Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json)
Hash identifier: OKVz6ocQwCfUyBTsc/QHl6ZVWLrlreiU2BSiVrGbBGI=
Subject key identifier: 98:59:E0:43:AE:44:21:FA:36:73:26:82:84:D2:02:17:80:D1:B6:1D
Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Certificate serial: 0DD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
Manifest number: 0DB1
Signing time: Fri 28 Mar 2025 18:03:41 +0000
Manifest this update: Fri 28 Mar 2025 18:03:40 +0000
Manifest next update: Fri 04 Apr 2025 18:03:40 +0000
Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: cqaQqmpsZAsWN4opJ6J5O4tS/3921trRnZYERs9ApQQ=)
2: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 8a6WJtEg8FJ5eHnpvgMwqod0UL5e0zTS0SwjCaK0jd4=)
3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: kN9kZZVIv74yYHGXDsanuB3xPPBPu4OVgy2TpSGU+PU=)
4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: YggXfy20kvjf1iFOsIwuuVFkMi74/bpO/23VT4jrnTE=)
5: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: n/ZkcBxXbOU1wyzDS48DMJkcfdrM8k6k+BibFqk5ai8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3540 (0xdd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5B4
Validity
Not Before: Mar 28 18:03:40 2025 GMT
Not After : Apr 4 18:03:40 2025 GMT
Subject: CN=67e6e47d-33fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:8a:02:f8:33:25:44:a7:a7:77:6f:b2:ad:
16:31:ef:e4:6c:76:d4:25:7c:f1:d3:0e:16:92:a0:
a7:57:9e:2c:db:0d:48:16:71:f9:ce:ac:af:e6:0d:
d5:d9:11:fe:99:9b:d0:cf:8e:ca:36:ed:66:34:36:
3b:ea:d2:24:df:7b:74:2d:db:cf:ad:fc:cb:73:dd:
1c:3b:a8:72:0b:04:e0:4f:33:49:ef:03:46:16:d3:
a7:e3:8b:ea:42:c7:32:19:59:aa:e6:98:6d:2d:8e:
e8:04:fc:73:da:57:9d:92:b8:35:c1:25:53:9b:f9:
fe:65:fc:da:12:47:4e:72:5c:e5:c7:3c:45:6d:50:
a2:7f:fc:87:77:80:35:7f:b2:8d:e0:58:21:2e:c1:
1f:5b:f0:9d:7f:c2:a7:e6:7a:d4:d1:eb:ec:ea:d3:
ce:4b:fe:17:45:50:62:4e:8f:af:e9:a4:6c:40:67:
03:f3:ee:bf:8d:d7:e2:ce:44:69:81:86:aa:04:88:
32:49:94:cc:c9:16:dd:de:58:25:11:78:7a:8a:71:
73:3d:7b:01:2b:ba:4a:a0:65:ac:99:d1:7b:07:46:
6b:57:63:c4:66:92:fe:3e:8e:0f:77:c3:6e:da:0b:
9b:a3:77:9b:01:c2:1c:36:3f:55:69:e5:1e:db:18:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:59:E0:43:AE:44:21:FA:36:73:26:82:84:D2:02:17:80:D1:B6:1D
X509v3 Authority Key Identifier:
keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:06:a3:94:e3:c7:a9:4d:6d:dd:5a:66:6c:fc:3d:c7:d1:a3:
03:f3:45:9a:f0:0a:c9:83:d3:f2:87:fe:51:05:03:99:e4:b8:
d5:89:e1:e5:23:48:79:19:93:fe:10:a4:87:4f:00:1e:fb:30:
61:f6:d1:dc:f1:f9:c1:fb:59:69:55:20:ee:bd:ce:c9:3d:bf:
e0:e5:10:a0:24:cc:c2:c3:4c:ad:17:1d:93:39:33:25:e0:b9:
35:df:ea:ba:2e:d3:31:3d:60:49:4f:77:7e:88:66:db:7e:83:
0a:15:79:64:08:05:2f:67:52:03:5a:50:81:3f:ce:70:a2:09:
94:1d:22:47:da:a8:58:9f:e0:ad:20:4c:68:25:21:92:0b:db:
aa:e8:f4:70:7c:99:27:04:73:15:9e:11:a3:66:00:04:20:9d:
a9:61:56:4b:f2:b2:cb:f7:5e:d2:de:7e:23:e2:0d:06:eb:b3:
e0:73:42:5d:98:7a:39:cc:98:49:f8:e7:5d:e5:9b:de:82:ff:
f0:86:77:b9:20:b0:6c:41:35:cd:82:42:72:76:25:ec:61:87:
0e:05:f8:95:1c:a5:f1:13:7f:70:0d:7e:13:75:ae:8f:61:32:
18:19:1f:1f:ca:ee:1e:4d:dc:86:91:be:cb:11:0f:e0:2e:59:
f2:16:32:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:28:47 2025 by rpki-client