Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
File: P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json)
Hash identifier: pXLfox3Cpo2pTSRN6jEQZcfzPccpOqtT2kTul7cNoc0=
Subject key identifier: E2:76:58:F2:8A:11:F2:35:9B:9C:41:36:D2:70:AE:CC:0A:CB:4E:FE
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Certificate issuer: /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
Manifest number: 029E
Signing time: Sat 29 Mar 2025 01:47:47 +0000
Manifest this update: Sat 29 Mar 2025 01:47:46 +0000
Manifest next update: Sat 05 Apr 2025 01:47:46 +0000
Files and hashes: 1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: sT/hPUk3dTLclfI7VfvWOD+Ivd+olp7WGdVYMR7IC+4=)
2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: kddDiY1SaBXbZLYfj0lZgL5nuCOTpHEBUPrzkMRd/3M=)
3: 38813674CA6811EE9891A565C4F9AE02.roa (hash: VaWJ6J0IlQoYXLmwhQtNPeXFzSE+FlLg3wqm3Amu1U8=)
4: E26E62FC008211EE9714031BC4F9AE02.roa (hash: +KyX9vvCwN+wQz/+dPxZBeEKewfgwPoob9Rj+QTsatE=)
5: 313960C04B1611EEABEB165BC4F9AE02.roa (hash: V/kLIJF72EbkRxner8trjaHxjqjLSORXYEwlwdwNr6I=)
6: E35980B0591B11EEB8B55278C4F9AE02.roa (hash: UvUYjmVMRyKH2JJzg00ODGpsfs1qdbqhDd2QCdDIfg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A646
Validity
Not Before: Mar 29 01:47:46 2025 GMT
Not After : Apr 5 01:47:46 2025 GMT
Subject: CN=67e75142-cd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:2f:8c:22:fd:bd:65:ca:49:af:d3:84:6c:
4f:b4:ec:7f:e5:d9:a6:37:4e:55:a4:b0:b6:f4:1d:
c6:49:23:49:93:04:a7:b6:9a:86:78:e5:55:ca:0a:
69:b3:ec:73:f7:e8:80:a1:db:ff:74:24:79:f3:89:
e2:d2:0f:b4:a5:c2:ce:c5:47:87:f3:a4:1c:7a:5b:
29:c1:4e:0e:fd:0d:db:39:c0:a9:06:93:77:aa:97:
f1:bd:97:f4:2d:7c:29:6d:32:bd:3c:b7:4c:cd:fb:
db:5f:ec:75:f7:b3:f1:cf:a3:4d:c4:a7:ec:56:7f:
d1:d2:33:a4:9f:f5:fb:30:38:e6:56:e8:96:d1:1d:
1e:f0:2d:4e:df:2b:9b:7a:0e:e0:43:ac:41:f5:48:
a2:7b:37:b3:58:ed:ef:73:b7:4f:75:f1:41:e0:87:
15:96:1a:6c:94:15:d8:c9:56:66:82:d1:f0:6a:f4:
87:ea:67:da:08:6d:8d:9f:ac:96:3a:ea:fe:b2:17:
3c:e4:5b:fc:fd:fe:64:9d:8d:31:ca:df:1b:93:03:
a2:6b:11:64:d1:c3:98:f3:5a:9d:86:ec:d5:b3:42:
33:e8:25:c6:36:a9:2d:92:77:77:f6:0b:df:7f:49:
8d:d2:c8:2a:47:53:ff:64:d7:e4:5b:63:0e:6e:7b:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:76:58:F2:8A:11:F2:35:9B:9C:41:36:D2:70:AE:CC:0A:CB:4E:FE
X509v3 Authority Key Identifier:
keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:a3:02:d6:50:7a:15:42:bc:85:f4:75:c6:3a:fe:9d:37:69:
83:b9:29:91:da:17:f2:f6:8b:6f:e3:b3:c7:d6:bf:4c:67:be:
14:9a:e1:31:0c:8a:ad:8f:39:e2:9c:da:29:d2:aa:36:b7:98:
f4:bd:40:be:d3:62:9d:64:9d:7c:03:93:35:03:0d:e9:60:32:
36:4e:6a:d0:6b:4a:93:23:bc:b5:1a:46:49:ae:de:ab:e3:f2:
56:09:1c:f2:7b:99:9b:0f:fa:a1:3a:ec:4f:e6:8d:4c:41:9f:
a0:f8:67:f9:27:45:eb:8f:81:ef:1d:bb:51:b0:0d:94:f9:31:
b9:22:2d:0d:e0:bf:df:0e:06:32:5b:0f:86:0c:6f:47:6e:6b:
97:b0:5b:d3:1c:07:49:28:cb:5b:c0:40:be:a5:d9:1b:c3:cb:
d0:44:77:99:c4:4d:7e:00:86:70:ab:f6:be:ad:55:d7:61:f6:
2c:8f:fa:89:66:0e:ea:ac:9e:a3:b6:1b:68:8e:75:c3:d6:cc:
81:e8:15:6b:55:26:f5:9a:71:13:75:65:04:2f:16:5e:67:48:
d8:b0:d9:c7:90:5a:96:4e:60:40:02:41:f3:51:2f:fe:d1:5d:
6c:a5:89:54:3c:a2:a2:68:ad:54:87:2e:c2:1d:af:23:77:f6:
9e:8b:43:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:59:32 2025 by rpki-client