Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft
File: baLnsgc31v3aKTEYAyM4Tcf4AXI.mft (raw, json)
Hash identifier: 3JhvL0RzYSztrvV8JKiz7lhnKyHrpfpLcAdbGR9AfTQ=
Subject key identifier: 9B:90:12:55:F1:15:36:15:C7:11:AD:39:31:FA:9F:9B:C7:5C:86:99
Authority key identifier: 6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72
Certificate issuer: /CN=A911D415/serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft
Manifest number: 0115
Signing time: Sat 29 Mar 2025 04:17:09 +0000
Manifest this update: Sat 29 Mar 2025 04:17:09 +0000
Manifest next update: Sat 05 Apr 2025 04:17:09 +0000
Files and hashes: 1: baLnsgc31v3aKTEYAyM4Tcf4AXI.crl (hash: yVdYGSyaD/WLRgeCXVlZmzkl5d2EtPV0UGrwcsFI614=)
2: B2B7B96067BA11EE99370352C4F9AE02.roa (hash: P/WWt5eI8v2C+zoec4Zd9OnVnDcSJ3bbXF6r7+A0KgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D415
Validity
Not Before: Mar 29 04:17:09 2025 GMT
Not After : Apr 5 04:17:09 2025 GMT
Subject: CN=67e77445-db5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:50:b7:cb:0a:61:4f:c9:ef:6b:2c:44:f1:
7d:98:05:f8:23:2d:f1:fc:41:73:1d:66:61:da:a4:
ae:15:86:85:c7:70:15:6a:b3:b5:16:7f:d2:44:e6:
4a:77:0d:92:38:da:9d:63:c9:f5:3f:b6:a7:a0:d3:
07:f3:d5:72:77:50:77:af:d8:f9:cd:52:57:50:94:
be:fd:02:aa:3b:91:05:f9:f6:15:15:08:b6:e3:0b:
8c:21:d8:ba:f5:09:c4:5f:2b:c1:e2:5e:10:75:46:
66:f6:58:13:33:bb:68:44:5d:fc:b7:83:7f:a8:e8:
aa:78:5d:c5:fc:77:2a:94:c9:7e:73:05:29:e4:48:
4a:5b:c1:71:1a:e0:0d:87:49:5f:97:00:5d:85:32:
0e:e0:8c:f4:fa:8d:40:da:ac:56:e2:04:14:3f:99:
b6:82:30:1b:10:7c:af:67:9a:7d:b1:18:e7:e2:58:
6a:be:d3:65:5f:d2:02:17:50:5e:e5:90:04:e7:b8:
75:f0:49:28:00:bb:fb:3f:91:35:a2:80:f7:8b:54:
90:6d:1a:53:74:c9:ba:26:46:04:10:cd:50:57:3f:
38:85:45:48:2d:48:63:85:3d:b1:88:4d:d7:d8:94:
7e:c0:8a:07:bb:e4:24:f4:8b:33:60:55:35:14:fb:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:90:12:55:F1:15:36:15:C7:11:AD:39:31:FA:9F:9B:C7:5C:86:99
X509v3 Authority Key Identifier:
keyid:6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:3b:34:8c:f2:8c:79:cd:be:bf:f0:a2:00:31:cd:29:1f:57:
9a:c5:9f:9a:cc:a3:42:57:d1:45:b9:c1:dd:75:c3:4a:f6:c4:
48:f9:34:c7:a4:b9:7d:8b:cb:a5:8c:2f:b7:d9:68:fb:34:1c:
6d:af:60:2f:c1:09:78:1f:29:0b:0e:3c:d3:10:a7:9a:3f:c5:
13:00:d1:29:ca:e4:42:2f:49:dd:c6:3a:00:91:57:66:c5:d1:
0e:8b:51:96:c9:f8:be:fd:b2:9d:df:87:03:48:8f:ca:89:61:
ce:d9:db:99:8e:28:5e:d4:7b:08:3a:89:5e:be:41:f3:e9:30:
c6:f0:a7:bd:64:39:22:c8:3a:ca:47:9a:2d:bf:fe:af:ca:fb:
3a:6d:1d:59:4c:7f:ca:e4:90:4e:75:fd:64:01:b5:34:b2:26:
60:f0:37:53:aa:7b:b3:83:c4:55:dd:c3:bb:50:10:ed:0e:7b:
b1:1e:d8:ce:68:20:5f:60:31:10:66:24:ba:87:d5:1a:a7:79:
dc:aa:12:06:d2:58:88:ee:98:b7:6e:9b:8e:dc:49:b9:00:de:
1e:c7:d1:09:ac:e1:49:73:d0:b5:9e:2b:f5:09:5c:56:92:0e:
71:c3:29:34:d7:cc:cc:81:2d:82:62:d0:6f:29:30:80:40:24:
2e:6e:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:47:23 2025 by rpki-client