Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
File: aFlbmOTCezC6ozHOqscmF2fLkus.mft (raw, json)
Hash identifier: QPtf2Dd+u1picSdpcP0isQMjSFbIrHkinwz7NZTagRg=
Subject key identifier: F7:CD:94:67:80:30:E0:3C:49:17:02:CA:EA:9C:E1:2E:C6:39:DB:9B
Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
Certificate issuer: /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB
Certificate serial: 0642
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
Manifest number: 0636
Signing time: Fri 28 Mar 2025 22:54:18 +0000
Manifest this update: Fri 28 Mar 2025 22:54:17 +0000
Manifest next update: Fri 04 Apr 2025 22:54:17 +0000
Files and hashes: 1: aFlbmOTCezC6ozHOqscmF2fLkus.crl (hash: UT8P7MmfiFo1B8LTTgzSvdyS2zGKkiyGgdEdBSrit1c=)
2: 8D20F290411811ECA0929516C4F9AE02.roa (hash: H4rCHNTwrLDXBPWNh+1x9w51oi/Ty9c8TNS+dkVYHKE=)
3: 8D23BDE287C611EB8C8DDB70C4F9AE02.roa (hash: OAOhBdws2Og/Ca7gVwngPo7rjcHZWaqTFgTJSHrV1uM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119AE2
Validity
Not Before: Mar 28 22:54:17 2025 GMT
Not After : Apr 4 22:54:17 2025 GMT
Subject: CN=67e7289a-d947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:74:83:cc:5d:1d:32:11:75:ec:a7:e7:ad:
97:63:7b:f2:08:ae:79:3b:d5:48:cd:56:b9:26:cd:
57:c7:47:46:4b:ed:82:cf:90:ef:a9:c5:d8:67:3c:
e0:ba:4f:0c:a8:c3:6c:c3:a9:c1:0e:73:db:40:ba:
64:2f:12:85:1c:3e:87:1f:42:10:ad:7c:a9:41:ef:
07:23:c7:1a:8b:5c:90:4a:1a:ed:74:a9:a8:0d:c6:
aa:de:b7:49:bc:e3:8a:8a:7f:8a:e9:a1:e6:48:79:
a7:e1:3e:00:8a:07:dd:0e:ca:8e:71:41:3c:4a:80:
4e:90:51:93:17:70:dc:dd:7b:57:e0:60:f8:66:52:
f1:72:fa:11:8a:80:01:fb:10:0b:cd:ec:0e:56:b9:
76:15:dd:e4:41:aa:a4:c9:22:16:7a:67:5a:18:be:
f0:e6:9b:86:54:c0:0d:a1:ba:60:34:f3:5a:05:b0:
c9:06:07:06:8f:29:0a:2e:e5:5a:54:ee:c5:56:32:
6a:1c:6f:3a:5a:fa:0f:6b:3b:e6:7b:54:fd:62:7c:
d5:8b:6a:9a:29:c2:66:b1:b5:52:60:6c:00:24:c5:
64:7f:25:8b:66:5d:dd:69:7d:32:a4:16:fb:f6:ce:
4e:0b:22:39:95:48:bb:1c:f5:ed:cc:3a:d4:8b:6b:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CD:94:67:80:30:E0:3C:49:17:02:CA:EA:9C:E1:2E:C6:39:DB:9B
X509v3 Authority Key Identifier:
keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:4b:0e:f4:b4:4c:c2:8e:09:06:32:b8:be:01:f9:ad:b8:ae:
79:5f:7c:46:34:cc:b2:b2:cf:e6:7b:1d:86:69:cc:a4:1a:db:
f6:16:72:17:63:53:18:80:a7:d7:bd:69:c4:6a:0a:52:54:d4:
1d:b0:6d:c1:b2:2a:47:f8:46:53:59:86:ea:3f:76:e6:e8:97:
52:6f:e7:fb:89:50:2d:fe:81:2d:5d:a3:20:1d:1f:a8:ce:f0:
70:82:36:3e:33:aa:ac:f0:03:94:8c:86:16:47:ce:4f:e9:31:
61:76:56:52:8d:22:87:d3:0c:ee:f9:3f:1a:5c:17:4c:6d:dc:
66:18:e3:e2:3c:3d:7c:12:c2:60:69:16:5d:40:ab:39:2e:f9:
08:e1:1e:39:fa:1d:3f:90:93:78:3d:ba:26:f7:d0:05:6c:ca:
8e:fc:37:38:f8:05:10:01:03:45:7c:73:a4:2a:d0:16:2d:01:
62:5c:cb:a1:ab:4d:89:b2:f1:ef:3c:91:f2:d7:ab:0d:5f:e9:
0f:3e:f0:f3:5c:7a:94:ec:a9:fb:7e:ec:e1:60:46:d4:02:f8:
4c:40:1f:ff:b7:37:6a:75:87:a6:f2:39:34:ea:53:cf:4c:42:
4e:a1:ab:77:04:59:a8:57:ca:da:d4:98:6e:29:b9:69:9e:ed:
fa:99:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:06:32 2025 by rpki-client