Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
File: EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft (raw, json)
Hash identifier: nwh+lnsInPMRPOla8HIoZuNJv9DMlOP3hqBHqOsWi1o=
Subject key identifier: E2:D7:73:93:9B:D1:4A:5F:60:AA:F2:A9:35:FA:D1:52:CE:61:A5:30
Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
Certificate issuer: /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
Manifest number: FD
Signing time: Sat 29 Mar 2025 04:31:24 +0000
Manifest this update: Sat 29 Mar 2025 04:31:23 +0000
Manifest next update: Sat 05 Apr 2025 04:31:23 +0000
Files and hashes: 1: EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl (hash: fKCbNeacubwYeeowU5UL6Egn4lOjWTZPuXQ+Y+iItPM=)
2: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (hash: r83+P5wwwiIwwYZo3ZZK7LMVTjywGsoMBTEhdRdJ9rc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A1FC
Validity
Not Before: Mar 29 04:31:23 2025 GMT
Not After : Apr 5 04:31:23 2025 GMT
Subject: CN=67e7779b-5064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:7a:8e:f5:99:d6:28:80:4d:ca:f9:99:77:
29:1b:12:79:47:80:f1:2c:c6:35:ea:b6:9d:ef:0a:
5c:11:da:33:af:f0:ff:75:3b:0c:d1:d7:e7:58:e3:
88:f9:12:29:5b:72:64:c8:6e:a0:43:10:2f:31:3b:
8f:20:00:f6:ed:fc:15:b2:5f:c1:d4:25:a9:5d:40:
07:f4:d8:75:dd:06:8e:5e:9c:0b:57:56:8a:1b:7e:
bf:6b:63:0b:ba:c8:90:ad:36:df:ab:65:5d:e3:f9:
3f:07:36:58:23:66:2d:d0:1b:7f:64:2b:40:73:f3:
6d:c4:1e:83:c6:dd:f2:7d:bb:c4:5c:eb:92:f8:4b:
30:bc:08:da:55:36:ae:af:1b:91:14:5b:d6:40:fa:
9b:11:f5:e7:ab:8c:2a:02:3e:92:50:52:9a:57:b0:
d4:d0:56:f6:a5:b5:55:45:80:9b:a6:84:09:6c:5f:
f5:9b:26:11:24:a9:92:79:e5:13:84:08:a4:01:b3:
b8:96:52:c9:e8:ed:f5:4d:f7:b7:8c:95:c1:32:79:
3b:cf:55:98:c2:24:97:da:ce:38:e4:72:ea:11:ef:
0b:8d:c2:9c:b9:53:c3:91:a1:5e:32:90:73:58:45:
ab:5b:3d:1f:d5:38:e1:93:80:11:f5:9c:95:42:a9:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D7:73:93:9B:D1:4A:5F:60:AA:F2:A9:35:FA:D1:52:CE:61:A5:30
X509v3 Authority Key Identifier:
keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:aa:cd:52:ff:87:a9:d1:ab:c7:e3:fa:92:d7:17:7e:04:17:
e3:59:a2:33:fe:ac:49:4a:c9:81:91:b8:83:20:e2:5c:56:0f:
11:62:bd:c6:9f:45:2e:33:e5:30:06:e4:79:db:38:8f:98:24:
d6:94:51:6b:25:5e:1f:68:2e:33:bf:a4:0e:a6:13:39:1d:0d:
06:c4:2d:ef:b2:37:02:0f:53:5a:ad:77:22:86:d5:82:32:0c:
c3:0f:bd:b1:2c:a8:e1:45:1f:40:b6:ae:85:24:a5:07:7e:16:
99:f2:77:b4:82:7e:32:91:da:e4:f3:1b:ca:49:52:9c:27:b4:
47:74:e5:65:bf:de:f7:1b:8a:b1:b1:e8:66:a8:ca:52:42:7f:
e7:dc:4e:d8:18:5e:a8:ca:a8:b0:9e:7e:7c:6d:e9:3b:a5:53:
a6:c9:a1:74:a5:0f:c4:87:fa:45:65:5f:37:83:55:54:73:e9:
7a:5c:a5:c6:b0:a2:0d:72:10:93:29:15:10:fa:d5:6a:d4:02:
cd:15:de:8d:67:02:5f:73:f8:86:ad:ae:de:0a:8b:97:f3:db:
be:65:c5:61:dc:23:5c:2e:c8:aa:e1:62:b8:a8:ce:92:ea:a8:
47:1b:5b:84:97:69:aa:63:b9:d4:c4:0f:59:c3:6d:ef:28:ce:
08:31:a7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:23:34 2025 by rpki-client