Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
File: Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json)
Hash identifier: NPxb02fPAVeoIfs4yzRPAQsfnbuClJhCA2YLl8Ji2ZU=
Subject key identifier: 4B:40:FA:10:80:F1:53:75:C7:1B:AE:C9:5D:73:B7:A5:28:3E:F7:7A
Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
Certificate issuer: /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
Manifest number: 80
Signing time: Sat 29 Mar 2025 05:58:10 +0000
Manifest this update: Sat 29 Mar 2025 05:58:09 +0000
Manifest next update: Sat 05 Apr 2025 05:58:09 +0000
Files and hashes: 1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: qOqgXOeen5mmrh+gbVvwUVTmTFozEBkKt45ydJI3xx4=)
2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: x7MCciPiMoC21iI94vanFTmv6Gh7il8p9AlIW1ZpCrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D3CE
Validity
Not Before: Mar 29 05:58:09 2025 GMT
Not After : Apr 5 05:58:09 2025 GMT
Subject: CN=67e78bf1-e402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:cf:97:61:62:a8:08:f9:94:07:77:98:1c:
0c:ef:88:b2:cd:e5:66:0a:76:56:4b:45:73:6a:61:
f5:ba:bf:66:6a:5e:4a:60:3c:27:52:c7:37:26:ad:
cd:dc:a2:e0:c7:5a:3b:1b:55:00:9b:bb:ad:ae:eb:
72:d4:b0:b5:7f:b3:82:c5:67:d0:ce:a3:ea:a8:5f:
8f:65:4f:d8:69:74:39:33:5f:55:67:05:2a:0c:2a:
5b:e8:bf:8c:83:67:0b:fa:bf:27:42:3b:6d:73:63:
0d:3d:26:60:58:1c:70:82:9d:23:f5:45:c7:e0:64:
8f:0d:34:e6:84:2a:1b:cc:aa:43:b3:d8:8c:c9:9c:
41:82:b1:df:8e:a4:ce:d9:f8:90:26:b3:4a:fd:c9:
c8:e3:83:3e:47:21:51:25:65:9f:cb:82:56:78:80:
71:09:1f:f2:3d:28:63:4e:07:02:c0:15:86:c2:75:
37:4f:a4:e5:91:f1:e8:48:a3:53:4d:26:cb:86:dd:
9f:ef:64:6f:2d:49:c6:53:10:bc:18:3b:dc:b5:a3:
2b:a6:97:d6:bd:30:29:30:6d:d1:0a:16:5a:3f:a9:
dd:15:60:26:b9:d0:79:e0:0a:8a:2c:07:ae:e5:71:
fc:38:8b:01:7a:f8:dc:1f:31:3a:38:96:fb:af:25:
d8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:FA:10:80:F1:53:75:C7:1B:AE:C9:5D:73:B7:A5:28:3E:F7:7A
X509v3 Authority Key Identifier:
keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:b6:76:22:67:c6:94:e9:c2:58:eb:9f:00:01:40:ad:8e:d0:
d5:22:c9:52:c0:bc:44:9b:2a:bd:9f:71:a1:82:84:4a:cb:62:
3d:57:f3:40:b5:0d:33:c5:6b:6f:3c:db:12:21:6c:51:d2:45:
24:7e:fb:0f:8a:cc:02:d1:e6:95:9a:2c:fc:67:5d:e6:35:dd:
3b:1b:f3:60:9a:c5:58:87:af:61:45:9d:9c:69:b2:d6:b0:a6:
88:a6:97:a1:5c:aa:b8:38:d1:b7:e3:f0:53:b8:2e:9c:f6:45:
91:e5:2b:1c:31:21:c3:e6:33:4c:1c:88:2f:d5:69:8d:6e:95:
7f:66:bb:d2:82:5d:d7:f8:04:b3:d6:85:ac:8e:c5:86:dc:2b:
9f:17:cb:96:e6:e7:67:21:c5:8b:68:98:00:fe:f4:c8:8f:93:
30:41:d5:be:81:bc:08:9e:cc:28:f5:b5:67:b1:72:ba:34:69:
d6:a6:b9:ad:4a:d6:8e:fa:3f:1a:df:23:a3:e3:0d:ca:6f:1c:
09:e7:16:9e:cd:9b:15:03:c7:aa:30:64:c7:72:d5:92:3d:79:
7f:bf:90:78:9f:49:80:d9:fb:cb:e1:c6:a5:8c:6b:dd:df:e4:
af:0f:7a:1c:dd:7a:1b:67:17:fb:6d:ad:7b:9f:7a:6e:df:00:
e6:a0:03:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:59:18 2025 by rpki-client