Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json)
Hash identifier: f77PsJnPblLLqXm963xwRBXZczybjMS0JieGxsPBJRk=
Subject key identifier: B6:F9:64:8B:45:79:99:0E:01:F5:8D:95:89:39:35:BB:28:21:9D:45
Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1
Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
Manifest number: F5
Signing time: Sat 29 Mar 2025 04:40:33 +0000
Manifest this update: Sat 29 Mar 2025 04:40:32 +0000
Manifest next update: Sat 05 Apr 2025 04:40:32 +0000
Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: 2hbUFzCVr6K8b5y5j2bU2MqLPSEwSzPbQzgy+XMQJHM=)
2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: tBwNVvJX12RI1rw1ArvMyaYybwsSqQmw1mHttd1wbm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0DF
Validity
Not Before: Mar 29 04:40:32 2025 GMT
Not After : Apr 5 04:40:32 2025 GMT
Subject: CN=67e779c0-0c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:03:63:76:c5:6e:c6:62:c3:a2:50:a8:87:
d1:fa:d4:46:2c:eb:62:0f:ba:62:89:f0:7e:2a:a5:
f4:ba:43:fe:e5:e2:44:17:65:62:15:0f:aa:18:0d:
80:e0:fd:82:d2:b6:72:33:33:8e:84:f1:0b:3e:0b:
93:66:d9:ab:3b:2c:68:67:c6:cd:8b:b7:66:5f:05:
fa:bb:f6:f7:c5:0a:5e:b3:72:c7:a4:9c:87:5c:74:
9d:f1:4a:d8:a7:dd:39:a5:bd:8d:5b:27:5f:50:5b:
16:b6:f9:48:5a:fd:ad:8b:d5:3b:85:ce:ba:28:c3:
81:7b:71:1f:0d:b0:50:a4:28:01:4c:02:ce:3b:54:
4f:f9:50:56:56:cb:25:f4:25:cb:9a:ef:32:8f:c4:
0a:6e:67:34:58:5b:af:8b:67:83:15:aa:b0:6e:72:
24:43:19:05:dc:9d:44:c9:b7:4b:fd:84:79:ac:e3:
35:11:3f:8b:59:48:ea:79:4d:67:9d:e0:e4:df:a4:
6c:68:88:c1:7b:cc:07:4e:c6:52:f8:27:c3:95:8d:
ee:66:e4:60:6d:c4:2c:c5:8e:60:56:51:e0:8d:19:
6e:0b:9d:f7:5a:af:5d:d6:ca:22:60:7e:a5:1b:4c:
e2:45:d4:6b:57:7e:08:3e:1f:a2:a1:fd:56:10:bd:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:64:8B:45:79:99:0E:01:F5:8D:95:89:39:35:BB:28:21:9D:45
X509v3 Authority Key Identifier:
keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:86:42:48:3f:34:4c:54:c9:44:35:74:6a:3b:c3:f8:4a:fa:
cb:01:86:3b:b6:74:22:43:32:01:07:37:4b:4a:c0:76:a5:f1:
59:57:58:44:a9:4a:e5:3c:8a:31:91:cf:1b:e5:41:b5:3a:dd:
5d:04:51:ce:a0:50:c5:8a:48:ec:14:f2:e1:51:3d:8c:b1:d5:
f2:f6:b5:60:82:86:ee:73:59:fa:29:58:b4:1c:c1:d0:40:91:
70:e9:6e:46:3f:da:9b:ee:5f:25:cf:a4:dc:4b:1b:0f:6a:d6:
1e:65:13:22:29:2c:07:96:7d:17:51:79:82:78:92:56:58:7b:
ad:e8:71:2a:74:8c:76:7d:31:c2:21:7f:22:80:9b:bc:56:fa:
fa:fc:46:dd:5b:70:4c:22:11:89:72:c9:01:88:31:96:f8:24:
ee:12:45:88:c4:e9:d4:fe:c5:5a:ea:e5:90:3d:15:b3:bb:20:
9a:83:3b:ef:51:71:60:d0:78:ef:01:1e:d8:bf:eb:e7:f5:c6:
74:e2:32:6e:38:25:e8:cc:45:58:ec:6b:2e:c1:e4:e0:41:bd:
a0:e1:c9:1d:c1:df:89:dc:a0:04:4e:a1:c1:0f:06:71:18:ed:
a9:80:25:10:dc:93:bd:8a:00:aa:72:53:ae:e6:47:2c:c7:55:
e4:c6:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:37:32 2025 by rpki-client