Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
File: e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json)
Hash identifier: 738jsGdgIHBL5p724lexiGH1ZLPjr3L5PvvUa69VhGw=
Subject key identifier: 2C:38:8D:A0:00:47:23:C7:B0:2B:17:60:2C:C4:44:44:7A:AC:31:4E
Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97
Certificate issuer: /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897
Certificate serial: 075F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
Manifest number: 074D
Signing time: Fri 28 Mar 2025 22:02:21 +0000
Manifest this update: Fri 28 Mar 2025 22:02:20 +0000
Manifest next update: Fri 04 Apr 2025 22:02:20 +0000
Files and hashes: 1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: +tLl8PQmh4iojgL2sFe1bEdFivaqUOsroVNHlSNFp+Q=)
2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: BxFPmfPTwgp2tJjAzM/9EFLesG9jRjNr4vYZabIjAUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1887 (0x75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115964
Validity
Not Before: Mar 28 22:02:20 2025 GMT
Not After : Apr 4 22:02:20 2025 GMT
Subject: CN=67e71c6c-4645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:32:2f:6f:2a:55:c9:b3:92:6f:78:57:55:f5:
7e:e1:2f:9a:27:1a:85:44:2a:2d:cf:5b:48:0a:0e:
ef:49:69:d3:b8:e6:27:ae:73:9b:89:d6:48:ce:38:
89:6d:90:85:f7:82:e5:21:1f:a0:28:87:d0:46:92:
4f:b5:5f:65:34:1f:23:71:cc:49:84:ae:d6:44:3e:
bd:ba:5f:1f:da:2d:58:dc:48:ad:93:fc:49:fa:58:
9e:b6:c8:33:2a:b1:26:b6:51:d0:97:a9:76:4b:2b:
a6:e3:d9:24:9b:87:6f:8a:0e:58:dc:f3:62:6e:ec:
77:b0:09:09:d6:ea:97:9d:58:c7:5c:ad:b4:c3:24:
87:96:61:1e:6c:fe:18:23:20:7d:3f:73:bf:60:12:
b3:f3:63:4d:05:61:88:26:04:f7:a5:85:3f:66:98:
7f:ec:d6:a1:ea:ae:77:26:da:df:8f:cd:e1:0d:71:
ba:8a:67:57:ff:11:26:02:9d:5b:e3:f2:37:ec:5a:
36:c3:23:4c:30:a6:20:58:b3:89:2c:70:1a:f9:1a:
ff:6e:71:cc:a5:1d:69:86:76:99:ec:e7:36:88:f4:
80:6a:0f:03:91:2f:8f:8e:28:07:46:f1:77:9a:8a:
a3:cb:31:ac:84:0f:b4:43:9d:05:6c:8c:8b:d8:5a:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:38:8D:A0:00:47:23:C7:B0:2B:17:60:2C:C4:44:44:7A:AC:31:4E
X509v3 Authority Key Identifier:
keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:13:73:0e:de:13:86:af:63:14:8d:fd:f2:f3:42:42:9b:4e:
4c:38:80:66:50:01:cf:fd:98:7e:b1:70:62:83:c7:7c:c8:d1:
cc:2f:e3:d4:87:2d:89:6d:86:25:a6:f4:4b:96:73:bf:d6:c1:
0f:a0:35:aa:c3:6c:f5:2f:56:9a:ce:9e:ae:e3:f7:f8:44:99:
f2:b2:1a:cb:55:0f:79:62:1e:89:01:8d:7e:0c:63:83:e0:19:
d7:b3:55:c7:8f:af:49:6b:f6:24:f4:14:e6:e1:f0:72:aa:cf:
f0:92:de:23:c0:73:f7:be:82:29:d8:a4:71:15:0d:85:14:60:
dd:05:47:f4:52:6a:02:8e:77:63:9e:e0:32:4b:1d:c1:54:e9:
cf:2a:bf:1b:1c:ae:1a:2d:20:52:52:d8:56:15:4b:da:e4:67:
cd:b8:c2:b7:79:53:f2:a9:3d:11:42:29:fd:73:6c:c2:20:d7:
19:53:bb:31:a2:d6:fa:83:3c:ca:fd:41:6f:1b:27:5a:bd:11:
33:e5:ac:e6:c7:3d:fa:ef:8a:f2:74:40:95:0f:e0:b0:8a:85:
72:62:12:9f:31:a6:a8:d5:8e:bf:b9:44:ad:a8:05:cf:2f:67:
3c:4a:16:13:3c:1f:2b:95:1c:b2:13:81:72:68:ef:66:fd:58:
5f:6e:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:49:59 2025 by rpki-client