Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json)
Hash identifier: jtvdaZtz7YR0ZCLf6HXHnotYaDvkpKBWeg6boeoWviE=
Subject key identifier: 65:B3:0C:C4:95:E9:78:23:A6:50:7D:D0:D7:1E:F5:02:7A:17:F9:5C
Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Certificate serial: 075C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
Manifest number: 0755
Signing time: Fri 28 Mar 2025 16:05:00 +0000
Manifest this update: Fri 28 Mar 2025 16:05:00 +0000
Manifest next update: Fri 04 Apr 2025 16:05:00 +0000
Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: 4NKWJQxS1/7cij+4wtbImlurledYzyJOfDISkek+xcc=)
2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: owavO0XDzj500YGpyqbmjhYipEKAfrWBHBWdBUgrtlU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1884 (0x75c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123BFF
Validity
Not Before: Mar 28 16:05:00 2025 GMT
Not After : Apr 4 16:05:00 2025 GMT
Subject: CN=67e6c8ac-2ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:5a:88:4f:b7:2d:1d:44:08:24:6e:e5:2e:
e0:fb:e6:3e:2b:0a:bb:7e:33:70:fa:4c:a1:c7:e4:
2b:0e:b2:cf:0b:98:7a:35:69:d7:5a:7f:a8:c0:81:
f4:17:3e:2e:45:cd:cb:cc:3f:c2:3c:b4:0d:76:b9:
df:a0:6a:33:cc:65:30:24:8f:18:cd:8c:2d:ae:1d:
7a:5c:0d:38:ad:fb:8e:58:b1:8e:2c:d2:33:2d:fd:
f2:c8:a0:39:63:ff:21:14:34:72:80:58:db:b5:13:
61:ec:cd:ac:8d:c2:f5:35:cc:81:8d:69:c4:39:33:
c7:3b:43:e5:db:64:f9:7d:85:61:54:21:e7:39:32:
02:1b:ae:ef:73:1d:7f:0b:81:b6:7c:f0:24:dd:f0:
a2:61:ec:32:04:d7:c4:2f:ed:c9:80:93:7f:63:e0:
b7:8b:5f:0b:39:bb:a4:58:fd:2f:b5:a0:60:c0:b2:
80:3a:b9:ed:17:cf:2f:16:06:b9:32:66:6b:2e:e1:
29:17:4c:7f:f7:a9:96:06:a7:bd:f9:08:38:1a:7f:
b8:51:44:14:cf:23:61:e0:eb:0e:30:04:ee:0e:ed:
6f:6f:a0:07:37:93:f3:7c:51:ef:2f:98:8a:85:c2:
95:85:42:52:67:13:76:4b:af:15:9b:f3:67:41:8a:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B3:0C:C4:95:E9:78:23:A6:50:7D:D0:D7:1E:F5:02:7A:17:F9:5C
X509v3 Authority Key Identifier:
keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f6:6d:d7:15:86:f0:0c:0a:59:35:8d:9f:d1:5d:64:29:62:
fe:fa:41:fa:28:f5:57:b7:88:e8:2e:c4:34:d1:a8:63:f0:31:
fb:5c:c6:61:29:7e:be:25:bb:36:b3:4e:29:95:c5:15:a3:39:
37:fe:b7:a1:8b:6a:3f:98:c8:82:7c:13:f4:21:91:8e:8f:7a:
8e:57:df:9c:31:f8:e7:bc:17:f9:51:ed:3a:68:de:59:91:6d:
a6:8e:ab:d7:78:0d:6e:c2:ea:02:b9:2c:34:97:9a:59:7f:3a:
d8:c7:d4:d8:b6:ad:3f:50:a0:7f:6f:9a:b5:99:a5:f0:98:5f:
f4:69:3d:e0:f9:dc:c7:03:97:db:66:5a:27:a0:8d:c3:3d:3f:
8d:2d:31:3c:23:39:9d:4e:6b:40:3c:9d:60:3e:86:8f:69:ac:
00:a9:79:5f:f4:1e:62:b9:1d:cb:d2:f3:f8:f9:01:98:08:12:
a1:c0:bc:0f:51:ce:28:4c:38:46:e8:03:49:82:c8:19:a3:ec:
50:ad:a6:86:de:b2:a0:e5:d9:b4:d4:3a:93:fd:d5:c3:a2:45:
9c:1c:cd:41:e9:fd:12:b6:d4:6d:63:9c:30:8c:1c:8c:91:44:
27:72:1c:28:bd:99:66:35:c3:9f:09:11:20:e8:0d:bf:9f:38:
55:d7:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:34 2025 by rpki-client