Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json)
Hash identifier: CLqukREdwrxihPVJFNCHCLqoW6fvvagSgyGOji6gMOI=
Subject key identifier: 32:1F:1C:4D:9C:49:10:90:76:7E:3C:5A:E4:DC:F2:85:CA:54:89:8D
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial: 05FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
Manifest number: 05F5
Signing time: Fri 28 Mar 2025 23:11:29 +0000
Manifest this update: Fri 28 Mar 2025 23:11:28 +0000
Manifest next update: Fri 04 Apr 2025 23:11:28 +0000
Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: SQxpQTHp6pTXB9TDSVey9EfQdvfAAKeZEDXAgtOqvFQ=)
2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: gD2pdRxoUHqWRJCmsWGE/SoCkIZoZVizTbKUYmffLCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1530 (0x5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912346E
Validity
Not Before: Mar 28 23:11:28 2025 GMT
Not After : Apr 4 23:11:28 2025 GMT
Subject: CN=67e72ca1-478d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:6f:6a:36:25:89:98:62:71:e7:ab:d6:4e:
f6:11:8a:61:b8:b2:f3:5a:29:d4:9b:9b:81:9f:b5:
eb:40:05:1a:a2:af:e5:63:14:88:72:a8:af:82:dd:
ec:b4:84:82:0d:de:64:e9:7a:6d:e0:58:a3:73:e4:
32:04:2e:e1:80:24:57:45:2b:e9:5b:67:3b:76:e4:
3a:e1:70:27:a7:69:0a:89:ae:31:33:fe:3a:b0:c0:
85:70:20:26:a5:85:5e:40:d7:70:97:c7:42:ce:f3:
22:ca:6d:1a:41:17:ae:1a:91:d0:6b:e9:06:be:75:
55:cc:33:e1:13:e5:23:6d:89:0f:06:42:e7:32:f6:
64:82:ea:7b:96:e0:1c:39:c1:16:e2:da:c2:15:c6:
19:67:52:f6:8a:6b:53:95:c8:21:d0:86:b0:94:97:
c3:b4:71:6e:16:88:56:65:9d:ba:9c:46:a6:5a:30:
05:27:08:a9:70:02:da:da:17:2c:b7:0e:f5:c5:0b:
7d:b7:ad:44:4a:5a:f8:cf:e1:c2:ed:6b:56:5b:da:
b3:87:d1:08:ab:93:0a:44:15:38:29:e5:ae:0f:b2:
83:c4:9c:e4:fe:b7:e7:c2:32:3f:5a:58:e3:92:be:
fc:1c:a6:a3:2e:f5:36:65:90:7a:5a:cf:b2:c5:95:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1F:1C:4D:9C:49:10:90:76:7E:3C:5A:E4:DC:F2:85:CA:54:89:8D
X509v3 Authority Key Identifier:
keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:65:c3:73:c0:53:05:f4:32:fd:5f:fa:8d:f9:1d:29:ad:f2:
93:65:be:0f:a2:5e:62:8e:02:9a:ae:f2:68:32:32:eb:89:9e:
42:7c:d8:ee:50:0b:dd:be:be:2f:fc:c7:07:55:a0:3b:d0:d6:
f8:ab:e1:eb:80:9a:00:a1:69:75:cf:77:55:a5:5d:be:ac:ee:
77:f9:56:48:40:e9:10:bd:10:53:d0:72:70:66:4e:f1:fb:e3:
bb:cc:e2:71:c7:e7:8c:8c:14:fd:e8:c8:b4:0c:93:c8:34:ca:
fe:4c:91:92:70:43:06:9c:99:26:b7:bc:b8:98:41:6a:ac:52:
cd:d3:ab:29:ae:6d:b3:dc:6e:f5:39:95:ac:96:a3:a1:37:c6:
36:1d:81:26:04:b3:31:07:39:ed:2e:57:83:32:0d:59:50:6f:
a2:62:a3:1f:f5:1d:93:f9:39:4a:bf:ab:26:31:3d:51:24:6b:
2d:a7:e8:0d:41:61:49:d5:7a:4e:93:94:01:20:50:55:96:83:
be:66:28:30:65:fd:a0:1c:e1:be:a0:1f:f5:d5:7f:3c:33:6a:
e7:0c:dd:6f:34:95:fe:4b:da:52:c3:42:42:f3:52:5b:11:af:
cb:0b:d5:e9:69:b4:ba:cb:f5:d4:dd:04:42:5a:1b:57:86:5b:
be:65:79:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:40:21 2025 by rpki-client