Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
File: r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json)
Hash identifier: /XJKWD1SlR16cbrraoDmBkx7j8P0q69plnzvTALC5A4=
Subject key identifier: 05:22:68:95:CC:47:A9:C1:04:CE:AA:36:D2:2A:4A:2E:B2:CC:A5:B8
Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
Manifest number: D2
Signing time: Sat 29 Mar 2025 05:02:47 +0000
Manifest this update: Sat 29 Mar 2025 05:02:46 +0000
Manifest next update: Sat 05 Apr 2025 05:02:46 +0000
Files and hashes: 1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: KgaPB6pLawQXoHcWOO9W01AsThUOKm98isvfUfj9MLM=)
2: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: br9VY1Ap5bODWGjIwXH93XykBR4wm+eKQRXiepCLuxo=)
3: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: JbXYoZCeV73k0ydVhueXLAHh7xzomEgWbLFpEGgJxiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BA82
Validity
Not Before: Mar 29 05:02:46 2025 GMT
Not After : Apr 5 05:02:46 2025 GMT
Subject: CN=67e77ef7-b226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:7f:92:2e:91:aa:4e:05:e0:f3:3d:eb:88:
6b:3c:30:0f:0f:54:27:6e:ae:41:22:a4:c6:dd:3b:
66:8d:af:c1:e9:0b:d4:4e:6a:17:18:5b:1a:c9:61:
02:08:62:db:97:bc:fa:24:3c:55:4e:f1:c7:86:e6:
53:8e:b9:1b:42:44:90:bc:3b:d8:81:19:61:87:89:
df:31:e9:8f:4c:11:14:c5:71:bb:1f:eb:3a:25:c0:
d4:31:1e:d9:68:7f:06:77:54:0f:9d:a0:67:08:79:
f8:1c:b2:c1:f8:50:ee:85:36:81:c8:4c:39:b6:e4:
9c:05:27:cd:75:df:c2:6e:a1:d2:86:d5:c9:ad:03:
28:73:0e:9f:66:87:37:66:7f:49:3a:c6:fc:9b:2d:
db:ad:81:ef:6f:ca:b9:31:58:5e:7f:6b:6c:df:f9:
8e:1e:75:e4:30:ad:ac:92:1d:46:ba:7e:10:f7:1d:
d3:25:27:83:61:02:94:0b:b6:62:54:85:4a:6d:7e:
68:af:d0:18:97:f3:01:02:a8:a6:2a:b9:7d:18:35:
60:ee:c4:e9:41:95:f8:7d:b7:8f:ff:b0:c6:d8:42:
e4:7b:bc:37:a2:64:b8:32:0f:39:e4:6d:e5:7d:45:
93:1e:96:8e:c1:1c:32:58:13:e0:0c:6e:fc:ee:9a:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:68:95:CC:47:A9:C1:04:CE:AA:36:D2:2A:4A:2E:B2:CC:A5:B8
X509v3 Authority Key Identifier:
keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b9:43:94:1e:49:ec:80:a6:a9:b7:96:28:77:5c:36:4d:85:
00:4b:21:c7:fc:46:31:e7:56:82:b7:0e:d2:49:fd:4f:08:e8:
9d:4b:35:4b:b6:f8:28:a0:86:f4:a8:8d:69:f7:95:fb:45:a4:
84:db:b7:44:ca:11:82:a8:14:70:59:f0:85:08:22:3c:93:a9:
70:90:96:90:d9:f5:f8:a8:85:d8:3f:0a:fa:3e:68:6a:1b:58:
6a:ed:d7:e6:92:8e:dc:bc:bb:e7:70:ed:98:13:62:16:15:ec:
b9:cc:42:ca:d5:6b:ad:54:80:b2:59:62:cf:36:07:29:1d:f9:
9f:a8:91:65:a8:ef:02:81:e3:c9:a4:80:9c:1b:cb:af:9e:ee:
ed:77:00:ae:6e:8e:c4:8c:1f:f0:55:50:41:a5:82:28:3a:c9:
97:8e:17:ae:fc:6b:f3:f0:e0:16:9e:3e:9e:56:ea:c3:9a:a3:
bb:d0:0b:d7:56:cc:ef:e3:97:f9:a1:64:4b:5d:d2:2c:85:6a:
c2:a4:1e:d2:f7:ea:d3:58:42:5f:3d:f0:6f:da:d1:f8:c6:80:
a1:cb:8f:fe:17:52:1e:20:2a:9f:01:92:b9:43:5f:d3:1c:41:
22:e5:19:be:e6:68:2f:f5:7a:89:1c:8c:b2:f7:1e:e5:a3:4a:
d3:9c:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:44 2025 by rpki-client