Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier: u45XSl6zNPtMkDUBek4EDGncwWNRrR0cUYK73tCQT54=
Subject key identifier: F2:2A:2E:66:49:02:AD:B7:4E:AA:C8:51:8F:32:54:1C:93:B4:24:32
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number: 4D
Signing time: Sat 29 Mar 2025 06:37:51 +0000
Manifest this update: Sat 29 Mar 2025 06:37:51 +0000
Manifest next update: Sat 05 Apr 2025 06:37:51 +0000
Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: 3YStShHFzzq56jYG52giLHmlH95iFfRTcFs86dzRbd0=)
2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142489
Validity
Not Before: Mar 29 06:37:51 2025 GMT
Not After : Apr 5 06:37:51 2025 GMT
Subject: CN=67e7953f-c6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:dd:20:dd:2f:f2:9e:0c:2d:8e:57:e7:40:
fe:c2:46:f6:26:a7:43:15:03:1f:21:69:90:7d:23:
77:ea:e6:40:bb:a4:13:d1:ce:49:cf:ef:bf:86:e0:
15:7b:fe:66:18:9e:cd:03:ef:63:fe:43:dc:d8:2b:
ee:80:9d:3d:60:c4:ba:c3:9b:d4:64:d6:c8:f1:48:
e5:87:ad:51:96:7c:d1:82:e6:22:28:48:39:0a:dd:
8f:47:b3:18:d6:68:d3:19:66:6d:11:2e:2c:4c:43:
3a:25:f8:fc:f2:e4:33:fe:fa:e3:1f:e0:3b:d3:67:
28:80:2f:5d:e2:0c:33:31:df:4e:d6:66:5b:2a:f8:
3b:35:dd:03:dc:c5:e1:e4:d3:51:dc:76:ce:8a:69:
80:51:2f:7d:98:13:ed:23:08:e2:ce:1c:70:69:5f:
dd:29:28:8b:b9:79:8c:1b:92:2b:89:94:f8:cc:6b:
c0:9a:53:ca:c8:92:9f:4c:c4:f6:cc:1b:10:87:3e:
b9:dd:6b:87:a8:9e:af:a0:c7:51:98:7b:c7:1c:e8:
7e:5c:5c:b2:7c:18:5b:8f:32:70:7b:f1:69:6b:24:
d3:63:85:04:3c:21:ec:6c:db:48:23:6d:3c:76:f8:
3f:ae:5a:a5:e5:fc:f3:a7:d5:e4:3f:4d:fc:73:10:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2A:2E:66:49:02:AD:B7:4E:AA:C8:51:8F:32:54:1C:93:B4:24:32
X509v3 Authority Key Identifier:
keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fe:d4:ec:44:01:2d:c4:aa:21:a2:85:b6:b4:8a:9e:27:2c:
c4:7d:e4:e4:ca:ff:dc:1f:5c:14:b6:98:c7:d5:48:bf:6c:8c:
8b:f6:ce:e0:0b:ca:56:d8:ef:88:0b:63:f0:c4:f0:e9:b0:9e:
aa:91:17:1b:05:9f:e7:c2:b6:ad:11:68:53:34:22:e4:f7:36:
47:99:ef:28:1e:8c:dd:e8:41:37:99:e9:5c:c6:13:0e:2b:b8:
ed:51:c3:25:5b:84:21:70:eb:27:5a:40:29:8c:25:a0:87:a5:
a5:34:96:83:ff:f1:96:21:96:be:91:1b:af:64:07:31:b7:26:
78:67:db:bb:0b:06:0d:d4:0e:bd:d2:7c:cb:c4:51:ea:76:fb:
6a:a3:1a:88:ea:f6:cd:30:64:d1:df:80:33:52:c6:6a:c5:07:
52:3c:f7:b9:97:42:9e:af:4d:46:63:8b:c6:96:89:b8:f4:55:
39:d7:2b:9a:85:2b:d2:bc:6e:48:01:a7:8e:97:36:5b:77:7e:
87:ea:64:bc:6e:01:7e:09:15:76:c9:36:f3:8a:09:ee:18:2d:
8b:8f:2f:2d:db:f6:3b:23:56:b3:ba:28:38:a1:c0:6a:6d:b8:
1d:58:d8:eb:5f:39:8f:10:79:b4:9f:25:43:7d:cf:64:1d:ba:
b9:3e:68:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:26:42 2025 by rpki-client