Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json)
Hash identifier: +FQU0JlvsWrHG1OVR2oVsFDt77rVUXJzsZ8mxOQxCkk=
Subject key identifier: 32:E6:85:0D:6B:17:CB:11:5E:E3:2C:8D:9C:84:99:D8:2B:9F:4E:5E
Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8
Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
Certificate serial: 0512
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
Manifest number: 050E
Signing time: Fri 28 Mar 2025 23:51:46 +0000
Manifest this update: Fri 28 Mar 2025 23:51:46 +0000
Manifest next update: Fri 04 Apr 2025 23:51:46 +0000
Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: y7ehVGi/eZeYRaZAq5SaS2Bv/t7QEUwRKMCOWUTqyZw=)
2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 9X0FABgF4N/aMCwLf/2Sir07UctuAOlwN446kkP4Osg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91222FA
Validity
Not Before: Mar 28 23:51:46 2025 GMT
Not After : Apr 4 23:51:46 2025 GMT
Subject: CN=67e73612-5f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d2:e2:be:62:91:48:65:e3:45:e5:c3:1c:f5:
d2:62:a0:2e:47:8d:06:3d:48:02:57:84:25:5c:86:
72:2e:cf:80:fc:b6:ef:a3:1d:68:f8:3b:96:c9:02:
b6:bd:5d:5d:5f:4c:59:ef:fe:c3:13:13:e2:d7:9c:
6c:7e:db:c7:0b:01:44:cd:39:d9:32:4f:40:c1:e5:
a0:fc:1f:64:ca:57:7c:8b:fd:da:10:7d:ad:41:96:
38:2d:f4:25:89:b2:2a:3a:4b:dc:1a:9e:a0:6d:c5:
fb:14:8f:7e:1d:05:91:ac:dd:3b:59:45:3c:ba:e7:
93:aa:be:fa:fd:4a:3b:42:30:93:4a:8d:89:bf:a2:
5d:a4:68:bc:a5:47:63:5a:fd:f3:3c:c2:44:d6:68:
eb:ee:c5:ad:bf:b3:55:b2:a0:d7:11:9a:39:cb:bb:
64:7b:99:a5:06:db:4f:be:bd:d1:96:50:d5:6f:07:
bf:9d:38:52:1e:70:41:ba:70:e1:64:ea:68:a2:8a:
81:51:c2:01:01:3f:9a:ea:7a:cf:b3:52:e0:88:b6:
3c:75:6a:ea:e6:26:79:61:80:ce:51:d8:db:d4:8a:
1f:4d:ed:e7:87:ef:80:a3:92:e1:14:94:5b:70:18:
d0:0b:0f:5f:cc:de:7e:e4:70:c1:7b:30:2e:3b:7c:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E6:85:0D:6B:17:CB:11:5E:E3:2C:8D:9C:84:99:D8:2B:9F:4E:5E
X509v3 Authority Key Identifier:
keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4c:85:f5:fe:7b:ae:75:39:ae:0b:c2:c8:c8:d5:5c:6c:31:
fd:73:49:a4:8e:0b:98:8d:99:5a:64:fd:12:dd:be:c8:62:8a:
96:03:54:75:6a:bf:37:40:ed:99:a7:72:11:ca:8a:25:40:48:
0e:54:d8:95:4c:93:c7:d1:ef:6e:f7:5a:7b:38:57:87:df:46:
93:76:36:fe:c5:0d:16:65:1d:41:fe:98:76:6c:0b:2e:db:f3:
d6:97:e7:16:40:c8:b1:85:fb:95:c5:dd:57:50:e1:38:12:bc:
57:18:12:49:e3:f3:83:96:33:e5:1d:3a:e1:d6:c6:86:84:88:
61:1f:ed:76:39:2d:26:86:d9:5f:1f:cc:86:54:e8:b9:5b:b5:
a7:10:b9:7f:3b:a8:3c:6d:5e:a1:98:de:ec:4c:34:2e:4e:04:
9b:53:c1:a1:4b:0a:fd:2c:69:3e:a9:93:48:97:08:97:40:d7:
2a:c7:bc:18:07:1e:bd:a2:c0:91:8f:25:44:f1:6b:7b:da:4e:
4c:2d:c3:92:b5:90:ae:fc:0a:b4:27:41:22:e2:d7:08:4a:24:
6a:4e:50:73:fa:43:5c:fe:15:79:e5:53:36:c4:9c:f2:3b:30:
a8:d7:18:80:5e:43:8c:68:fb:53:a9:e0:54:78:db:bc:9b:72:
0d:18:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:17:27 2025 by rpki-client