Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json)
Hash identifier: 7Vdfpl6oLRliKXX0DJrLbe4K4LDkKfqT8gM7aI0Vlxs=
Subject key identifier: 10:23:5E:2C:F0:D3:B5:75:62:52:07:A5:34:F3:16:F7:EC:3B:0A:7D
Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0
Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0
Certificate serial: 06EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
Manifest number: 06E4
Signing time: Fri 28 Mar 2025 22:18:13 +0000
Manifest this update: Fri 28 Mar 2025 22:18:12 +0000
Manifest next update: Fri 04 Apr 2025 22:18:12 +0000
Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: o3SQEMKnm+X+UIYBSNtk9/R2PKXo/g6OkRSvdp4lyII=)
2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: bd6xDrsI8VNBf0/b6lDTgdvsxuTBwH6yXjfUiwvhRpg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1772 (0x6ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138478
Validity
Not Before: Mar 28 22:18:12 2025 GMT
Not After : Apr 4 22:18:12 2025 GMT
Subject: CN=67e72025-8263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:09:c9:2a:c3:1c:ca:74:35:5f:60:56:87:
36:07:7f:8a:61:92:13:d2:8d:62:97:47:1b:ce:88:
b2:bf:b2:c1:dd:42:aa:94:b4:b4:e8:d8:2c:e6:94:
a6:38:31:ee:bb:9f:92:5d:70:af:f5:75:65:15:24:
6e:8b:c3:89:b2:38:6f:08:af:33:98:4e:6d:54:47:
6a:a9:a0:e3:23:b5:7c:6b:52:dd:f1:2e:4c:e5:5b:
61:26:60:67:46:03:06:04:7c:c6:48:18:ba:bf:85:
e7:d6:9d:22:ae:10:57:55:a5:73:43:91:59:2f:fa:
d6:a1:fa:72:df:38:2e:a6:2a:8c:32:80:3e:a8:1b:
3c:b9:bc:2c:aa:a1:ae:a3:f5:53:88:84:09:d8:c8:
1c:b3:7a:59:92:9d:3b:48:17:b4:4d:13:ae:bc:b4:
36:5f:59:85:b0:48:3f:e2:9d:cb:da:9d:32:7d:28:
ef:34:d4:70:4b:c0:a9:fc:32:75:37:07:a3:c1:96:
0a:34:5c:e8:0b:2c:35:33:73:a3:8c:1b:39:3a:27:
78:c7:33:5f:ee:4c:4e:9c:f0:e8:ae:ec:d8:8a:1c:
97:1d:80:b4:32:fc:0b:56:99:40:d9:65:ab:95:6f:
34:b1:e5:1d:94:d6:70:88:8d:95:56:46:f0:cf:7a:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:23:5E:2C:F0:D3:B5:75:62:52:07:A5:34:F3:16:F7:EC:3B:0A:7D
X509v3 Authority Key Identifier:
keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:29:1a:81:24:67:f6:4e:ce:3c:cd:5e:bf:94:51:83:e1:4f:
8d:09:1e:9b:6f:e8:06:1e:8e:ff:3a:4c:aa:c9:54:ab:66:b7:
fa:37:d8:2e:5f:b1:7b:84:d0:de:34:7a:9d:0e:6e:7f:2b:e5:
13:33:24:a6:cb:d4:8c:a1:53:af:b1:88:f2:53:02:db:65:1a:
73:87:48:bd:13:d1:67:73:71:e9:b2:9c:33:b3:55:cd:8b:aa:
5a:05:a0:0c:5c:e0:17:80:66:6e:86:e4:85:f4:b0:6a:4d:4d:
f4:02:1d:a3:ed:2c:e0:5c:da:c9:34:a4:ec:3b:de:e5:81:f4:
54:5a:84:a6:9e:e0:dc:ce:3d:e9:b6:fa:22:15:22:28:16:32:
9b:1a:05:83:90:cf:ce:12:6e:cc:e7:bd:aa:91:80:ba:15:dd:
ae:bf:91:d6:8f:14:5f:52:33:68:cd:39:31:96:72:31:fc:15:
ec:46:fd:e1:8a:f3:2e:02:45:50:52:49:c3:08:43:56:40:bb:
bc:0c:48:c0:83:e0:39:b7:cc:3c:0e:21:6e:df:37:1d:f9:97:
e4:45:fa:7e:62:3f:07:6e:ec:3d:60:b0:31:58:0a:18:19:34:
5f:e5:71:68:ff:ee:c7:92:5e:a9:59:bb:ca:b7:6d:04:bf:ad:
2d:c3:a8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:59:01 2025 by rpki-client