Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft
File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json)
Hash identifier: YG92vivbTp2mosNpGCLt0DQdX81i5NHCQrABRy2r4dU=
Subject key identifier: D1:E5:01:21:EF:6F:FD:A5:B8:87:4C:92:E6:EA:3E:2F:7C:B4:7E:14
Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B
Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B
Certificate serial: 078A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft
Manifest number: 0785
Signing time: Fri 28 Mar 2025 21:37:28 +0000
Manifest this update: Fri 28 Mar 2025 21:37:28 +0000
Manifest next update: Fri 04 Apr 2025 21:37:28 +0000
Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: Jfzdn3KTTw2fM//jfxCxQKqqCwguxIEyB0tY8Kd1O70=)
2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: MXW87fZ4qznNog7Mqv1dybumPTtWHlhfVDxRXuxWlk8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1930 (0x78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144BAD
Validity
Not Before: Mar 28 21:37:28 2025 GMT
Not After : Apr 4 21:37:28 2025 GMT
Subject: CN=67e71698-8d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:0e:82:39:c9:a0:47:c6:1c:8e:fd:f3:60:
f6:b0:57:b7:aa:6f:3d:67:8f:aa:1f:40:b4:b4:a1:
18:a3:a9:cb:aa:32:aa:3f:9f:9a:9d:1d:81:d2:01:
76:db:ec:29:3e:1e:d1:23:a2:f0:35:2a:ee:f1:bf:
4f:02:5f:c1:67:fc:fc:ad:51:5d:fd:5b:4d:f5:8a:
09:e1:6d:a9:d9:fa:eb:8e:72:69:60:23:6c:74:6f:
37:89:0d:22:50:c0:77:5e:bd:42:31:23:7f:f7:f5:
56:75:ae:29:0a:3e:25:09:0d:24:3e:00:7c:a5:30:
be:04:7c:b8:6b:2e:6c:82:4a:0f:56:17:2e:e1:97:
f9:be:ea:28:22:a1:c7:87:3d:f7:88:79:e1:4d:fb:
76:2d:58:6d:56:de:9b:64:e6:30:92:df:f4:84:5d:
c2:06:5f:6a:65:3a:37:4e:3a:ab:c9:88:e2:40:f8:
3e:cb:02:22:0f:6e:26:25:9b:86:82:a8:ad:49:c6:
05:27:f4:e7:54:1d:1f:fb:1e:34:53:eb:01:c9:1e:
79:de:30:68:f5:71:09:7d:f8:f9:43:dd:13:3f:06:
19:48:b0:c7:b4:f0:15:30:08:c1:84:be:53:94:02:
9c:36:a3:aa:54:ba:27:f5:90:8b:8a:c9:5b:6b:a3:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:01:21:EF:6F:FD:A5:B8:87:4C:92:E6:EA:3E:2F:7C:B4:7E:14
X509v3 Authority Key Identifier:
keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:30:c6:b8:87:7c:b5:77:0a:b9:d0:c0:23:2c:c3:65:57:55:
c1:d2:0e:4a:48:30:2e:dd:0e:fe:f1:71:2c:91:db:ae:bd:cd:
aa:09:62:da:ba:67:26:d3:9d:50:64:cf:96:d6:df:ce:46:64:
34:85:39:59:0f:19:59:ed:75:73:fc:c2:e1:4c:89:0a:ee:67:
5b:69:69:9b:5c:a7:54:ec:13:df:0d:7f:ed:b1:62:d7:93:69:
19:33:fb:19:82:84:d0:26:bc:51:d5:bd:8b:19:8d:30:1d:56:
bd:dd:a5:b7:af:ea:66:3b:87:c8:5e:9e:92:fb:b9:8b:77:22:
3b:ce:8f:d3:3e:a9:c8:4b:37:3c:40:7c:98:bd:4b:7f:93:02:
e7:b1:66:8b:92:e7:63:03:a7:42:1f:e1:f9:ef:66:b3:b4:39:
5a:44:ff:7a:de:56:ce:0a:58:31:2f:e1:90:fb:4d:8a:97:23:
32:43:bc:1f:66:47:db:5e:59:25:34:27:1f:55:7c:43:91:50:
1e:c9:23:f0:cf:9a:1b:5d:d9:d8:a7:0f:7a:bc:78:e4:cc:87:
b7:8d:3a:78:47:72:17:5b:5d:1c:93:c3:43:e7:b4:be:f3:c2:
c6:98:cd:1d:45:7a:ef:5f:a2:e6:13:ac:27:9d:86:fe:5f:a9:
da:8b:c4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:19 2025 by rpki-client