Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
File: jVvm9QWF2v57SAa6CeIlsMxvKQs.mft (raw, json)
Hash identifier: 4TIqKcY0OyEF8KIStISpoSJE58DYiYWouvfHMwTHOOc=
Subject key identifier: 6C:C1:5C:33:D1:FD:83:0B:1A:F1:9D:8A:15:A2:4C:AC:B1:EC:D5:20
Authority key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B
Certificate issuer: /CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B
Certificate serial: 0975
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
Manifest number: 0967
Signing time: Fri 28 Mar 2025 20:26:59 +0000
Manifest this update: Fri 28 Mar 2025 20:26:58 +0000
Manifest next update: Fri 04 Apr 2025 20:26:58 +0000
Files and hashes: 1: jVvm9QWF2v57SAa6CeIlsMxvKQs.crl (hash: XrhXewJKwOpkpllo8w/X63+m0T/2/KYu8hChABN4ZA4=)
2: E7BABAC2217111EC9C97E95CC4F9AE02.roa (hash: OjAcbEOp0amxQNPqpOvSSPyQnwHnVe9MoEWy3pew2ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2421 (0x975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911681C
Validity
Not Before: Mar 28 20:26:58 2025 GMT
Not After : Apr 4 20:26:58 2025 GMT
Subject: CN=67e70612-58da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:78:f5:c8:45:6d:8e:b3:38:36:30:d0:ea:
08:df:ff:7a:6f:a4:80:f5:82:6f:be:0f:63:50:54:
c8:34:2c:cb:cf:dd:e6:34:05:04:29:4e:1d:5e:d8:
ab:b3:2c:07:7a:45:ce:f3:66:08:ef:2b:69:ff:1f:
e6:6d:9f:b2:2b:87:b7:37:59:92:f9:fd:df:d2:58:
6d:32:e1:ab:fb:62:0d:0f:65:6f:a4:e1:59:86:ee:
ac:78:ec:cb:e5:35:b3:b8:e9:78:71:bb:6e:0e:24:
c0:47:25:a4:b7:eb:f2:c3:b7:d2:6f:d9:88:30:db:
d4:5d:75:3b:e0:36:3e:48:f6:e1:bf:27:a9:14:d2:
3a:b9:50:e3:f7:79:7a:2e:f2:39:30:3f:4b:60:62:
f0:2b:ae:b6:c9:b3:7f:44:24:3f:9e:ea:d1:32:9e:
80:8d:28:01:f4:3d:98:d6:7f:65:3b:9c:5e:1f:f0:
a1:d6:0d:c9:a7:5b:88:fc:ec:ba:e1:16:e4:cd:5b:
f9:30:2c:0e:35:52:92:f9:12:ca:20:1d:9d:ee:f7:
04:5f:6e:c9:5a:b6:f9:8e:bd:e0:b9:58:83:f3:e8:
50:e9:57:b0:c1:cc:23:ae:39:fb:e2:22:77:15:cf:
f8:c6:36:2b:8c:44:ba:cd:43:23:f2:65:70:d9:20:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C1:5C:33:D1:FD:83:0B:1A:F1:9D:8A:15:A2:4C:AC:B1:EC:D5:20
X509v3 Authority Key Identifier:
keyid:8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:20:06:ac:5d:a8:79:61:94:d9:86:4e:e9:02:4e:56:0b:a1:
6f:f9:1d:af:bf:a0:86:d0:c3:36:3c:73:7b:19:3c:7f:d5:b2:
9c:98:df:6c:b4:3f:a1:3d:b7:d7:31:e5:64:73:69:eb:c2:38:
e2:82:04:a2:62:33:e0:3b:8e:df:fa:66:ca:80:96:d5:51:9c:
cf:04:4d:41:4f:0c:d3:0c:52:b2:93:ed:87:78:8f:cc:c6:85:
ec:ab:7b:f2:96:a8:1c:66:72:4a:29:37:93:58:ed:40:e4:b4:
04:f1:62:2d:b3:b5:8e:7a:78:cf:71:60:77:01:74:c0:03:21:
43:b5:4c:ca:51:cb:43:e4:48:e8:f0:2a:83:d2:9d:8b:a8:45:
e6:c3:93:cc:ca:e2:00:00:97:8c:1f:b3:0a:b8:7d:f8:73:aa:
d3:3f:15:05:d1:c1:2f:fa:7c:fc:00:54:ae:a7:ab:e6:09:44:
5f:9d:0d:38:b3:6d:d0:9e:74:63:62:37:d0:c9:b3:1c:58:b5:
67:9a:76:b4:08:9d:0b:13:64:c0:55:df:46:27:48:95:09:46:
e6:53:3e:58:05:5b:09:50:af:e8:ea:e2:4a:fc:b9:b0:5f:3a:
57:b0:4f:30:0b:06:31:fd:95:8c:31:54:bf:7b:d9:19:16:dd:
6d:36:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:32:58 2025 by rpki-client