31:
61:53:7d:86:3b:c0:1a:34:86:85:78:ba:95:68:01:
5b:1a:82:9c:e5:42:9f:01:1e:3f:d3:f4:17:0a:8e:
a0:e9:90:74:09:fd:6a:8c:c9:e7:d4:6e:c9:5f:1f:
89:dc:8e:4b:ac:33:1b:69:c7:ec:59:5a:89:01:b7:
20:b0:a5:51:37:7f:0a:5a:2d:3d:46:5f:8d:d0:a4:
90:48:15:5a:5d:58:29:96:20:74:15:b4:03:c8:62:
19:92:d8:99:8f:bb:7b:a2:c3:57:ab:b5:9e:15:b9:
81:af:9e:2d:eb:f1:7d:13:5c:1e:32:94:43:64:54:
12:d3:83:05:6a:b8:d1:3e:94:7c:98:73:fa:b7:00:
9a:e4:1d:f9:c2:34:70:2d:e2:8b:9f:c0:7e:45:21:
89:fc:7e:76:12:f3:6e:f4:d6:27:e0:13:c7:a3:3c:
d6:18:5d:dd:53:d4:44:b0:ce:7a:b6:b7:06:e8:d3:
94:0a:f5:f3:48:c1:bb:0d:2d:5a:0d:17:48:e3:58:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FA:94:7B:02:E1:EF:CD:AB:37:4C:EC:90:FA:0D:52:48:08:D0:24
X509v3 Authority Key Identifier:
keyid:9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2e:24:37:23:18:dc:2a:df:17:18:2e:8b:71:80:76:43:e1:
23:b2:96:2a:68:fe:e4:23:a6:73:8c:7c:b2:87:53:68:f5:f8:
dd:28:f3:f8:d7:87:03:37:98:c3:56:ab:a7:e9:56:9b:cc:71:
b3:44:5a:7c:99:88:c4:9f:48:31:7a:8b:76:fa:40:bf:09:6c:
a1:8e:c9:a9:56:d7:49:84:8e:bc:00:56:d5:a7:8b:a1:14:e1:
33:c8:80:44:f4:f2:42:a3:b0:27:1d:af:8f:95:16:d9:83:65:
47:65:2f:34:ee:8b:af:6e:03:b5:23:c9:e6:a7:59:6e:f6:03:
e9:23:e4:ff:bb:3e:f5:f2:20:e1:9a:a0:10:20:08:78:81:18:
57:2c:7d:77:b2:ef:93:60:fd:c5:63:2c:7d:10:7a:be:44:8e:
88:c0:f7:4b:36:7f:dd:4f:77:2a:14:28:52:7b:dc:c4:5e:be:
bc:b2:a7:0b:85:37:25:5b:42:ee:ef:fe:82:ed:57:38:24:be:
60:0c:11:a4:8b:be:47:03:1c:3c:f0:41:6c:19:b0:7f:5d:7c:
d5:94:64:3c:41:cb:e9:b2:60:1d:26:6b:85:45:29:db:13:b7:
21:55:9c:d6:23:8e:5e:42:b8:db:29:36:16:6f:95:0c:b4:72:
bc:29:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:45:48 2025 by rpki-client