Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft
File: xctXefg2BxxSgISGkWfLwa4IuRc.mft (raw, json)
Hash identifier: Jabjpe+ME0Q8QmfbvbsoW4UomjlTs1K1BmOxSBX/iJI=
Subject key identifier: 51:1F:74:89:D9:29:34:C0:77:A2:39:EB:EB:F1:AB:11:CC:53:FE:E4
Authority key identifier: C5:CB:57:79:F8:36:07:1C:52:80:84:86:91:67:CB:C1:AE:08:B9:17
Certificate issuer: /CN=A913F927/serialNumber=C5CB5779F836071C528084869167CBC1AE08B917
Certificate serial: 0C3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft
Manifest number: 0C37
Signing time: Fri 28 Mar 2025 18:34:37 +0000
Manifest this update: Fri 28 Mar 2025 18:34:37 +0000
Manifest next update: Fri 04 Apr 2025 18:34:37 +0000
Files and hashes: 1: xctXefg2BxxSgISGkWfLwa4IuRc.crl (hash: HX3d6tMdEt/C7DiXRKLsdwPsKg2TxDZTLRGs/ML37Hc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3132 (0xc3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F927
Validity
Not Before: Mar 28 18:34:37 2025 GMT
Not After : Apr 4 18:34:37 2025 GMT
Subject: CN=67e6ebbd-0f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fe:a9:a6:7a:ef:19:87:d8:e0:ad:78:bc:ba:
cc:4b:eb:43:9f:5f:ac:d5:7c:20:15:62:67:79:c3:
f7:00:c0:04:c3:e2:7d:5b:45:58:fb:ca:7d:13:00:
c2:74:33:66:4b:21:86:fa:81:61:42:13:1b:7c:33:
8e:62:42:8f:eb:e5:54:e5:b2:7d:9f:88:0a:43:4e:
bb:9b:a0:ff:f8:da:13:14:45:ce:0d:d9:ab:69:8d:
26:16:13:7a:a8:54:6e:f7:b2:9b:31:8b:e0:38:a2:
bb:bb:64:23:6d:31:20:d0:0e:05:04:f9:ef:4e:68:
c8:76:e4:37:62:d6:25:da:85:34:c1:af:04:f3:f0:
01:00:35:9c:9b:4d:db:28:35:4c:ad:2b:6f:47:a4:
17:5b:f9:a4:5b:f5:45:da:aa:d8:80:43:83:c6:20:
66:dc:ec:66:bb:d3:4f:d9:74:ce:99:8f:3a:6c:3c:
75:c2:31:19:b4:ab:49:0a:45:57:69:d4:db:42:d9:
31:1f:d1:90:fa:f6:89:84:d9:29:5b:f9:40:73:46:
40:46:b1:58:e0:59:ac:91:d5:99:46:c2:19:ef:bd:
06:d3:4f:f8:b4:4f:22:40:50:25:af:f9:00:cc:f4:
80:b0:19:6c:2c:ee:7f:bb:03:6e:92:a8:2e:a3:1b:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1F:74:89:D9:29:34:C0:77:A2:39:EB:EB:F1:AB:11:CC:53:FE:E4
X509v3 Authority Key Identifier:
keyid:C5:CB:57:79:F8:36:07:1C:52:80:84:86:91:67:CB:C1:AE:08:B9:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cd:ef:1a:d3:96:85:ae:6d:3f:2f:8a:6c:c2:ce:c2:4f:5b:
4b:f8:38:ee:77:e0:9e:e5:a6:43:af:35:a2:fc:5b:f5:86:a9:
be:97:76:a1:b7:c1:ff:d5:a7:0b:14:b7:75:f3:6e:97:84:ad:
ec:6b:68:5b:99:7b:12:e8:cf:97:1e:e4:30:f0:2b:6a:d2:20:
cd:4f:07:06:1e:80:64:e5:17:27:1b:48:9d:76:18:dd:2a:a4:
32:b5:bb:ba:0a:c0:52:24:cd:47:08:2f:b6:a1:88:6e:cc:96:
88:84:8e:55:f8:72:8e:ac:4c:6d:a8:25:51:5e:5c:6a:cb:4c:
60:18:2d:5c:44:ee:7a:bb:c9:03:23:11:71:33:ac:46:96:0d:
1b:50:ec:8f:79:f3:1a:6f:b7:c4:3c:37:96:64:f6:2f:53:b3:
cf:41:ef:f7:fb:47:c8:25:76:59:04:52:f4:74:8b:ee:83:bb:
7c:d6:67:46:49:b7:76:0c:c5:89:a3:64:c6:d8:60:f8:3d:3e:
c3:9d:d6:ca:6a:51:cd:86:35:0d:69:5f:8c:3a:89:9d:bd:5b:
d5:53:60:13:6e:7b:ad:e4:5a:9c:2a:a3:b1:87:7d:30:99:f4:
00:01:7d:e0:93:2d:5b:ac:f6:20:53:57:7e:66:53:b5:f0:c4:
bd:8a:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:27:39 2025 by rpki-client