Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
File: 6bez7TFz3kD-TB_m2P5CucvpyDM.mft (raw, json)
Hash identifier: HFcNumHpfDSOBqzEHNAlVmN45hOhzwUbKAQygyFn6j8=
Subject key identifier: 96:90:5E:BF:80:C0:9F:B3:03:F1:0D:7E:4C:F0:F8:25:A4:ED:18:D7
Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33
Certificate issuer: /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
Manifest number: 72
Signing time: Sat 29 Mar 2025 06:08:47 +0000
Manifest this update: Sat 29 Mar 2025 06:08:46 +0000
Manifest next update: Sat 05 Apr 2025 06:08:46 +0000
Files and hashes: 1: 6bez7TFz3kD-TB_m2P5CucvpyDM.crl (hash: HgRijJRhtP8lgpjdpMik5/gHlwSXxX2fkgLmr1/GZOk=)
2: 367EF0645F9B11EFB904A774C4F9AE02.roa (hash: 3W7nBW0WrwwdyBp8pjE1mfPE0OY95LGfcdO49bT/mKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137E12
Validity
Not Before: Mar 29 06:08:46 2025 GMT
Not After : Apr 5 06:08:46 2025 GMT
Subject: CN=67e78e6f-56a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:68:0e:e0:24:56:62:a7:66:41:03:9d:59:
dd:b6:f5:68:9d:8b:60:5f:b3:11:72:04:80:f8:d8:
6e:aa:7e:8f:70:1f:c6:2f:84:f2:43:c7:10:6b:2a:
3d:6e:ac:b7:51:d5:ca:ef:5c:cc:b4:df:5e:42:7a:
81:c7:d3:d6:78:b7:95:00:05:ce:8e:fc:77:a3:10:
ca:62:e4:89:04:1a:0c:fd:a6:85:74:78:89:bc:c8:
c9:28:35:dc:ff:de:0b:08:19:f9:e4:d3:8a:4a:74:
24:ae:19:d3:a6:f7:8f:15:23:ca:8f:a7:75:31:3b:
3f:ef:d0:47:82:03:59:10:b0:d8:05:12:85:98:04:
cf:5b:9b:48:68:25:73:60:4a:d9:64:61:d5:3b:ab:
a6:7a:f3:a6:52:d1:c1:2e:08:09:f1:70:76:c4:ec:
ec:98:5c:6e:8e:aa:78:d3:68:21:09:8e:07:28:99:
59:3f:43:08:86:c5:2a:b9:05:8f:12:6e:ff:19:2f:
37:45:81:67:bf:2a:a9:2c:f3:79:1c:dc:1c:5d:6f:
6f:15:95:f7:ac:71:9b:9a:e9:19:6d:d4:ec:8a:cb:
e8:2b:a2:ba:0b:68:11:48:c8:f9:ce:5d:c6:e4:3b:
f5:45:5d:9f:0a:9b:55:dd:42:a8:3c:f9:84:e1:1a:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:90:5E:BF:80:C0:9F:B3:03:F1:0D:7E:4C:F0:F8:25:A4:ED:18:D7
X509v3 Authority Key Identifier:
keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:77:65:d8:94:95:f4:c3:e9:f8:e4:4e:ce:89:c2:f8:e3:36:
55:a1:0b:69:4b:86:78:db:d4:e0:14:f8:95:f8:7a:7c:a8:28:
84:a7:ef:5d:13:03:67:1f:30:c7:8b:60:13:64:86:fc:bd:ac:
62:99:bc:c5:fb:06:19:8c:3f:42:fe:e4:3e:29:26:aa:a8:01:
70:e4:7c:22:38:c3:45:5e:50:fa:71:f6:ea:dd:64:db:2a:87:
46:65:47:b0:d3:14:3b:c1:2c:59:70:66:5c:31:a1:9b:e9:dc:
a8:67:fb:f7:4c:b7:7c:a2:e5:83:7d:b2:ac:ec:b6:25:07:9f:
88:40:5d:b9:02:be:96:6b:30:4b:51:cb:b2:9f:06:5b:e6:28:
d1:bc:e0:93:31:09:c0:45:cf:26:6a:91:25:80:c5:e5:68:53:
0f:a3:c1:65:22:95:2d:9c:21:69:9d:6f:e0:f0:e2:97:84:40:
91:f8:c8:c8:90:1e:5d:da:5c:58:0d:99:cd:b0:ca:d9:60:e5:
5a:97:48:e2:4f:c3:65:d7:69:9f:59:85:c1:d1:11:6e:ac:db:
6a:4c:80:74:26:2a:fa:b1:35:6e:74:bd:67:65:c5:09:04:18:
71:c5:31:10:ee:6c:ce:50:bd:eb:56:78:98:0f:46:e8:ac:a0:
2c:12:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:42 2025 by rpki-client