Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft
File: n33tfQW4HeZsc1u4VH52BIycP1o.mft (raw, json)
Hash identifier: WBnT2RTKb0ejmOG+P8jO7hs5weUyokT05i22zqgWnRA=
Subject key identifier: 41:F5:84:13:1A:A2:99:B6:43:84:5E:65:FE:91:DE:5E:7F:0B:91:93
Authority key identifier: 9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A
Certificate issuer: /CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A
Certificate serial: 05EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft
Manifest number: 05E5
Signing time: Wed 09 Jul 2025 03:56:13 +0000
Manifest this update: Wed 09 Jul 2025 03:56:12 +0000
Manifest next update: Wed 16 Jul 2025 03:56:12 +0000
Files and hashes: 1: n33tfQW4HeZsc1u4VH52BIycP1o.crl (hash: zuqYRkEDMVS0XH3WpX3SDeuFw/+9z8rr3rMpxjTQdd8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1516 (0x5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F9A, serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A
Validity
Not Before: Jul 9 03:56:12 2025 GMT
Not After : Jul 16 03:56:12 2025 GMT
Subject: CN=686de85c-e12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:0c:d5:76:6a:53:c5:3c:c5:19:5f:7f:7c:
e9:e9:ca:39:84:05:6c:f9:a5:51:06:22:fd:d7:51:
1f:b2:b8:6f:03:4a:cb:c7:0a:a6:ad:25:c8:f1:1f:
d6:44:5c:97:d6:0f:f9:b7:34:e2:0e:da:cf:9b:cb:
54:7b:f9:16:00:e0:44:28:78:49:b3:63:6e:5c:a6:
c6:8b:30:f3:b3:02:a1:ec:94:50:75:c9:74:87:bd:
62:61:46:42:aa:dd:1e:dc:dd:62:34:6b:32:b7:f7:
4a:45:58:17:22:78:89:74:16:f9:1b:7b:c2:8a:66:
14:7f:e7:df:70:b5:20:f4:9d:f5:ca:8e:e0:96:36:
85:eb:ca:63:1a:10:ab:40:3e:eb:2f:0c:62:1b:2b:
0f:ee:fa:2c:bb:ee:52:ad:35:fe:fa:87:51:13:7e:
f9:ec:41:b4:ec:ae:ba:05:db:91:1f:11:4c:d4:3c:
70:84:74:84:ee:20:eb:e1:e8:ee:af:2a:51:8f:ae:
d9:d0:8f:82:14:a7:c1:19:61:00:2a:06:12:a4:37:
91:b2:63:6c:0a:61:00:0c:88:1a:d5:71:c3:c0:ae:
15:68:c3:44:90:85:37:ab:70:ce:5e:da:b5:48:28:
6f:f2:71:d7:fe:2e:fe:0b:3f:16:d4:49:84:80:18:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F5:84:13:1A:A2:99:B6:43:84:5E:65:FE:91:DE:5E:7F:0B:91:93
X509v3 Authority Key Identifier:
keyid:9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:c2:41:12:ad:76:95:77:c4:fa:0a:ab:8b:9f:43:7e:3a:52:
61:62:51:79:d1:ec:74:73:ef:19:8b:b2:2a:a1:52:c7:ee:18:
19:80:ca:28:d2:ec:95:ee:37:db:f9:e0:96:0a:c4:02:b9:0f:
6f:42:35:52:a7:88:65:d4:9c:4f:2e:f5:f7:8a:a1:91:b4:93:
79:2e:ed:8f:64:41:f2:3b:05:0a:6f:b9:d6:28:9e:3d:94:f8:
24:72:54:40:d0:da:e9:fe:c2:4b:8f:f6:ac:a9:ce:73:a6:39:
48:d5:70:0e:82:55:5a:55:2f:1b:1f:91:92:ac:e3:de:01:0d:
be:16:f4:44:58:07:df:b6:6e:13:60:ce:84:5c:bc:8e:86:9c:
33:fa:d8:3d:7a:0b:6b:27:78:6b:bd:94:d3:6d:9e:bf:43:19:
5e:b6:72:8c:1d:41:2b:a8:3e:dd:d3:77:31:08:90:e4:02:d6:
c6:db:3b:e8:c6:74:fc:28:35:fa:a6:1a:36:a7:87:29:9f:0b:
80:96:0a:35:e9:e9:bf:a6:e9:0d:98:0f:0d:28:d0:0e:4c:fd:
ea:f0:61:79:b8:b8:f9:a0:99:30:e9:78:21:23:86:14:89:35:
9a:2e:b3:47:bc:c2:8f:09:31:f2:63:b4:7c:fc:c7:99:56:d9:
05:ff:a8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:59:17 2025 by rpki-client