Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json)
Hash identifier: TjTMcI520ljRR6rkG2UZxAgr8+GDYgp6qYbPXV/5K50=
Subject key identifier: 62:44:FC:52:7B:5A:3B:0A:B3:AD:61:10:4C:34:0F:83:CD:F7:B7:C9
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial: 07A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
Manifest number: 079C
Signing time: Fri 28 Mar 2025 21:36:56 +0000
Manifest this update: Fri 28 Mar 2025 21:36:55 +0000
Manifest next update: Fri 04 Apr 2025 21:36:55 +0000
Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: O3IWem5IsITsAghMc8pVEvPHcmKn4z7O2RE4RR+nJiE=)
2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: lS99nYEJf47mH+uz3vQLejaGLFETexj9dK3L1OTP7SM=)
3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: +9tCipDB0aaHUVuA7yo8ZYQuS8o9q/CaWZgtKqaXci0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B0A3
Validity
Not Before: Mar 28 21:36:55 2025 GMT
Not After : Apr 4 21:36:55 2025 GMT
Subject: CN=67e71678-5db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:3b:f5:3f:6f:e9:d9:c9:58:79:2f:27:34:
e7:7e:39:d5:28:01:6a:6c:6b:84:8a:c6:1a:5c:53:
3f:e4:48:b7:03:12:7c:f4:24:f3:c4:65:90:39:d5:
e3:60:7a:9c:1b:b4:0f:8d:90:3f:49:64:e3:f3:aa:
3a:4a:91:e0:0c:d2:f3:a8:bc:d0:24:b1:e1:37:cb:
f1:05:78:09:2f:fd:2c:fa:ce:08:0e:62:73:79:2a:
88:62:a7:28:c4:08:17:6e:80:c9:a5:8a:c4:cb:34:
6e:84:3f:86:a6:8b:8c:7a:a3:49:1c:5c:60:65:39:
c5:7a:c1:f4:c5:92:99:b6:3a:f7:a5:72:ef:e7:6f:
06:4b:bd:dc:9e:49:e9:98:d6:14:6e:77:a6:c7:46:
f5:86:92:a6:83:ed:53:88:0e:4e:0a:82:0a:15:be:
fa:0a:1f:06:43:76:2a:99:10:75:c6:e6:61:ac:ec:
0b:16:e6:8a:cc:bb:47:08:37:c0:09:00:73:33:c7:
bc:60:a8:eb:01:8e:5f:28:51:95:a7:ef:86:f3:20:
73:6b:f3:f5:d1:a3:e8:3d:3e:1e:9d:55:07:b6:d9:
b0:11:8f:c9:ac:93:3b:c5:2c:81:5f:14:15:81:18:
61:ae:09:68:7b:18:b0:4e:14:ef:02:f6:5c:97:87:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:44:FC:52:7B:5A:3B:0A:B3:AD:61:10:4C:34:0F:83:CD:F7:B7:C9
X509v3 Authority Key Identifier:
keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:62:69:5f:db:e0:9e:96:af:5e:c0:06:e7:13:68:1d:6f:71:
f1:56:73:fa:46:41:32:a2:57:d8:45:b2:44:b7:b3:84:30:d6:
4e:40:6f:51:28:17:fe:33:25:49:1e:e6:1b:86:7b:66:4d:a1:
7a:6e:30:c2:58:6c:ef:e8:81:fc:0c:f3:7d:a5:f4:54:e0:5c:
12:13:ed:5e:c1:11:32:4b:4d:61:a2:1b:e6:fa:99:c9:21:2d:
96:0e:1b:da:50:2a:40:e2:4e:58:9f:e3:10:e4:ba:19:1a:8a:
de:21:3d:01:bd:97:7b:5a:fe:2d:28:95:ea:af:7f:ff:3f:07:
80:09:f7:44:62:90:ac:36:84:03:3e:d3:a9:2b:74:7c:8c:0c:
9f:6e:93:89:af:03:8c:b6:c1:2f:8d:6b:98:23:78:d8:98:a9:
c9:80:34:be:02:d2:16:45:62:e6:4b:33:a3:50:19:dc:17:ac:
b2:76:4e:ff:0f:41:6a:2f:8c:ae:5c:ff:44:79:43:aa:8a:af:
85:a1:15:f5:c8:71:a6:9d:20:12:b3:dc:99:6c:3f:aa:d4:65:
20:6f:d5:74:44:31:90:f6:6c:24:41:16:e7:82:e0:f9:c2:12:
96:56:ad:9f:f3:4b:1d:7a:75:1b:6a:09:ed:fe:bd:60:49:d0:
d4:dd:b6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:27:00 2025 by rpki-client