Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json)
Hash identifier: wkTnMFtDxffdJUkyj9lJxdt/k69XCgHIt3gjOZ7TSUo=
Subject key identifier: A4:0A:62:86:6A:D2:8A:4D:65:85:14:51:97:BC:19:8B:B9:BA:72:FA
Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Certificate serial: 0AE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
Manifest number: 0AD2
Signing time: Fri 28 Mar 2025 19:40:24 +0000
Manifest this update: Fri 28 Mar 2025 19:40:24 +0000
Manifest next update: Fri 04 Apr 2025 19:40:24 +0000
Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: GmYJ6soWWOoZUDtk+0lah0d9IsSY+tJCHFL0ze2HhsI=)
2: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: Vs9WbC7+FXTpkpEtrPfe5o3W7t/VcDXrHl+kg25ZJHc=)
3: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: 6/Bcw5YjZPi9shssWW0OtrdPJZKAVnJFq1ohKYFJu8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2791 (0xae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148827
Validity
Not Before: Mar 28 19:40:24 2025 GMT
Not After : Apr 4 19:40:24 2025 GMT
Subject: CN=67e6fb28-4a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:e6:3a:0a:d6:40:27:ef:a2:df:68:cb:d2:
9b:e5:9b:db:af:2b:25:94:bc:e8:ad:13:07:82:df:
9a:b2:d0:00:f9:bf:a7:01:9a:30:4a:21:8c:45:1a:
a9:2e:6c:8f:ff:8d:d8:29:31:76:f9:65:5e:f7:0d:
36:2a:e9:48:52:d1:ac:1d:55:04:b6:0e:01:c0:7a:
9e:06:ac:25:3c:18:4b:31:aa:d0:42:9d:f6:ed:d9:
9d:58:ae:5d:18:7d:ef:9a:b5:8b:a1:18:41:f5:da:
16:eb:52:f3:e8:67:5b:a3:24:c1:81:1b:68:b5:ba:
28:93:cd:05:db:4b:7c:98:d2:0a:d2:cd:7c:85:34:
b1:fd:3b:c0:f5:2f:b7:0b:2c:27:dd:85:b8:bd:71:
ee:f4:aa:07:43:63:22:27:a8:82:b2:5a:ba:78:23:
2f:19:66:df:f1:a7:f6:b2:f1:a8:5e:8d:65:e5:5b:
2b:06:96:ee:12:ac:d6:bc:91:cc:e9:2d:8c:6c:75:
7e:eb:55:b8:7e:5c:43:d4:3f:d1:76:31:c0:4f:92:
11:4d:08:80:60:24:d3:ed:2c:50:c7:e0:c6:5d:cf:
05:17:33:6c:4f:60:24:0d:81:ea:71:53:23:8e:5b:
5c:ef:31:fe:91:ca:e9:04:63:5b:6d:17:69:e6:1b:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0A:62:86:6A:D2:8A:4D:65:85:14:51:97:BC:19:8B:B9:BA:72:FA
X509v3 Authority Key Identifier:
keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:d3:8a:a0:93:01:1e:c5:bb:a0:ff:8b:c4:64:cf:b2:53:f3:
ca:fd:08:49:1c:70:41:8c:a0:e4:d6:a1:37:00:14:70:fe:60:
fd:68:d6:89:e7:f9:e0:d7:62:7c:95:8a:14:65:ed:d9:51:d0:
84:1b:07:db:44:f4:2e:13:49:dd:f4:76:18:26:db:11:cd:24:
13:95:57:af:10:b2:b8:66:2a:a7:62:df:cc:9c:bb:0f:bf:dc:
92:7d:45:b5:c2:fc:db:3c:25:5c:7c:0b:47:d8:04:18:ea:5c:
5a:12:61:d2:fe:08:39:ee:1c:96:44:3b:b9:5c:c3:88:67:f5:
6e:a0:b0:c6:b4:a4:be:90:e5:e5:7d:60:d3:9c:48:bc:ae:86:
5b:ad:60:2a:6f:e3:75:b8:ce:5d:a1:f8:61:d6:30:db:19:11:
6b:d2:e4:6b:ad:93:aa:69:82:40:ab:9a:3c:88:5f:ad:ec:10:
b6:c2:5e:e3:d7:fb:4a:44:a9:b4:e5:a8:d2:ef:34:7a:47:a3:
87:de:34:19:c4:9a:b7:24:8f:63:6c:39:e5:fe:fa:6e:2d:6c:
fb:13:bf:f0:06:72:a8:18:95:e2:04:79:75:f9:d2:c5:75:1b:
83:b5:04:81:3b:6e:2f:63:b2:08:51:8e:6d:61:9d:1c:9e:32:
cd:69:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:02:07 2025 by rpki-client