Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json)
Hash identifier: LkanuJ8yXUOp51d7dY+w54QAg6DPhecyf8pZYYiK+lk=
Subject key identifier: E2:72:6B:FC:47:B7:B8:76:82:F3:E2:32:EE:27:51:A4:5F:23:74:1F
Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Certificate serial: 0C2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
Manifest number: 0C24
Signing time: Fri 28 Mar 2025 18:41:54 +0000
Manifest this update: Fri 28 Mar 2025 18:41:54 +0000
Manifest next update: Fri 04 Apr 2025 18:41:53 +0000
Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: NcqCVgxQXxmUIRsWpfThMYBTfmqM3k5x8PGw8Ddkd2U=)
2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3118 (0xc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136A3E
Validity
Not Before: Mar 28 18:41:54 2025 GMT
Not After : Apr 4 18:41:53 2025 GMT
Subject: CN=67e6ed72-f53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:27:65:39:6e:83:86:a8:b3:fb:c0:34:2c:
d7:28:d1:ae:10:74:b6:8b:1d:94:1b:d8:6d:b9:f8:
5b:c9:31:b3:35:0f:66:46:8c:3b:ab:68:3f:9a:d0:
64:7e:c5:f6:2f:76:65:fc:a7:21:4a:e8:b0:99:62:
ff:ed:cb:07:93:5f:e2:6c:de:e0:a8:eb:9f:64:0b:
3d:b2:af:94:d2:86:e4:08:2f:be:ca:9a:b1:e6:42:
92:b5:7d:e6:00:fa:dd:07:e1:f0:a8:38:60:96:ec:
87:62:ad:be:0c:30:77:89:10:c2:da:d6:1d:12:c1:
94:81:94:b4:79:41:bc:f2:cc:b1:58:16:d7:c7:5b:
4c:93:e9:e9:06:5e:ad:ef:cd:b3:85:c3:7c:3a:7c:
cc:3e:3e:c6:82:17:95:da:59:77:e4:5c:64:d7:18:
b6:d4:ff:7b:a7:38:71:18:de:a2:15:fd:02:e7:27:
44:e3:80:af:5e:56:6c:75:67:36:3e:46:12:61:57:
7f:39:e5:4e:cc:3b:64:ce:c7:87:a7:77:47:8f:0b:
cb:3f:2c:b6:16:f8:82:b3:fd:db:42:93:ea:de:bf:
02:38:54:d7:73:d2:8d:12:d4:63:e5:e2:51:3a:25:
30:c1:b2:91:43:88:08:cc:0e:0a:16:cb:26:b4:de:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:72:6B:FC:47:B7:B8:76:82:F3:E2:32:EE:27:51:A4:5F:23:74:1F
X509v3 Authority Key Identifier:
keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:99:6a:10:c9:a0:3a:49:4c:eb:e6:86:aa:63:30:de:e4:7b:
8a:62:71:3f:8d:ea:de:27:26:9f:08:c9:09:a2:68:20:b4:03:
ff:60:9b:47:30:9d:55:8e:0c:f4:9b:61:d3:12:71:a9:41:5a:
0f:e8:8b:9e:05:a4:ff:1d:98:12:a5:a0:de:41:25:ef:62:bd:
5a:93:d7:90:d1:79:89:a4:c1:17:b2:9b:34:cf:23:76:6c:5e:
4d:82:3a:ac:6f:ba:93:9a:10:6e:46:cb:0d:9e:86:f5:bb:a1:
65:fd:fa:73:3c:6d:c1:b6:18:ba:2b:77:bb:85:d3:69:78:b6:
cf:f1:ff:8f:1c:72:15:b0:38:88:5d:f9:4d:75:c1:a3:43:f2:
36:f6:ae:ca:59:c7:65:ea:16:f9:76:23:dc:12:e1:6e:94:31:
4c:01:a3:cd:1f:92:7a:00:7e:b7:d4:20:34:6d:75:2a:b4:b7:
5d:7e:0e:a2:b3:cc:c6:0a:b0:eb:c5:17:2c:84:0e:43:bb:84:
e5:cb:f3:6a:27:4f:89:8a:ee:de:78:a2:26:78:8e:c0:b2:3d:
35:90:01:9f:c1:94:1b:47:95:22:02:13:38:ce:1e:9d:e7:60:
c2:2e:09:e6:f1:e2:a5:78:9c:ee:82:78:d6:d8:ab:86:1d:34:
fb:cb:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:50:07 2025 by rpki-client