Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json)
Hash identifier: Kj/1bl6czk1I1kD4fEi7hP3MuY2+uYhumxNVcF3bDew=
Subject key identifier: 64:58:D0:E2:1D:08:60:9A:FF:20:B1:62:74:CC:A9:91:12:0E:E1:05
Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
Manifest number: 0230
Signing time: Sat 29 Mar 2025 02:10:39 +0000
Manifest this update: Sat 29 Mar 2025 02:10:39 +0000
Manifest next update: Sat 05 Apr 2025 02:10:39 +0000
Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: 2bxp16oWHv/fkPdGHj9opdYNmjwZln954fQ5MU02V5s=)
2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: dkCYBmAm0OsNXUn60urmLpPiFKakWVNsJOBeAK9VAVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A5BD
Validity
Not Before: Mar 29 02:10:39 2025 GMT
Not After : Apr 5 02:10:39 2025 GMT
Subject: CN=67e7569f-7916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:56:ed:9b:33:07:b4:32:68:af:69:58:2e:
48:77:95:27:c6:0d:a3:fb:ae:a4:5a:01:64:df:a7:
7d:bd:c1:0a:21:c2:13:32:0d:ec:c3:66:be:d3:39:
1d:55:14:c5:73:b2:b4:96:3c:02:44:18:54:40:73:
3c:52:04:e1:bf:fe:de:e8:d1:3b:f2:d1:15:ac:73:
29:e9:5a:ff:e2:84:c3:89:6e:11:e9:75:0d:a1:8f:
f2:ca:ad:84:4a:f8:43:88:ac:51:4e:79:b6:6f:bb:
64:ac:ea:3e:76:4c:10:65:5b:7c:4f:60:ae:13:5c:
16:22:d4:ad:0c:9f:c7:25:91:45:41:60:bf:09:e6:
46:45:7a:0f:47:c5:4e:0a:00:91:fb:a4:28:b0:1b:
12:b7:e9:a8:b9:c1:0c:9e:a6:77:bf:c9:67:00:86:
df:9b:7e:84:68:16:48:6b:34:43:2b:25:e5:c9:19:
9e:d8:07:63:cc:81:49:2a:63:6a:07:50:3f:34:7f:
2c:14:5c:8c:e9:8e:26:b6:f6:6e:24:eb:a3:64:b4:
dc:d5:03:6f:d2:06:bc:99:ec:94:a1:f4:00:5c:2b:
cf:6e:66:4b:84:bf:a1:ef:1e:1a:5f:74:79:a4:c1:
4f:68:1e:69:57:37:f0:47:4e:d8:54:6e:a7:75:14:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:58:D0:E2:1D:08:60:9A:FF:20:B1:62:74:CC:A9:91:12:0E:E1:05
X509v3 Authority Key Identifier:
keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:33:34:27:7c:63:2f:6f:c6:a0:46:75:3d:90:ff:80:4a:79:
e8:6e:8f:99:fe:e0:fd:d5:f6:76:12:cf:ac:b3:8f:85:ce:26:
d9:7b:99:e1:df:9f:8f:55:ab:5f:8d:cc:3e:ee:6a:49:45:a1:
cc:ad:9f:83:c0:fc:eb:ca:7a:76:7e:84:a7:9a:68:f2:e4:7e:
67:c1:47:ea:a9:37:fd:50:04:8e:d4:92:cb:8e:e7:1c:de:e5:
df:8e:e4:92:a1:9d:14:45:a9:2f:26:5a:dd:26:6f:c8:c6:0b:
10:0a:37:19:ad:e2:ee:7e:6e:a5:c1:87:74:82:99:97:d3:b1:
4d:23:7d:a4:66:77:b4:a9:89:79:86:20:78:f4:18:e8:c1:66:
b7:f2:8b:74:0f:2d:0e:1e:0f:4b:bc:1e:b9:bc:66:ef:aa:45:
38:d9:b4:3b:db:03:c5:ae:fa:4c:73:af:c2:c1:f7:6f:6f:0c:
cb:9f:cd:84:e2:a1:e2:2b:cb:08:48:ec:fc:ac:0d:e0:8f:c0:
00:9a:30:27:62:5f:ac:b5:38:b6:51:2d:ac:9c:31:37:c0:bb:
27:fd:87:9e:b7:81:0a:a1:3b:be:f0:e9:b7:b3:dd:18:5f:ca:
89:40:74:6e:35:d8:f7:bf:54:d0:3d:62:8c:61:01:18:a1:79:
76:bf:3f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:36:31 2025 by rpki-client