Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json)
Hash identifier: iVEFrPsj5/sBsHO/urnFV1Lxr8BQ7aOLnt1J7rK/mEw=
Subject key identifier: 26:DA:85:A9:CA:CD:46:19:C3:DB:B4:83:14:12:1D:28:5A:16:BF:C6
Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
Manifest number: 69
Signing time: Fri 28 Mar 2025 14:23:09 +0000
Manifest this update: Fri 28 Mar 2025 14:23:08 +0000
Manifest next update: Fri 04 Apr 2025 14:23:08 +0000
Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: z57JKOI28lkfsTuscGPPJ5QeFLElHKgh1RMSVazdu8U=)
2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: gkEBBlb5hiB7NcbdGZU3eHKvEG+IJP6u0ZkY2XHXvHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911911C
Validity
Not Before: Mar 28 14:23:08 2025 GMT
Not After : Apr 4 14:23:08 2025 GMT
Subject: CN=67e6b0cd-f9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:30:79:66:89:06:34:2a:52:98:c9:a9:51:
48:aa:8e:69:ba:20:94:f9:23:e6:d7:f4:d6:f9:a8:
d8:a1:fb:5d:a0:1e:1b:49:a8:cd:bc:3a:c3:c9:73:
d6:d2:0f:49:f7:89:9e:3e:a1:3d:b9:f8:ac:56:4b:
56:4a:d7:78:bb:63:15:f9:9d:de:d1:d1:2a:d1:8c:
f2:32:5c:4c:eb:1e:50:50:6d:59:46:9c:64:aa:7e:
4b:f3:1e:1b:90:ae:e2:e4:e1:3f:5d:19:da:f4:6b:
2c:54:b0:0f:ab:26:7b:d9:0b:21:e1:b7:f7:b8:cc:
6d:f0:ae:36:35:d7:76:29:05:12:43:1e:b9:e4:44:
02:c4:f1:e1:e1:b5:93:a2:f0:8a:d1:0b:5f:63:9c:
ca:06:20:04:f9:e3:47:96:bb:0b:00:79:39:74:58:
31:a0:17:1f:a4:1e:1d:04:6e:fc:7a:8c:0c:f7:9f:
0a:c3:c8:39:c2:cf:34:54:93:5d:a4:9b:75:2a:91:
38:a4:0a:9f:ad:71:f2:9d:76:fa:fe:58:f2:28:6c:
c7:ae:ac:21:35:c6:b3:4a:c9:ac:24:4c:94:35:30:
62:a5:63:47:28:2c:cf:f6:1f:6e:d7:ad:bc:4e:22:
17:3b:81:73:12:92:3b:1e:d9:6f:0d:45:fe:30:a7:
5a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DA:85:A9:CA:CD:46:19:C3:DB:B4:83:14:12:1D:28:5A:16:BF:C6
X509v3 Authority Key Identifier:
keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0f:dd:f0:2f:1f:35:b9:f2:4a:21:de:4d:22:9a:ba:2c:1d:
9e:62:74:e9:bd:b8:6c:a5:af:6f:7c:ca:bc:70:15:cb:7f:20:
bb:9c:20:5c:ed:1d:68:b9:bb:69:76:42:af:05:be:07:b6:be:
3e:96:18:c7:03:bc:44:7d:d5:b9:e4:62:8c:81:bd:61:47:1f:
71:2b:83:16:3a:27:c4:cd:9d:ca:af:7d:1d:33:93:f8:d4:e4:
22:d1:51:79:d9:93:15:1e:b0:38:23:3e:58:9b:81:34:28:fd:
8b:5e:0b:40:e7:6e:84:08:c6:13:1c:69:5a:23:80:10:94:b8:
bf:fd:1b:3d:7c:f4:9c:b7:c4:89:05:31:bb:95:2c:d5:b4:35:
e5:82:31:f9:4e:dc:24:f3:07:a5:df:76:ba:ed:09:24:91:11:
4b:e4:4d:08:87:8f:cb:b4:dd:73:48:33:8c:e8:17:e7:6b:aa:
42:b5:d0:89:12:66:79:55:33:cd:b5:f7:6a:4d:7e:72:2d:3c:
63:a7:2f:d9:74:f1:2d:19:69:3f:ac:ab:8b:a1:3d:d8:0e:c8:
1e:30:ea:35:33:80:b0:91:a3:7d:98:09:2e:b4:1e:68:75:8b:
75:30:2d:be:99:9c:a7:6d:60:c2:26:b5:51:15:ff:f2:44:6f:
36:77:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:00 2025 by rpki-client