Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json)
Hash identifier: NJ9GkXnH4aMK3N5TO9D/NpSngCuZC2kuYgynHpnG4pY=
Subject key identifier: F0:E2:B9:29:1B:5F:C5:9F:62:07:31:D7:1B:88:9B:8E:08:B0:A6:60
Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
Manifest number: 024F
Signing time: Sat 29 Mar 2025 02:04:31 +0000
Manifest this update: Sat 29 Mar 2025 02:04:30 +0000
Manifest next update: Sat 05 Apr 2025 02:04:30 +0000
Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: x0SNq7SPqyGdnunPwMiyWLgLw448YPtg7UqACQB1rx4=)
2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: NQf56Uj9m/23kHcMdcevpS6JxvdYxcKJxC0qqxSbed4=)
3: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: bsnKJQWxF5UUZ+STFoaUleWe8G1krXm9q3cPKIQEWa4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912527F
Validity
Not Before: Mar 29 02:04:30 2025 GMT
Not After : Apr 5 02:04:30 2025 GMT
Subject: CN=67e7552f-749d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:41:c0:40:8b:14:3f:da:8c:84:c0:ea:be:3f:
e4:14:90:3d:6a:e6:f9:43:98:9e:98:9e:3b:99:3e:
8f:67:49:02:88:62:5b:8f:01:a8:f4:70:c6:dc:9c:
2c:06:8d:93:77:5e:a3:f5:f9:88:ad:71:e7:62:24:
e9:59:a4:0f:af:fa:f6:b8:ad:2a:4d:51:03:b8:3a:
e5:5e:2a:35:51:65:fd:70:e8:98:20:cc:5c:6c:91:
2f:ba:e7:cf:be:e6:92:be:a8:2d:48:ba:11:ce:4f:
49:08:64:0e:4b:17:b5:56:a2:8e:04:79:d1:b7:0a:
76:36:95:28:88:af:e4:ce:9b:f7:03:79:3b:31:cd:
78:ec:b1:7c:90:c1:6b:b9:f4:ca:c7:81:fe:ff:55:
82:64:ec:83:86:59:0f:7a:00:da:41:02:ab:8c:80:
0f:a4:98:63:a7:96:ff:e5:5f:2c:d4:15:a2:26:8c:
60:18:7d:41:33:8b:d7:36:fa:9d:4e:47:b3:cb:6f:
ee:f9:e3:a0:a6:31:d1:ac:c3:4f:4d:1f:38:4a:e3:
a2:d0:c9:60:83:9e:4f:a9:5a:63:c1:0e:e6:3e:05:
37:85:cc:9a:a0:fb:bd:1b:50:b8:bb:f0:15:47:49:
ae:ec:e1:1e:da:2e:ad:19:6c:05:8f:8b:ef:cb:d0:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:B9:29:1B:5F:C5:9F:62:07:31:D7:1B:88:9B:8E:08:B0:A6:60
X509v3 Authority Key Identifier:
keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:36:5e:33:08:4c:18:60:0f:32:3c:e2:0e:75:6f:26:b6:b8:
ea:3a:5f:df:a5:1f:63:1c:2c:77:7c:61:8f:e5:29:a0:c4:ad:
f4:dd:f2:6c:7a:26:0b:61:5e:67:76:43:66:66:b2:1d:85:88:
6b:54:fa:76:a5:fc:56:e2:04:80:3b:8c:b3:49:fe:4f:43:be:
39:c7:9e:1b:c8:9a:a0:13:b6:0c:c1:0c:89:1b:06:bd:c5:5f:
84:64:90:a1:fa:4f:43:0b:24:de:b4:07:ad:49:ab:7d:f8:cb:
1f:e2:8d:29:87:f9:72:e1:bb:ab:4b:4b:fb:34:27:c6:ee:5a:
95:fb:1f:4e:41:66:c3:83:79:a0:0c:e2:44:6c:e7:cb:ca:9a:
82:0a:12:72:ef:c9:d6:e3:18:d7:dc:2c:26:3a:c9:22:e8:85:
9d:9f:29:43:6d:d0:66:b4:0b:42:be:32:8d:28:ad:ad:8f:82:
f3:f9:54:49:f5:b4:69:fa:24:e9:71:e7:b2:ef:21:7e:54:26:
df:b2:84:c2:82:b0:5c:4a:d5:67:af:c2:6a:ce:01:06:06:af:
63:4f:22:61:ec:ad:17:40:fd:bd:af:f1:5e:04:c6:09:7f:b5:
b9:a4:34:74:50:33:1e:10:4c:f5:98:ab:02:dd:e3:92:2f:7e:
20:e7:db:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:07:48 2025 by rpki-client