Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft
File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json)
Hash identifier: OtRzeKSoWdsfiHEvJtCeg0+SBAeZOv9DsLMoYucIzC8=
Subject key identifier: E0:E3:3C:2C:7E:F9:0B:BF:65:9B:A2:07:3D:3E:25:32:85:42:38:1C
Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA
Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA
Certificate serial: 0E06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft
Manifest number: 0DE4
Signing time: Fri 28 Mar 2025 17:59:53 +0000
Manifest this update: Fri 28 Mar 2025 17:59:53 +0000
Manifest next update: Fri 04 Apr 2025 17:59:53 +0000
Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: IeCSkVY0W6d3R2Ytnt8eSSGlV2dJHe5J3KBYUp93K0Q=)
2: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: WKzAcG2HI+Rmp0I06ZjLFib0fSkn15at9z87zdNmyk8=)
3: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: SWjsz2ZRwBkKRs3lCM8x1HuP6oZ8eAnIrMziwftZzas=)
4: 670DF186232111EB9896B783C4F9AE02.roa (hash: Uzh2H0WzqUhAdOejeRuGcUfDdr3mQiiZM4aNaZoNZlE=)
5: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: /6vaZiCWJmBFNJgiNOI49M1x4iJoUHYLtfB+8hNudBk=)
6: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E9L/TTXk+Px8nGO4KJnm/ouPNchL+BTaTG1X0znr2Rg=)
7: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: EwzDgqgyP+42whL7/ceKehIKyd0tgvQ5kUq+8PMWfXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3590 (0xe06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118022
Validity
Not Before: Mar 28 17:59:53 2025 GMT
Not After : Apr 4 17:59:53 2025 GMT
Subject: CN=67e6e399-af53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:36:43:8e:dc:be:0c:da:8e:df:b1:50:f5:
1a:d2:58:b3:07:64:9c:68:f7:af:55:e1:03:26:74:
d9:f3:26:e7:07:e8:b0:8a:97:85:38:13:27:64:17:
1c:db:f8:52:0c:e3:8b:f7:08:48:6a:a6:45:48:63:
72:af:ab:86:0e:d5:46:fa:8e:bd:bf:0e:cb:64:d1:
bc:7a:95:0e:a2:eb:66:d9:c8:b0:e8:75:6a:59:55:
9a:de:0c:e6:2e:e9:31:7d:2b:a5:23:bb:aa:c8:5c:
25:50:8b:c0:63:d1:c3:cf:85:3b:c1:25:59:ee:84:
63:90:68:4f:7b:61:ee:7c:1c:17:90:3e:2f:2f:76:
30:1c:d5:e4:c6:bb:c1:41:c9:06:a0:80:f0:c6:c5:
e6:ad:02:6e:e9:e7:71:2b:78:83:14:2f:2d:ca:c4:
e9:c0:bc:7e:96:28:69:74:56:87:d5:90:a0:ec:1f:
d1:08:94:2b:9d:5f:10:3f:4d:70:0f:51:2a:72:77:
49:0e:53:ed:00:22:a4:b4:51:37:8c:87:9a:f3:d5:
d8:4c:5a:14:3f:f1:78:68:c2:af:ca:41:1a:a1:40:
9c:e0:68:0a:d0:41:2b:cf:85:f1:a2:ee:17:c7:57:
28:1c:15:e5:1a:73:2d:e4:56:2c:dc:83:12:1a:6b:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E3:3C:2C:7E:F9:0B:BF:65:9B:A2:07:3D:3E:25:32:85:42:38:1C
X509v3 Authority Key Identifier:
keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d4:86:02:df:2b:84:46:cd:b4:59:10:28:4f:10:12:66:23:
ae:a5:48:44:37:4c:e4:54:69:33:12:50:8b:0e:16:2e:08:2d:
a9:22:8a:86:59:7d:56:81:b1:7d:27:74:43:cc:f2:71:10:e9:
a4:40:1d:39:23:53:60:a4:31:9e:72:80:7d:82:67:0f:52:14:
fa:e5:d9:69:b5:7b:64:08:d1:06:b0:5d:9f:44:85:a8:10:0c:
ef:06:6d:b7:b0:77:43:a1:70:f4:a4:63:76:ab:78:0e:5a:df:
8b:dc:1e:5d:8d:15:f4:d6:d5:07:12:88:ef:b0:4b:43:25:fb:
2d:fd:d0:ab:e0:be:69:10:be:b7:f2:fd:d9:3a:af:f9:e3:13:
4c:ec:3d:ba:0c:e5:9e:71:72:ef:9c:36:5a:40:a3:bd:08:77:
f1:67:28:a5:4c:2c:8f:5e:47:cf:7f:0f:dc:fc:6d:33:48:13:
6f:42:7b:d1:b5:a4:73:07:2d:34:e7:3f:a4:fe:95:a6:6d:8d:
74:15:a8:3a:d6:69:5d:f6:58:fc:cf:92:ca:17:63:2b:33:58:
e4:98:92:30:0c:95:02:8d:61:0a:a7:f1:d0:90:41:e6:29:8e:
11:ac:38:e0:b8:95:ef:fc:9d:5c:fb:08:12:09:f7:f0:c0:a2:
8d:77:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:02:42 2025 by rpki-client