Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
File: EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json)
Hash identifier: BZSLC060ATH/c/5N3tmrkrskJOSVcMKWvhAw+Qo0bOE=
Subject key identifier: 1D:9A:80:68:4E:A0:A5:6A:B4:54:46:3C:DE:4B:AB:FA:32:9C:CB:B0
Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
Certificate issuer: /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Certificate serial: 2052
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
Manifest number: 204B
Signing time: Fri 28 Mar 2025 16:04:58 +0000
Manifest this update: Fri 28 Mar 2025 16:04:58 +0000
Manifest next update: Fri 04 Apr 2025 16:04:58 +0000
Files and hashes: 1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: UXgw/oP/l1tBqI7SUEA1jeWx/iIkOe+nPT2EiH69ye4=)
2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: hFvoTK4OtAWXeUzfRY08E0R6vhbINiOuVhDEOiD6rEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8274 (0x2052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123BFF
Validity
Not Before: Mar 28 16:04:58 2025 GMT
Not After : Apr 4 16:04:58 2025 GMT
Subject: CN=67e6c8aa-8289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:3e:96:96:a2:4b:5a:2d:41:52:74:e4:31:
47:65:cc:8e:b9:a9:0d:73:bd:15:8c:05:04:6f:eb:
bd:1c:33:10:8b:f0:0f:00:92:ae:a7:ab:f5:bb:40:
ad:74:85:5f:ab:27:90:96:f3:49:cf:61:7d:99:d5:
49:68:5b:58:e5:91:47:12:7c:cd:3a:34:77:ca:89:
68:09:26:7f:34:1a:6f:58:ce:ef:8a:7b:5c:b4:71:
3c:86:4b:4f:10:5f:34:c9:ac:e5:40:00:0e:3e:9f:
58:7a:6b:1e:cb:17:12:1a:8f:a3:63:e2:3c:aa:ba:
30:e9:72:92:72:f5:3b:bc:f8:e0:07:b3:02:f2:1c:
cd:8a:7d:82:2b:3c:e1:12:2d:85:28:22:07:40:d1:
3e:d8:36:83:67:79:19:85:04:58:f3:d5:c3:30:d0:
1b:cd:f8:4d:a5:51:fb:79:86:86:10:db:ec:49:8d:
df:98:bb:a0:34:58:94:29:9d:91:2d:5e:0f:48:53:
26:6f:68:84:19:9d:04:01:7b:fc:c2:36:9d:f3:fc:
ef:e7:fd:3c:8d:2b:ee:86:f8:92:c1:11:af:e9:76:
95:8e:a9:78:e7:35:97:50:80:74:b1:fb:03:04:64:
41:93:5f:46:2e:ce:f2:9d:79:4a:e2:4b:8a:c1:95:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9A:80:68:4E:A0:A5:6A:B4:54:46:3C:DE:4B:AB:FA:32:9C:CB:B0
X509v3 Authority Key Identifier:
keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8c:61:4f:e5:5f:70:89:d8:4d:12:47:cc:25:34:4d:de:5c:
49:c0:95:a8:21:92:d4:fc:7a:b1:90:da:9d:7a:2a:e2:0e:98:
db:26:ff:33:82:80:fd:3f:fb:cb:de:98:d3:76:9d:f8:c4:d2:
7c:e5:61:31:0c:c9:05:7d:63:8c:5d:2f:ab:b0:55:3c:1f:65:
66:1e:eb:10:54:f8:07:42:80:db:96:da:2e:6f:7d:8b:fd:08:
42:3a:8b:cb:86:6d:28:94:c9:4b:95:01:39:32:21:51:9d:8f:
17:7c:cc:1c:cd:36:c4:0f:af:7b:bb:f8:01:ad:08:94:a0:4a:
50:e1:93:be:b6:5b:4f:68:bf:a4:5d:47:fb:02:73:78:69:6f:
38:47:9a:5c:06:54:25:5e:2d:c9:9f:80:75:82:2e:33:c8:19:
1f:d5:4f:1a:d6:b6:b6:f3:85:f6:f7:ce:84:cf:ae:b1:18:81:
ba:b8:e7:86:9a:d7:b6:3f:2a:af:d9:83:a3:97:30:74:90:c9:
d8:55:9f:75:39:a8:cd:15:50:ef:b5:d9:ef:69:47:a6:6d:29:
76:c1:d1:a9:6b:70:d1:cf:f5:6d:52:a7:87:06:8b:e0:73:76:
74:81:e9:ce:09:5e:40:5f:27:77:7d:c7:58:4d:36:8e:20:a3:
e4:5a:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:08:10 2025 by rpki-client