Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
File: phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json)
Hash identifier: yumuS9ObynW+7JLC/KpWu2MZ0xuMtllx7BmjpvUw0cw=
Subject key identifier: 4B:E1:B5:EA:16:8B:71:E3:B9:51:42:60:54:BE:65:F1:2B:D5:1F:F2
Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7
Certificate issuer: /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
Manifest number: 96
Signing time: Sat 29 Mar 2025 05:42:38 +0000
Manifest this update: Sat 29 Mar 2025 05:42:38 +0000
Manifest next update: Sat 05 Apr 2025 05:42:38 +0000
Files and hashes: 1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: ZJxuxw6MOD9+ecvyoEjnVFP6kod7cRYWcapNGU/lZUk=)
2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: fEV4Nv9YEsz1gwlF4scqWCuSbskSixTpqMCtGjgZ1FA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138EEB
Validity
Not Before: Mar 29 05:42:38 2025 GMT
Not After : Apr 5 05:42:38 2025 GMT
Subject: CN=67e7884e-9cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:60:24:aa:91:bb:aa:e4:6f:44:77:49:24:
2b:ac:f7:da:32:1f:a8:81:f7:82:3b:e0:cb:a3:8f:
8f:59:2a:06:37:e2:54:64:ca:aa:90:55:81:af:93:
ff:a3:04:02:c4:78:f5:2f:72:15:89:4e:dc:68:97:
42:e2:7b:55:c8:76:8f:86:78:2e:94:31:d0:36:1b:
b8:9b:ef:9c:ce:be:88:c6:b4:9d:8f:82:bb:fd:18:
a1:d6:de:ba:89:0a:47:b9:26:3d:d7:5b:ce:89:9a:
9a:48:ea:45:76:39:27:2e:db:0c:be:62:66:4f:85:
5d:5b:ad:54:34:67:da:e2:7a:21:f3:6d:ed:26:d8:
35:a7:4d:67:39:e2:c8:30:08:5d:4a:df:35:2f:9c:
7b:90:e6:d7:a3:02:a5:fc:72:33:8a:76:30:51:44:
a5:01:d7:92:cf:2e:03:2c:7c:ef:c9:58:96:a2:ce:
01:3a:fa:65:3b:0c:a6:14:e2:f4:ea:79:af:ea:61:
39:60:d5:cb:ca:03:15:cd:eb:6f:f8:ec:8d:5e:d0:
88:d0:eb:c0:98:60:11:5c:27:66:26:04:b1:12:b9:
a5:fd:2e:41:ac:e3:1e:d0:fc:55:48:5e:1e:cc:79:
4f:76:2b:e3:2c:4c:dc:85:d4:bc:74:84:b6:b9:93:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E1:B5:EA:16:8B:71:E3:B9:51:42:60:54:BE:65:F1:2B:D5:1F:F2
X509v3 Authority Key Identifier:
keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ac:48:d1:15:5e:be:46:91:3f:4c:b2:75:b7:1a:e2:2c:c7:
6a:47:f3:c0:1f:d0:39:f3:6a:8c:8e:bd:64:c0:e6:e6:ba:07:
df:2c:13:c1:ee:ff:75:dd:91:39:7f:04:c3:8b:1a:37:66:8a:
43:d2:58:1a:19:b1:6e:f1:03:94:d3:e9:36:4b:4d:96:06:77:
4b:d0:10:80:8d:34:ba:f4:d2:2d:c4:51:64:7d:c4:02:ec:df:
c1:77:74:7c:2d:fa:43:e0:be:15:4e:6f:76:14:60:8b:06:71:
21:f1:71:3f:17:a4:ab:94:c9:f5:79:80:c8:1e:3f:20:08:d1:
66:35:ec:e1:1d:ed:96:ed:09:7f:bd:80:c4:ec:d4:fb:a5:54:
b7:95:ab:3a:8d:66:84:0b:19:70:fe:1b:08:ed:e3:fa:cf:c8:
9d:b5:87:e9:43:5d:99:49:c7:ac:a5:25:b5:ef:9e:3f:de:b2:
ea:95:e8:86:7e:65:3e:aa:7e:a8:8a:df:ca:03:31:80:c9:b8:
4c:8c:ac:0c:78:77:45:ed:cf:3a:af:50:19:ea:b0:64:54:50:
8f:c7:a7:7d:6e:72:e0:ce:27:55:d2:93:ad:dd:9b:15:89:41:
66:6e:9a:eb:5c:07:54:9d:1a:75:76:f9:fa:c6:46:52:33:4e:
40:05:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:16:41 2025 by rpki-client