Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
File: ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json)
Hash identifier: SNDVKBN5Bkoln+nuDCDOsn78AIFvwTXQvveokqLnqkI=
Subject key identifier: 96:ED:82:57:28:51:83:CD:7A:19:13:03:1B:21:58:FA:9D:F0:26:B2
Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Certificate serial: 07D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
Manifest number: 07CF
Signing time: Fri 28 Mar 2025 21:19:56 +0000
Manifest this update: Fri 28 Mar 2025 21:19:55 +0000
Manifest next update: Fri 04 Apr 2025 21:19:55 +0000
Files and hashes: 1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: Z7s4FbHUt5JMCeTYOA6AnN+XU7kdJJ40/TAhPz3XKGg=)
2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: yiF95qxdVC02mMlRMuSXuOtx8PRvp7gaxII4qCM32AQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812
Validity
Not Before: Mar 28 21:19:55 2025 GMT
Not After : Apr 4 21:19:55 2025 GMT
Subject: CN=67e7127c-c831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:2f:9b:17:05:60:e9:23:ef:f1:95:23:91:
4a:8f:eb:53:51:dd:6c:aa:f5:a9:7b:b2:a0:59:5b:
3a:51:3c:60:3b:be:ad:5e:1c:bf:65:95:d3:8b:d3:
19:47:d8:44:a2:b4:19:0a:95:0f:11:1e:a1:7d:1c:
e4:69:98:64:d7:fd:06:42:c8:5d:f8:9a:f5:24:ca:
d3:f2:01:cb:5f:60:74:cd:25:96:33:ae:04:99:51:
ab:e1:35:8a:a0:bf:90:f1:88:12:05:a7:a3:59:09:
b3:d8:22:e4:e0:b2:13:20:42:2a:39:19:a8:1e:a9:
55:c0:39:09:57:08:85:ef:c2:e3:d4:5a:41:ae:81:
80:87:34:d1:8b:2c:c3:69:ec:fd:d6:a9:fa:33:77:
bf:2a:80:df:5b:58:81:9d:b6:50:1f:61:88:16:83:
e4:27:54:32:9e:e1:ec:ee:cd:5e:20:bc:22:dc:84:
20:f9:a7:4a:8e:1e:fd:73:99:7a:3e:0f:6f:61:34:
bb:96:13:7a:37:4a:8b:fd:74:4c:e1:18:d3:44:6d:
cd:d2:82:be:2d:84:01:ed:e8:f3:c8:b1:e2:1c:b2:
33:07:cc:af:42:2e:c6:35:94:a5:5e:28:6a:2e:13:
ed:33:c6:cb:80:3b:df:91:0d:49:5b:84:53:9c:0b:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:ED:82:57:28:51:83:CD:7A:19:13:03:1B:21:58:FA:9D:F0:26:B2
X509v3 Authority Key Identifier:
keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:10:31:a4:80:a2:23:eb:93:cb:51:f0:63:ab:b7:ad:ab:82:
f1:4f:95:13:1d:ac:70:a7:c6:66:c9:fe:c7:d9:3d:5b:2c:8d:
4e:6f:53:61:89:b9:70:b1:15:0d:f9:70:eb:81:3a:9a:86:04:
15:84:ff:85:ca:07:30:57:da:22:46:98:72:cb:4d:1f:3b:47:
49:b1:fe:80:c3:d9:ab:5d:11:7b:51:26:28:1d:3a:f7:ab:d1:
cb:20:f2:19:20:15:c6:4c:42:67:53:26:cd:10:34:e6:f2:b7:
db:fe:f4:b7:8b:ac:bc:3f:34:a2:a1:bf:8a:a3:1a:35:e7:6a:
3d:f1:cf:36:c0:3d:d5:90:fa:64:28:85:a9:73:46:c0:24:12:
84:ba:e9:da:51:c4:d5:ca:67:c1:6d:cb:9a:14:59:f5:38:81:
09:17:f0:30:af:2f:65:a2:7a:ef:93:29:bb:5e:75:dd:e3:06:
47:aa:6d:d4:3a:ca:63:63:64:2c:90:ba:0f:4f:64:da:c4:70:
79:b0:6f:69:2a:29:c2:78:7b:21:7c:64:e1:98:a9:99:19:f1:
06:08:05:2b:02:04:87:f0:c9:3d:4a:0e:ac:bd:64:39:20:d8:
7d:90:00:a7:ce:24:ae:9c:c0:b1:72:13:0a:5a:a2:12:9b:f2:
7c:46:b7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:14:29 2025 by rpki-client