Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json)
Hash identifier: +ce+WMRFBDOxdCeD7sDthIvKHLSc6fI/W+Y768MEfck=
Subject key identifier: 09:E7:84:66:1F:8C:6F:17:F9:50:F1:F3:E1:11:CA:72:D2:1A:7C:89
Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Certificate serial: 068E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
Manifest number: 0689
Signing time: Fri 28 Mar 2025 22:33:20 +0000
Manifest this update: Fri 28 Mar 2025 22:33:19 +0000
Manifest next update: Fri 04 Apr 2025 22:33:19 +0000
Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: QP0Ytl3cTzIKRQEwx1qh/I1E5cQaSG1r5Y7JAhZ5kzE=)
2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: AGJnIVMVxGCqhPBai/J+rGCznBK2uUe21t16AbPm6pM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678 (0x68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FA65
Validity
Not Before: Mar 28 22:33:19 2025 GMT
Not After : Apr 4 22:33:19 2025 GMT
Subject: CN=67e723b0-8b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:a2:b6:98:f0:de:5b:0d:50:21:1a:61:61:
ea:b8:9b:d8:be:1a:93:3c:6e:8f:03:85:46:25:c2:
f8:c7:87:4f:c7:99:9b:e0:bf:a2:54:63:0c:0d:07:
d0:60:7c:d9:dd:28:ee:5f:bd:45:fb:66:19:4f:4b:
2f:c6:16:d8:94:ff:32:5b:52:61:20:28:96:fc:b3:
b6:85:3a:ba:20:69:e6:40:0a:b0:67:5c:49:cc:a5:
54:f3:75:22:21:75:92:ac:d4:5f:89:64:bd:d7:2a:
8f:40:34:bd:cc:75:ee:40:92:07:70:87:e6:85:51:
b3:96:f1:14:14:f5:39:79:a1:6b:a3:e2:69:f2:79:
89:33:cf:16:fc:42:0e:1b:30:2d:e7:36:c6:79:e8:
9d:68:38:aa:38:c6:8a:2e:47:a7:22:f8:43:18:5c:
1c:cc:67:3c:c4:81:fe:82:0e:a7:29:92:d7:15:8b:
e7:ad:02:94:4c:fc:3f:45:c5:d5:12:82:12:fb:6c:
e3:07:c6:83:a0:33:c0:ae:39:2d:ad:73:d2:e6:80:
a2:96:e9:98:9b:cc:bb:2d:14:f6:6d:1f:22:06:e2:
d8:fc:cd:1d:88:e6:ed:4a:5f:21:60:c8:fc:1e:38:
e2:90:1c:6d:0f:39:a9:ef:69:6a:72:ce:43:78:b9:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E7:84:66:1F:8C:6F:17:F9:50:F1:F3:E1:11:CA:72:D2:1A:7C:89
X509v3 Authority Key Identifier:
keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:14:ff:ce:1c:28:5d:bb:80:81:d7:b7:b7:28:13:6d:0b:a8:
2e:42:0d:4e:3e:c8:c8:da:7a:1c:ef:b7:16:a6:21:68:a8:4e:
6b:04:e4:ae:16:7b:50:dc:27:3c:1d:c3:8a:67:8d:18:1d:b7:
45:be:11:fd:8e:03:e4:53:d8:11:50:f6:7f:82:a4:e4:c2:3c:
38:0d:ee:e7:0d:58:43:73:4d:ee:5e:cc:53:c2:f7:d6:07:35:
ad:5a:37:d2:b2:7b:cb:c0:a0:ea:9e:2d:ed:82:24:d7:87:a4:
18:3f:61:32:eb:ad:db:bd:b7:2f:7a:e4:52:69:6b:95:37:05:
fd:38:cc:d4:2e:cb:6a:ed:24:77:49:63:e5:2d:c7:90:21:36:
77:15:33:9c:fd:ae:45:83:19:bc:cf:02:6d:98:ed:75:2f:91:
18:15:7f:74:7c:64:3e:53:75:4f:81:8f:b5:23:6a:d8:7f:a8:
51:62:18:12:9a:31:30:06:f8:bf:99:cd:85:0b:f2:01:b0:91:
3c:c0:ee:47:d1:50:6b:16:fa:d8:f2:45:62:6c:a2:c5:82:86:
7c:d9:d3:d3:ce:57:c0:89:16:f9:e4:e8:e9:15:9a:e2:8a:2f:
de:a4:c7:93:ad:a5:a7:e7:19:b1:b1:84:12:ae:a2:23:24:45:
69:5b:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:59:53 2025 by rpki-client