Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
File: 8gl4uKIsE6CwK586X8LUiKuovtU.mft (raw, json)
Hash identifier: 16L59FJ5BZ/DJu3PZ9jiwdcHjmCkaBgslKW10/tjaZU=
Subject key identifier: CD:12:7A:70:BF:C2:70:0C:88:1E:AA:08:F6:62:01:69:05:BE:8C:95
Authority key identifier: F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5
Certificate issuer: /CN=A914653C/serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5
Certificate serial: 09D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
Manifest number: 09CB
Signing time: Fri 28 Mar 2025 20:11:48 +0000
Manifest this update: Fri 28 Mar 2025 20:11:48 +0000
Manifest next update: Fri 04 Apr 2025 20:11:48 +0000
Files and hashes: 1: 8gl4uKIsE6CwK586X8LUiKuovtU.crl (hash: 3zqI5kVXOj5KvlKXXZ5Shof5uQf/fRfjgIcpfKFM2+w=)
2: BD7E578079E011EA8DD5907FC4F9AE02.roa (hash: iYxIY6VXdTf7gHnwepU+/VGZkh/V1c1cIjc+gsTh8TE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2513 (0x9d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914653C
Validity
Not Before: Mar 28 20:11:48 2025 GMT
Not After : Apr 4 20:11:48 2025 GMT
Subject: CN=67e70284-e770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:c0:68:0d:eb:55:25:d3:e1:01:e4:af:37:
86:c8:e1:67:63:5f:0e:fa:5c:a7:0b:75:9e:93:45:
93:ba:79:9e:23:5f:a3:27:2e:2a:78:7c:80:51:d6:
97:21:6d:fa:37:03:ee:1b:a2:48:54:f1:14:60:22:
dd:8d:55:b9:a1:d0:49:97:3f:f6:dc:6b:9f:a7:bf:
8e:fa:4b:d4:4d:eb:08:b1:f4:c1:a8:3a:52:32:f9:
d6:33:75:f1:18:5a:4e:d6:3d:11:0d:b3:1a:55:df:
76:f7:d2:8d:4f:04:fa:6a:51:da:4b:44:25:18:a8:
56:9f:e6:51:75:ad:b4:56:f0:ee:bf:46:03:40:a2:
a4:6f:c8:ad:f5:bc:9c:cb:2d:da:d6:e4:16:52:4b:
b7:92:46:11:f1:8a:1e:e7:65:e7:3d:6e:21:23:3a:
c2:9b:7f:6a:e2:9b:15:24:ad:5c:6f:0e:a9:60:d3:
52:0e:37:55:99:52:3c:b6:e9:c2:30:02:58:ca:d5:
76:13:d2:f8:c2:14:73:a8:ed:4b:88:e9:8d:2c:f3:
f9:37:7d:99:b6:dd:ec:da:b0:ae:1b:8f:f6:b5:f9:
a0:98:db:b8:cc:0e:de:73:ce:ba:5e:27:11:95:69:
8b:f7:f8:08:e0:49:38:7b:61:6e:3c:c1:6a:d1:0f:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:7A:70:BF:C2:70:0C:88:1E:AA:08:F6:62:01:69:05:BE:8C:95
X509v3 Authority Key Identifier:
keyid:F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:4d:10:8a:28:e5:45:d3:28:5c:89:07:8d:2c:2c:9d:8e:eb:
17:76:18:6b:8a:bb:d4:69:6c:51:cf:a8:21:a2:de:13:4d:93:
ad:91:e4:0c:46:12:a7:d5:a5:0c:79:a7:3b:53:1d:3f:01:66:
b9:6d:11:52:ff:36:d1:a1:9a:64:4e:f4:07:6a:fc:27:79:f2:
41:1a:ef:48:57:91:26:61:74:6c:35:57:a4:df:c0:f9:36:be:
18:11:28:a2:20:8b:02:c3:48:cb:0e:a5:55:a0:c5:b4:b0:cd:
84:1c:aa:15:f2:32:e1:40:54:f6:28:f5:5d:66:25:a2:b0:d6:
0c:46:44:a2:71:cc:97:37:76:20:cd:b7:21:f5:34:c8:01:1a:
6e:2d:91:ec:14:04:a0:16:aa:d9:08:76:35:3b:7f:a3:92:51:
32:9b:0f:ad:c7:8c:99:b8:be:04:5d:57:68:a5:f9:59:e4:e0:
63:c6:36:e5:82:9b:e3:c1:87:7a:89:58:8d:e2:25:e9:4e:27:
a1:cc:df:d8:74:52:a3:bd:f0:88:cd:7e:68:aa:f0:69:61:c5:
ad:a5:78:5c:61:94:48:ed:d8:f5:f1:85:6b:7c:85:6f:7c:30:
81:c6:2d:77:ad:59:22:24:c4:e8:13:04:df:8d:49:4a:1c:be:
89:c0:25:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:17 2025 by rpki-client