Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
File: 276b_H-KPTvgW7W2Ah91Rb6YG_A.mft (raw, json)
Hash identifier: uZG2nFNIZBi07xaar3mNsIKrc8dsrjL5bWeYJO8Rnrs=
Subject key identifier: E0:AB:9F:2A:14:DB:FF:42:83:A4:83:1D:77:A4:8E:D9:AB:4C:28:71
Authority key identifier: DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0
Certificate issuer: /CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0
Certificate serial: 0748
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
Manifest number: 0740
Signing time: Fri 28 Mar 2025 21:59:46 +0000
Manifest this update: Fri 28 Mar 2025 21:59:46 +0000
Manifest next update: Fri 04 Apr 2025 21:59:46 +0000
Files and hashes: 1: 276b_H-KPTvgW7W2Ah91Rb6YG_A.crl (hash: yVBbqL3kWtm7V3Yb/8Om8XSoRp9qmsrBnRGGQceIQB0=)
2: 3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa (hash: di3lTW+SGjtdOdKQhu7ngXS2N/Oh8YrYx17MC5hYJgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1864 (0x748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D03A
Validity
Not Before: Mar 28 21:59:46 2025 GMT
Not After : Apr 4 21:59:46 2025 GMT
Subject: CN=67e71bd2-9c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:3e:40:95:c8:b5:2a:3a:67:c9:59:1c:17:
05:02:e3:80:cd:90:95:76:07:1c:2f:f9:e4:d4:ca:
74:ad:f5:ec:4a:72:8e:66:2a:ca:60:2a:f1:73:77:
87:02:c1:cf:f9:c0:f8:81:2f:bf:00:53:26:7f:1f:
b4:11:74:37:fc:62:06:07:59:78:b5:97:61:9a:ac:
ce:e0:d1:70:bf:44:20:0b:98:6f:74:49:b4:14:27:
95:e2:f0:72:67:85:3c:8d:af:b6:44:9a:5d:14:07:
da:36:58:20:01:f0:b8:11:f6:8a:f7:58:d4:85:4a:
15:79:da:eb:27:9e:67:38:84:57:29:7f:4d:0a:fd:
36:0a:14:19:00:85:4d:29:44:40:c3:38:be:90:5f:
6e:ae:28:d5:83:54:fd:3a:d2:c3:1d:4d:7e:11:ea:
85:f9:83:0b:bf:a3:80:39:e6:f9:95:be:d6:6c:1e:
5e:de:6f:c4:9d:7a:73:a1:06:5e:c0:a4:65:f1:33:
a3:c9:74:26:28:a7:e0:b3:fb:48:7a:1d:f7:30:95:
4c:f7:ea:f5:eb:72:f3:ed:bc:15:a7:38:31:dc:8b:
8c:50:0b:ae:39:78:62:9d:61:7b:90:bc:62:0c:46:
cd:34:ad:8a:3b:5e:06:bd:e6:32:2c:b2:fa:c1:ce:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:9F:2A:14:DB:FF:42:83:A4:83:1D:77:A4:8E:D9:AB:4C:28:71
X509v3 Authority Key Identifier:
keyid:DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:3a:b8:9d:ab:a4:5f:aa:c9:17:d2:1d:b5:a2:36:70:71:f8:
e5:a9:84:50:c8:b6:58:49:6c:f6:19:8f:1a:1c:56:87:72:46:
3d:2d:0d:63:eb:c5:5c:70:38:16:15:ce:69:97:7a:07:e9:50:
3d:a4:f1:f3:23:9f:c0:fd:6a:72:f0:32:0d:7a:63:d8:dc:d9:
7a:f8:f8:a6:44:f1:48:24:3f:2a:39:14:bb:b7:dd:9c:1a:6a:
d0:39:85:b8:5f:0a:be:44:90:e6:90:9f:d4:5f:20:aa:e6:6d:
b6:fb:e7:65:18:de:81:ba:20:45:cd:fd:6a:09:dc:59:d6:71:
73:a0:93:4d:0d:a2:db:51:5c:1e:98:32:31:6d:9a:12:7d:3b:
ae:b6:51:28:e9:16:d1:ea:7c:d6:4b:84:f4:e8:a9:fa:5e:bf:
38:06:3c:3b:df:0c:22:77:50:aa:0a:e3:3d:2b:d7:70:c6:4d:
1d:d4:56:e7:f4:fd:75:11:1e:89:08:5d:09:3d:36:59:91:4b:
43:e5:76:75:2e:c8:eb:e4:a7:56:8d:e8:7f:bc:e2:47:3b:37:
1e:b9:f9:a5:84:5c:74:b5:7c:24:60:6c:f1:02:1e:19:a4:b2:
7d:ef:1e:4c:8c:da:bb:4b:ca:a6:6a:c0:3b:a7:83:11:bf:bf:
79:e9:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:52:15 2025 by rpki-client