Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json)
Hash identifier: bfQzzOg1ELbhLrxJRdqgYwMtzy8pr+FEUIwaezMrhow=
Subject key identifier: 18:4D:74:B6:54:3F:E0:51:F4:5A:EA:79:71:FB:1A:A1:C1:3E:71:FD
Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D
Certificate serial: 0500
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
Manifest number: 04F8
Signing time: Fri 28 Mar 2025 23:58:40 +0000
Manifest this update: Fri 28 Mar 2025 23:58:39 +0000
Manifest next update: Fri 04 Apr 2025 23:58:39 +0000
Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: UJNSl4AJyApWokCHjgL5m/GHP0FdFN3Ribaf3ry5VXg=)
2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: 9v3EHVS6OF29hHJXAC8+0BpNbFO1DRfm0tNrOjvIm8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1280 (0x500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144266
Validity
Not Before: Mar 28 23:58:39 2025 GMT
Not After : Apr 4 23:58:39 2025 GMT
Subject: CN=67e737b0-e68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:ae:59:d9:db:27:bb:78:6f:ca:f3:6d:96:
a7:65:4e:b4:44:dc:93:b7:07:05:ec:1c:9e:bd:29:
c5:d0:ab:8b:69:45:b6:3d:39:5b:e5:90:5c:1a:83:
a4:6f:c7:df:52:da:a6:f8:90:e2:6f:14:62:98:f6:
f5:92:a1:5d:dd:47:e0:75:e9:4c:ac:f8:29:50:50:
87:da:e0:50:06:ef:4a:a0:36:06:0b:9a:ee:c2:92:
d7:26:5a:9d:dc:07:ee:77:b7:2b:04:df:d7:29:ab:
4c:09:f1:94:48:c3:67:d4:e8:8b:55:99:db:f0:bd:
65:4d:73:03:ed:b4:2e:c9:76:57:26:20:9e:ae:a2:
59:d2:e6:29:51:b2:6f:1b:bc:be:19:95:47:49:10:
10:83:40:b3:c0:3b:85:ca:01:d4:5d:bf:33:89:da:
a2:10:3f:0e:2c:ba:74:16:13:71:c6:99:54:13:23:
fb:34:16:2f:3a:11:58:c5:1c:29:8b:1d:9c:62:c2:
ea:eb:fc:a9:18:73:aa:c4:81:14:2f:76:c7:ee:59:
82:df:fc:37:b3:e2:42:47:45:46:5c:66:6e:c2:bb:
7b:1d:c9:63:b1:d5:d9:b2:3f:b9:0c:ad:35:ab:98:
9c:8d:0a:db:71:97:25:01:c5:14:3d:7a:e6:16:09:
e7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4D:74:B6:54:3F:E0:51:F4:5A:EA:79:71:FB:1A:A1:C1:3E:71:FD
X509v3 Authority Key Identifier:
keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:2f:a5:2b:61:50:c5:d4:9e:82:52:b3:8d:a9:37:47:63:ee:
c5:47:5c:94:6c:3c:cf:0b:50:87:29:f1:29:8b:06:32:4a:b9:
57:f8:ee:de:8b:44:95:f4:a6:2c:c4:28:d8:6d:45:fb:26:88:
05:a7:42:63:b0:d7:21:2d:51:89:21:2e:e5:97:c6:18:22:26:
c5:49:14:3d:9e:74:e1:75:81:c2:06:d1:69:82:71:8e:ac:f7:
ec:37:dc:7a:e6:92:9a:27:ae:56:3b:46:a9:8d:53:ee:98:18:
27:3d:cf:27:09:fb:88:eb:ca:44:d4:be:02:19:cc:7b:92:01:
7b:d2:26:4a:35:da:35:5b:d2:26:44:32:20:be:9f:eb:05:0c:
6a:ce:9e:47:ae:56:7c:28:5d:d8:07:7b:9b:54:de:51:e9:42:
c1:8c:d3:ad:59:5c:bc:f4:e3:4f:ce:73:ae:83:fb:8c:8c:5f:
17:a2:fb:12:94:e8:e3:a3:41:09:fe:1d:af:c9:c8:b0:f4:42:
05:48:c4:61:58:4f:06:9e:df:aa:76:a0:ab:b5:66:47:79:19:
80:7e:16:bb:09:0a:4c:dd:12:cc:6a:67:dc:cd:79:2e:c2:8a:
10:06:c0:96:d2:29:ba:1a:72:08:bb:a4:f2:33:a2:16:c1:75:
ab:0e:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:57:47 2025 by rpki-client