Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json)
Hash identifier: MQWj2R8H0cvpowoK4GPrTl3z/JIC5z6mvy8CG5ZXJJg=
Subject key identifier: C9:12:87:E6:31:12:2A:F7:06:8C:4E:F7:31:60:D6:74:4C:C0:4C:96
Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Certificate serial: 3477
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
Manifest number: 346E
Signing time: Fri 28 Mar 2025 15:21:09 +0000
Manifest this update: Fri 28 Mar 2025 15:21:09 +0000
Manifest next update: Fri 04 Apr 2025 15:21:09 +0000
Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: KJrNo4l6wxxMixc0OX7x90M/6qUk7xmpT1SsbG2Bny8=)
2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: PN3PImrt+QJI7xYO7BeFUBTImo3X6zJHE8IHPHYYZKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13431 (0x3477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B4DB
Validity
Not Before: Mar 28 15:21:09 2025 GMT
Not After : Apr 4 15:21:09 2025 GMT
Subject: CN=67e6be65-7517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:a9:28:a9:cb:d1:cb:77:5a:40:d5:9b:cf:
9c:79:e4:de:40:5d:0c:2d:3d:9b:29:93:d8:17:dc:
dd:b7:67:ce:8a:7a:cb:c9:1a:27:e9:c8:7b:ef:eb:
df:80:45:a9:4c:33:20:b2:be:9d:b5:2f:ee:54:88:
d8:5e:48:d2:b5:2d:6a:3f:c1:2a:75:f9:96:fe:77:
42:e7:09:a4:5c:6c:2e:5e:79:ff:dd:9f:8c:a6:e9:
3a:b6:65:10:75:21:cc:8e:68:85:64:45:ec:73:21:
e2:b5:c6:a8:e3:2f:f0:96:ba:53:d5:9d:c0:27:19:
22:79:f6:f9:55:10:c0:ec:e2:64:d7:bf:9b:2d:62:
e9:16:34:ec:c8:86:83:d4:bd:a5:a4:c6:45:e0:e3:
66:b4:18:53:d1:ee:20:94:fc:19:e5:a1:56:80:af:
33:e5:75:df:e5:f8:fe:27:f8:b0:7c:8b:34:32:a7:
28:9f:64:df:59:b8:88:bb:f3:45:a3:d5:b3:64:ba:
82:1f:3b:49:f2:a8:9e:2b:c4:b1:7e:03:7b:0f:0b:
60:42:76:b6:d0:fc:41:3d:f5:99:38:cc:03:44:62:
03:47:5d:e9:81:26:ba:d5:a0:f7:40:58:ae:55:49:
34:60:b4:6f:84:2e:5e:58:fd:f8:d9:96:72:2d:bc:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:12:87:E6:31:12:2A:F7:06:8C:4E:F7:31:60:D6:74:4C:C0:4C:96
X509v3 Authority Key Identifier:
keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e9:d0:33:09:d1:d5:44:c1:ea:af:c2:8f:d0:44:7d:13:8e:
5b:9f:02:50:35:3f:1a:e3:61:05:d9:dc:2a:87:97:c1:1b:5d:
4f:4f:a9:c7:16:9d:1d:7f:23:4e:71:ba:dc:eb:e8:a2:a7:2f:
8a:62:2c:3e:bd:ea:63:4c:bc:9d:e0:0c:b0:0a:a5:7e:8f:d2:
1f:9a:0a:88:9d:1c:52:bd:d7:ad:f2:16:35:a7:5a:03:47:fc:
db:44:08:68:12:0e:d1:f9:3a:7e:86:7d:33:ff:35:a7:ca:44:
f3:03:19:d1:3e:e8:b8:00:80:17:d9:82:37:f7:e9:e8:48:02:
63:12:d5:80:0d:bf:ab:3e:0c:26:88:a3:91:59:5f:4c:df:c9:
25:05:ee:c6:60:33:4d:44:c1:d2:a1:f3:5c:3a:51:1c:c5:0f:
a7:46:c7:c3:dc:30:27:7f:ed:de:72:55:cb:84:63:cc:76:20:
7e:5f:06:97:fb:21:04:46:30:67:34:31:6b:19:34:35:4e:bd:
c0:c5:4b:df:2f:65:aa:48:f3:04:fc:99:d4:8c:4b:bb:43:dd:
10:a3:82:5a:11:64:42:0b:6a:e0:23:a8:fa:ea:5f:0f:ad:b0:
c7:c4:55:56:70:83:49:8b:ce:0b:27:e9:fc:86:37:c5:59:6e:
55:3f:9e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:20:00 2025 by rpki-client