Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
File: PnIyBI3L0sabqyJbikIhYEbBiyU.mft (raw, json)
Hash identifier: wJFG+ymhtRJaQsqcNttfaniUaJRgysMXIt31B7hVbg0=
Subject key identifier: EA:6B:93:CA:64:27:8A:B4:EA:D7:FA:7C:8F:DA:79:05:7F:65:DA:30
Authority key identifier: 3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
Certificate issuer: /CN=A911CA78/serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
Manifest number: 015A
Signing time: Fri 28 Mar 2025 19:22:27 +0000
Manifest this update: Fri 28 Mar 2025 19:22:26 +0000
Manifest next update: Fri 04 Apr 2025 19:22:26 +0000
Files and hashes: 1: PnIyBI3L0sabqyJbikIhYEbBiyU.crl (hash: Az3fMd8ClupvUgzOrsCZlOURsEQ+G6hMw3Id8RWUY3s=)
2: 1ABB6C4E17DB11EE92B1C26FC4F9AE02.roa (hash: jx7hnJAbOWXi06R8EaUqGVH9j+g4HwGKu5sUmUZqpVQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78
Validity
Not Before: Mar 28 19:22:26 2025 GMT
Not After : Apr 4 19:22:26 2025 GMT
Subject: CN=67e6f6f2-d3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:16:20:bf:16:8d:a1:72:6a:e9:08:e7:34:
f0:a3:e7:84:c5:b3:17:c9:7c:2f:56:b3:eb:93:1e:
aa:ef:87:65:61:08:21:da:bd:16:e8:0d:d4:51:60:
c7:6b:e1:98:03:92:a5:af:1c:33:6e:a6:ce:a5:1b:
70:41:3b:2f:c6:03:72:ea:15:f1:28:c8:f4:78:d3:
a2:3f:5d:20:d8:83:f7:bf:da:ad:8b:57:a0:c9:4c:
21:82:43:e2:bf:d3:77:9a:73:dd:a2:81:06:8a:56:
85:15:32:e2:ee:a0:2e:13:c8:ca:1d:83:e1:69:d1:
84:70:16:b2:c3:5c:f7:72:6d:e9:55:ac:b1:7a:ee:
0d:ed:94:fd:f9:bd:5b:db:b9:d4:80:d7:a9:62:c7:
81:c5:7b:a8:b7:ee:d6:3f:1f:88:40:a2:a6:dc:2d:
41:5a:8c:c7:cb:6a:ca:0f:83:21:d6:c4:10:9a:91:
40:6f:08:84:92:26:3b:41:27:43:53:36:7e:01:68:
02:ef:1b:e5:b5:60:04:de:5c:cc:fe:96:bd:3a:d5:
a0:72:0e:55:2f:54:5c:6d:b6:a6:9c:1e:d9:3e:3c:
ef:f2:ee:a7:27:32:33:ea:d1:f4:f5:08:52:29:40:
ac:21:35:24:cd:d9:cf:24:28:31:af:16:f8:8c:07:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:93:CA:64:27:8A:B4:EA:D7:FA:7C:8F:DA:79:05:7F:65:DA:30
X509v3 Authority Key Identifier:
keyid:3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4e:e8:33:90:5d:2c:57:a4:80:54:84:d8:e2:01:b6:4a:43:
1b:4e:4c:82:9e:a4:7e:a5:11:c2:5c:92:47:c1:90:84:1f:5b:
b4:a8:a0:78:4c:c4:91:09:9a:5a:fc:0b:40:a0:fb:05:a3:a1:
df:d0:81:1b:98:2e:fa:65:fa:6f:e8:25:7e:8c:45:9d:c0:ce:
0c:4c:9d:b4:bd:b4:b1:aa:9e:66:0a:a0:95:06:dd:66:77:a5:
88:2a:11:6f:8a:fa:46:7f:8e:60:d4:d7:c1:a3:69:52:9e:6b:
b2:bf:40:82:e6:ae:e1:6a:01:d2:b0:88:9f:26:85:3c:1f:96:
ed:72:98:26:55:34:09:2d:aa:1f:55:db:72:37:6c:d6:fd:06:
7f:de:ee:ef:00:c1:bb:0c:3c:99:32:d7:c3:46:5b:70:9f:80:
5f:58:c5:e5:de:b9:e3:32:ce:5e:68:9c:d7:64:a4:0e:71:05:
19:6d:c1:81:ee:31:b2:47:1e:40:88:06:24:ae:85:5c:f8:78:
5d:da:54:0f:2d:6d:3d:d9:8a:12:21:27:08:18:a9:e4:1f:f6:
fe:49:2c:70:0f:cd:55:48:2b:94:18:bc:7c:f7:a3:f8:58:20:
b2:c3:e7:e1:e3:e6:c0:f4:2f:da:a5:ea:53:7f:51:ea:38:1d:
30:4e:21:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:26 2025 by rpki-client