Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
File: stpsovF-3e60xFAzYfTYgigLyog.mft (raw, json)
Hash identifier: oWNjHvvnN9bAe5EtU2pfza2H6hI0UjN2oWC/8zEIEYE=
Subject key identifier: 12:6F:01:50:7D:44:BA:96:35:BB:8D:1E:A8:95:1E:AA:46:50:2C:0F
Authority key identifier: B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88
Certificate issuer: /CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88
Certificate serial: 07CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
Manifest number: 07CA
Signing time: Fri 28 Mar 2025 21:17:00 +0000
Manifest this update: Fri 28 Mar 2025 21:17:00 +0000
Manifest next update: Fri 04 Apr 2025 21:17:00 +0000
Files and hashes: 1: stpsovF-3e60xFAzYfTYgigLyog.crl (hash: c/f4paERN37xJLvaysXnY3F2QR23jVZFGVDVyM5cu48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1994 (0x7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122FD2
Validity
Not Before: Mar 28 21:17:00 2025 GMT
Not After : Apr 4 21:17:00 2025 GMT
Subject: CN=67e711cc-02be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6b:56:66:cb:91:9c:f8:e1:9d:33:65:d2:9b:
f9:9d:01:1f:8c:85:17:fa:c9:5c:8a:52:cb:73:0e:
a4:50:98:58:5f:fc:4d:cf:3c:c1:1e:c2:fe:c5:1d:
61:75:16:d9:d6:b5:31:ed:8b:ca:16:9e:58:40:b6:
eb:1c:87:52:0f:42:f1:2f:8b:1e:c5:3e:4f:ef:48:
4e:25:e7:77:21:dc:62:75:06:13:1d:3b:db:66:71:
fd:69:59:d4:2d:46:03:25:1c:5f:f9:ea:51:ff:db:
ce:14:ca:6e:5e:1a:36:99:bd:6e:1f:f5:be:19:20:
9b:c1:48:a8:71:7a:0b:96:db:1e:39:8b:be:c8:e0:
53:b5:f8:eb:3c:82:87:80:a1:e7:32:0f:8d:f7:a9:
ae:bb:cb:53:3c:f4:06:4d:9b:69:9b:40:4a:f0:de:
c6:35:f8:f4:54:df:0c:83:7c:6a:4d:aa:8c:97:64:
7e:91:15:fe:ff:54:82:b5:58:0f:b5:ff:66:d1:58:
16:49:b3:6c:99:a3:a4:d6:59:b6:5e:e1:78:40:9a:
c1:64:12:69:1b:46:80:34:e3:14:28:91:e5:33:d5:
a0:82:8b:81:e5:d3:ea:0d:d2:e2:f1:08:18:e6:ee:
8c:ef:4e:f3:77:09:a2:c7:c4:88:c3:41:6b:94:6c:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6F:01:50:7D:44:BA:96:35:BB:8D:1E:A8:95:1E:AA:46:50:2C:0F
X509v3 Authority Key Identifier:
keyid:B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:44:2d:8b:42:e5:c8:8a:06:b9:e4:09:9a:fa:28:fb:3c:ce:
04:bf:df:3e:50:de:9d:9a:51:62:c0:81:b7:1f:f6:55:18:69:
a1:75:01:02:4a:c2:dd:91:67:64:2c:fc:00:2d:64:9d:ab:1a:
99:46:f3:f7:1a:e0:02:3e:66:ae:58:e4:e3:bf:97:fe:5a:cf:
8b:fc:04:69:fd:08:3e:48:15:9e:3d:83:29:60:9c:cb:a2:9e:
34:d9:93:59:98:74:ee:3f:58:9a:f3:15:16:7b:48:b8:6b:33:
b2:30:9c:85:b8:06:96:2f:18:a3:f8:41:bd:1c:e8:54:01:10:
ed:62:e4:fc:ae:82:2a:5b:2b:4f:e5:03:6c:86:3b:ce:b5:a6:
b5:d4:7f:28:aa:e2:d0:f5:0b:78:13:fa:3e:13:c0:0b:3a:9c:
20:31:84:76:10:dd:88:2a:6f:77:3a:6b:a0:89:0e:87:6b:3e:
58:30:d3:11:27:57:bb:97:83:fc:c8:04:fc:3d:2c:28:6e:b7:
66:21:da:57:4a:ff:b2:1d:3d:16:5c:42:50:3e:c0:9f:93:d6:
c6:32:1c:0a:4f:e8:d0:c9:7b:e2:ca:80:6e:fc:31:3a:f2:0b:
ad:7f:21:c2:56:15:a3:6b:eb:c9:67:98:d0:e7:34:e9:4f:5d:
f5:e5:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:16 2025 by rpki-client