Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json)
Hash identifier: SHfkjtcbM9OurMjCPo1bJBA/q+Bt68hgYTWBn0tekos=
Subject key identifier: FA:FB:CE:81:40:AD:40:A2:46:3E:B2:FC:B0:12:27:7F:D3:D0:B0:41
Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87
Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87
Certificate serial: 348B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
Manifest number: 3476
Signing time: Fri 28 Mar 2025 15:25:59 +0000
Manifest this update: Fri 28 Mar 2025 15:25:58 +0000
Manifest next update: Fri 04 Apr 2025 15:25:58 +0000
Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: cDgYbegnHp3icK2dJvn3z1v9m5xKqLgmZS3AKTROZkY=)
2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: INyUubVzyzPFDA6zTyRhkIRyBY0HoCb9vhAv2oVdZVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13451 (0x348b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FB1D
Validity
Not Before: Mar 28 15:25:58 2025 GMT
Not After : Apr 4 15:25:58 2025 GMT
Subject: CN=67e6bf86-9c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:6c:c1:30:59:1b:84:24:8a:f7:1a:0a:f8:
2b:ea:32:4e:3a:d9:ae:83:5b:16:cc:23:c6:00:8f:
30:96:d1:07:47:0d:9c:0c:c0:06:68:25:05:92:42:
db:07:29:b9:1c:46:99:d4:0b:16:16:73:51:8d:f2:
ef:62:6c:24:d1:23:e0:4b:8c:41:11:2d:76:93:a6:
8c:e9:68:42:84:07:cf:8c:ee:98:17:be:f4:dc:87:
1f:21:72:3e:3d:fe:b4:a5:bf:98:f3:e9:b0:2f:c1:
42:06:a1:d8:af:5e:c5:1a:f1:a9:3b:8a:9f:68:9b:
37:04:e6:ad:e2:58:d2:8f:8c:04:32:b2:de:6e:7a:
e4:27:6f:d2:02:0b:99:e0:ef:0b:0c:e0:45:99:1e:
97:43:dc:59:47:76:d9:54:ff:6f:c8:76:9f:e9:07:
69:f9:f6:8a:62:36:d7:b9:df:0b:88:a1:54:b6:f6:
10:4f:fc:65:8c:44:0b:d7:b8:ed:4f:66:3a:96:54:
e2:b4:31:72:4c:da:98:ae:2b:e8:9a:ae:1f:2f:3e:
33:32:6b:da:0d:cd:a5:27:b3:34:2f:f6:d3:4f:7f:
a9:c6:aa:2a:b1:e8:fb:b3:7e:0b:46:c9:95:0e:8c:
62:21:c8:05:e2:aa:eb:11:69:b9:01:ff:85:74:e0:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FB:CE:81:40:AD:40:A2:46:3E:B2:FC:B0:12:27:7F:D3:D0:B0:41
X509v3 Authority Key Identifier:
keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:0b:30:9a:6e:26:5f:c4:fb:c8:23:db:35:fe:bd:ca:58:6f:
2c:44:c8:72:e8:8e:3f:a9:72:23:8c:d1:b5:3d:82:de:d9:a0:
ce:b1:49:97:92:d1:41:13:07:f0:f9:53:12:0a:13:d1:15:b8:
d3:95:49:31:1b:e0:d7:16:c2:f6:78:31:0d:d6:41:a5:62:d7:
91:5f:9b:b7:97:f5:0a:5e:86:e7:37:a3:1d:91:f4:5b:3b:59:
aa:e9:4b:20:b7:79:4f:4e:97:73:b8:4e:76:0e:ab:b3:29:0a:
2d:e2:9e:5f:ab:93:85:4f:3b:e5:62:07:64:c1:8c:af:6a:e7:
97:7e:72:73:72:6d:05:ba:ca:be:ba:ba:be:16:de:18:55:df:
09:8a:4c:37:2c:44:5a:91:d6:78:3c:f5:67:4b:4f:8a:22:3f:
a4:22:84:2b:50:0b:c8:20:67:bd:bc:ea:c7:2a:00:1e:51:ed:
ef:e3:95:5d:23:f3:95:1d:8f:68:45:a4:0c:43:e2:fd:03:26:
bf:13:23:3f:e5:b2:07:c0:63:bb:d3:e9:50:18:4c:9d:80:88:
30:9a:36:6f:b9:89:66:ab:d8:d3:8c:aa:f5:62:ea:5c:1f:8a:
96:d7:67:e1:82:4a:82:36:19:a3:22:66:52:75:4f:f4:f2:79:
7b:fd:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:38:17 2025 by rpki-client