Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
File: cXie4rLIt_u60_eFpd3s7xXMFaQ.mft (raw, json)
Hash identifier: mjy+G1CVQNBT3Qc2LL0jqctR63byaIG0MyNein0id2E=
Subject key identifier: 22:DA:A9:CC:2D:20:0C:19:5D:C8:6C:84:46:0A:5B:A8:6D:1C:FF:F5
Authority key identifier: 71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4
Certificate issuer: /CN=A9138171/serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4
Certificate serial: 0762
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
Manifest number: 0755
Signing time: Fri 28 Mar 2025 21:54:34 +0000
Manifest this update: Fri 28 Mar 2025 21:54:33 +0000
Manifest next update: Fri 04 Apr 2025 21:54:33 +0000
Files and hashes: 1: cXie4rLIt_u60_eFpd3s7xXMFaQ.crl (hash: mrm9UYlE/gtfZOPzQB8xj23mQnZzBIEb6lnBi0gxn4U=)
2: 4848EB6E18BF11EBA5E2E946C4F9AE02.roa (hash: WcA0e7saPqIm2zyMau/4bmWlWFCaJQ2WBh7b1zXUWss=)
3: 47B8C6B018BF11EBA5E2E946C4F9AE02.roa (hash: saRxbZnY10CKxPD1pSytKLg8FuSkNaBBrOYD5Hz5qjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138171
Validity
Not Before: Mar 28 21:54:33 2025 GMT
Not After : Apr 4 21:54:33 2025 GMT
Subject: CN=67e71a99-6ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:95:58:b5:ef:41:af:e0:51:2d:a7:30:43:
6c:e4:af:e8:49:29:67:8d:f9:b5:b1:af:52:cf:f6:
e5:d8:9d:42:18:aa:0f:28:75:1a:d7:b8:93:47:b3:
eb:36:f6:6e:ca:86:bd:84:71:36:64:9a:b5:7d:4d:
77:91:aa:08:fa:4d:a1:89:ba:ef:ac:7d:bb:67:50:
02:4a:02:64:53:13:d0:a2:3a:cd:97:66:ae:91:40:
cb:8d:85:14:f7:a8:d5:d0:a4:d0:9b:89:33:5c:77:
6a:4f:0c:6a:dd:53:6b:fb:7a:63:dc:0b:38:ec:9c:
82:f0:5a:8e:4f:aa:4a:44:db:b2:00:e3:3f:1d:91:
a9:91:6b:b8:33:d8:8b:8f:90:34:6a:98:79:62:08:
97:f0:fb:a1:b4:e2:81:1d:0f:86:5a:0d:61:f8:98:
ca:68:15:1c:ac:d7:67:a0:40:a8:1a:a5:4c:1b:87:
4e:6d:31:54:96:ad:81:38:d6:06:36:61:e8:cd:cc:
76:00:d1:42:59:da:c9:55:e0:66:d3:ae:d7:eb:8c:
60:f1:bd:60:86:f9:94:09:6e:83:20:28:1d:ba:e4:
ea:e2:36:3c:b3:3b:de:c0:b6:af:75:f2:db:69:fa:
ac:b1:53:26:75:7e:8b:b6:3e:92:da:58:bf:9c:4e:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DA:A9:CC:2D:20:0C:19:5D:C8:6C:84:46:0A:5B:A8:6D:1C:FF:F5
X509v3 Authority Key Identifier:
keyid:71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:f6:53:c0:86:bc:bd:7a:92:47:b7:aa:9a:69:c7:f9:fa:12:
63:b0:11:27:c1:bf:f8:ea:90:98:53:a1:85:f1:60:d0:91:6c:
7f:be:7f:18:ec:43:96:a0:4d:ba:15:b8:71:d8:ec:b0:58:76:
37:f3:f2:55:7c:8f:45:da:e5:87:ab:22:9e:8b:05:d0:93:16:
fc:17:de:54:42:b2:e3:0a:ba:18:95:26:d5:a0:67:79:9b:83:
1c:7d:ba:e5:5d:da:56:7b:52:af:df:dd:62:82:42:18:27:f1:
b1:66:2c:0d:8f:e8:f3:46:69:4e:7b:37:43:d3:16:16:df:cf:
88:74:1e:05:42:1c:76:a8:89:05:0c:42:db:76:87:24:c6:67:
6b:0a:56:23:e3:c7:5d:e5:42:b6:99:81:dc:27:7e:23:70:82:
28:14:d3:63:e3:61:71:fd:4f:ae:b4:4b:84:07:c3:1f:37:e3:
96:ec:b4:72:62:74:d9:81:52:6f:28:eb:82:64:ff:b4:bd:e4:
4b:b9:c9:75:97:07:31:62:aa:c8:7e:7d:e8:d1:6f:12:9c:1d:
38:b7:66:57:ce:8c:9c:db:e9:40:f1:d8:b5:7a:ee:40:64:d9:
d0:c9:ba:ae:65:02:18:61:5f:ba:a0:f4:4d:48:1a:1d:c2:89:
a9:95:3f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:15:16 2025 by rpki-client