Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json)
Hash identifier: HZp7hyhsGLxY51MNXfQqxxJZEIG43lx0ciSoxC1Ipl4=
Subject key identifier: E6:9D:DE:86:2D:71:93:82:B2:08:2C:ED:A1:E9:E7:F5:41:DB:A8:C3
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial: 2682
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
Manifest number: 2608
Signing time: Fri 28 Mar 2025 15:49:08 +0000
Manifest this update: Fri 28 Mar 2025 15:49:08 +0000
Manifest next update: Fri 04 Apr 2025 15:49:08 +0000
Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: hwniFpYjOKVr3zSEgyZIMqdh71x0kiSy6MmWhEp1+hs=)
2: 99C38DDE95C311EF8BAA846AC4F9AE02.roa (hash: DTSCNfC+ZQO725wLkDaJCLTqEP7IAx/7xDezw0K1KMY=)
3: 949FF22A0F8211EE9C28226AC4F9AE02.roa (hash: B3hRYF0bO26k9gxz4EV9GoirQCVy5mfb+aHOF6vK71Q=)
4: 8FC6588099D711EFB8A4757AC4F9AE02.roa (hash: BPf4Uoq0Qj7b7XBxVShWOvIfidFoB1L16kpmSz0j9Ew=)
5: 00BA1DE2BF7611EF909DC53AC4F9AE02.roa (hash: 6TOnQWh6Rh+leK78qFxhx/YmmJcw0Ed9TDfHGSQYc/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9858 (0x2682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DB0
Validity
Not Before: Mar 28 15:49:08 2025 GMT
Not After : Apr 4 15:49:08 2025 GMT
Subject: CN=67e6c4f4-89a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:fa:ec:7d:ea:7e:57:b4:9b:ab:cd:c0:d3:
5b:96:cc:a7:17:f0:0b:64:2d:12:40:c4:71:ec:e4:
07:5e:6a:c5:63:14:e1:7e:07:de:55:1c:dd:17:cd:
b9:28:ab:19:24:e9:74:ec:f7:57:66:a0:4e:47:59:
53:a8:69:80:cb:e0:91:d1:aa:24:61:c9:94:29:4f:
5e:9c:66:2c:16:64:f4:b5:69:c7:b9:c4:e7:bc:a1:
15:a4:50:aa:00:56:ec:25:49:c5:4a:be:41:b0:44:
13:22:e8:70:75:8e:1b:0c:00:6b:4c:bd:7a:0b:3c:
c9:d4:7a:97:33:24:2c:53:9a:ee:7d:cd:db:66:6b:
b2:c4:5d:43:3d:d0:de:ab:91:79:35:17:c8:3d:7a:
9c:5f:96:bd:bd:c1:ee:22:50:ea:ed:a1:77:5b:cb:
02:2a:f2:c9:75:cc:d9:84:60:94:20:b3:f8:46:4e:
e4:0a:4e:34:45:cd:d0:2e:0a:5e:de:77:aa:9e:28:
e2:65:4e:ba:15:4d:07:5e:12:31:fb:34:16:83:f1:
11:3c:7b:4d:b9:3b:b6:88:53:81:ec:d7:3b:a1:62:
21:15:f6:2d:90:42:12:6c:c2:1c:18:3b:64:c6:d2:
5e:77:1d:1f:c9:9a:b6:9d:19:50:74:84:f8:01:83:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:DE:86:2D:71:93:82:B2:08:2C:ED:A1:E9:E7:F5:41:DB:A8:C3
X509v3 Authority Key Identifier:
keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:20:d2:b0:4c:c5:bb:58:4e:ca:cd:40:cb:d0:8f:c9:ce:54:
86:33:94:68:b3:f5:2c:21:f0:3d:13:81:d3:2a:96:7f:81:a0:
2f:dd:c6:37:f5:97:d4:d1:b6:3a:57:1a:1f:b1:29:18:87:2b:
39:e2:84:3e:aa:f5:94:52:96:15:e7:18:67:69:60:94:75:db:
b3:92:ea:5a:cd:d2:43:80:a4:76:d2:8e:d5:fc:a6:ed:8e:53:
58:49:5a:53:e3:9a:66:c0:28:4f:af:86:8d:8e:b5:88:69:5b:
b9:96:04:6b:38:41:ee:45:88:dc:4d:1b:c9:b0:b1:2b:eb:29:
52:d2:16:4a:0e:57:d5:5e:d9:18:53:ae:24:0b:71:c1:7a:98:
45:c6:2c:2d:cc:11:9a:5c:1e:7c:03:a6:f2:cd:97:01:94:f4:
1d:84:26:a5:11:03:6f:2a:39:97:31:5c:b0:13:19:c0:7c:66:
a4:3e:22:10:61:fd:b2:3a:df:86:ac:26:24:6c:e2:92:4d:1d:
9c:19:eb:a1:08:35:00:c4:32:52:83:97:86:29:22:f7:9c:97:
cd:60:6c:be:3f:8e:05:f5:4f:13:48:79:1d:a5:41:ab:49:45:
90:68:a9:f8:f2:70:ad:66:41:50:85:bc:8c:86:e9:f3:7c:31:
f9:6f:97:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:09:13 2025 by rpki-client