Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
File: vjv7J425oD3qOFbX_iKSGDdNj8A.mft (raw, json)
Hash identifier: eTT2lEnP7obFWgywsGAYPdVTZRaV/8vPe9wwJWJzEHo=
Subject key identifier: 63:EF:A0:1A:41:D6:96:E8:60:F5:71:FB:05:62:74:36:AA:13:A3:18
Authority key identifier: BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0
Certificate issuer: /CN=A9145884/serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
Manifest number: 2A
Signing time: Sat 29 Mar 2025 07:02:23 +0000
Manifest this update: Sat 29 Mar 2025 07:02:22 +0000
Manifest next update: Sat 05 Apr 2025 07:02:22 +0000
Files and hashes: 1: vjv7J425oD3qOFbX_iKSGDdNj8A.crl (hash: 2js4l5qG3WI6ayR3+6fmKfl6whBpQ97N3z/oTX+pTpE=)
2: FB1BCFB4CDEB11EF8115D720C4F9AE02.roa (hash: RT6SuMf0BP9mEoih1q3sWdCSwYY5wltwWfZ09bJ/sp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145884
Validity
Not Before: Mar 29 07:02:22 2025 GMT
Not After : Apr 5 07:02:22 2025 GMT
Subject: CN=67e79aff-c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:23:1c:40:4d:df:b2:36:7b:96:88:d7:88:
d3:1c:95:57:95:eb:e7:29:58:c8:c6:1a:30:a6:20:
92:4f:ed:44:6e:ce:50:3a:8a:68:00:8f:1b:5e:dc:
70:3b:30:9f:96:03:3c:4c:63:d5:f7:a3:41:3b:87:
77:d2:e6:cf:9b:37:0e:91:ed:d1:b6:09:a5:e9:ae:
70:e6:f9:39:2a:0f:f4:c2:20:d8:c4:91:fa:e9:02:
2e:4a:bc:38:60:fa:05:c4:79:b8:c7:6b:be:bb:02:
8f:c7:21:d2:03:49:26:ba:2c:b8:8b:73:3d:2a:38:
33:26:d7:d0:ed:43:f5:77:cd:fa:e7:89:7b:54:ef:
d4:8e:37:a2:fa:f7:8e:ca:e3:06:72:61:19:46:e1:
34:cc:63:71:75:5a:8c:2f:49:ca:0d:d5:e1:5d:77:
78:2f:02:de:e9:54:c8:85:37:6c:fe:95:f7:e1:4b:
10:85:e8:28:2c:fb:ea:26:46:b1:35:c6:07:fa:84:
10:f9:b9:0a:8e:67:52:e9:45:92:2c:31:cf:e6:f1:
c0:85:1c:91:0a:c0:a2:35:9f:24:02:4c:86:c9:63:
8a:44:87:7e:88:1e:ff:dd:ff:cf:3d:b1:b9:1a:ca:
c5:14:43:86:09:5b:30:9b:48:df:05:33:81:a7:e0:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EF:A0:1A:41:D6:96:E8:60:F5:71:FB:05:62:74:36:AA:13:A3:18
X509v3 Authority Key Identifier:
keyid:BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:48:e1:0f:18:89:64:24:f8:35:d7:4d:43:3e:d4:7b:7c:95:
34:26:16:89:5c:13:d5:e1:ff:a0:ba:f9:4d:5d:8d:80:2f:08:
d1:11:ec:3d:ee:88:15:95:80:8e:c1:26:12:b0:2d:22:ef:65:
1d:4b:8b:ff:87:57:35:d7:58:c5:a5:ab:b8:2a:ba:42:78:8f:
3b:74:e4:96:6a:70:34:fb:e4:ec:b6:6b:3e:4f:0e:68:06:55:
b8:87:96:73:4f:b8:9f:2f:08:02:88:cd:b6:90:cb:cc:cb:a8:
94:d6:06:4c:33:30:b7:2a:a1:52:03:dc:ff:da:f4:a5:29:98:
af:e8:2b:f6:19:0b:cf:6e:3c:98:5e:9f:d1:ab:57:14:cc:22:
64:b0:ba:67:56:aa:80:2e:bf:08:a3:29:82:31:e4:94:d1:ad:
96:be:05:26:21:f2:1f:2a:82:66:35:50:d0:39:dd:44:51:a7:
1a:73:18:70:2d:b4:4c:95:22:91:e8:82:43:53:5a:2e:33:de:
17:a3:6c:53:c6:9f:1c:a1:01:91:03:a5:07:4d:c4:1f:5b:62:
91:89:c5:ec:30:56:fb:d8:69:59:75:d8:3d:9f:72:85:26:bd:
92:6c:be:16:3e:d4:0b:a5:1e:24:06:0c:39:75:71:00:4e:cc:
67:80:e3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:55:07 2025 by rpki-client