Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
File: iNavzrjz-JAnRNYaYmhLlFnbwfY.mft (raw, json)
Hash identifier: Ly7KtwcYQo8iuNg+lMOXt2H+kLq7/cI0jrgeyxeX05s=
Subject key identifier: B8:DD:06:11:71:6D:7A:71:30:F0:88:3A:D6:BE:C6:94:D4:F8:5B:F1
Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6
Certificate issuer: /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
Certificate serial: 041D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
Manifest number: 0418
Signing time: Sat 29 Mar 2025 00:39:31 +0000
Manifest this update: Sat 29 Mar 2025 00:39:31 +0000
Manifest next update: Sat 05 Apr 2025 00:39:31 +0000
Files and hashes: 1: iNavzrjz-JAnRNYaYmhLlFnbwfY.crl (hash: VkvY1BkyukLDdHDv7xAttonIi1+HHJlzqqwTQ7JIqkQ=)
2: 66D714485D6F11EC9A00E41DC4F9AE02.roa (hash: Zv2OqRWOOIraCVGgHs0pDMOMrHeeVent3h8K/ky95JI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053 (0x41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A550
Validity
Not Before: Mar 29 00:39:31 2025 GMT
Not After : Apr 5 00:39:31 2025 GMT
Subject: CN=67e74143-e64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:5e:08:1c:45:c6:22:3e:7f:d3:d9:5e:a6:
e5:06:0a:96:8b:0b:e6:eb:52:f7:91:50:86:c7:63:
0a:e0:48:36:cf:56:75:b2:b8:57:dd:f0:9c:23:b5:
a9:16:15:50:a2:2f:99:f2:b3:92:c5:ba:00:5d:5d:
3e:9a:d9:73:da:40:cb:0b:ad:28:19:5f:c0:45:23:
e0:a6:b8:e3:b6:7e:fd:ef:c2:e8:79:5f:59:e4:74:
d5:cf:25:b9:54:d0:0a:37:ae:ee:22:0a:02:f3:72:
56:20:eb:a1:8c:2d:f7:30:1e:29:55:ed:74:08:73:
18:41:47:7c:35:ec:88:dc:75:66:89:43:8a:e3:f6:
4b:59:b4:61:84:26:f4:61:a0:8f:0a:b5:04:b1:be:
86:5a:46:31:e4:75:56:f5:1f:5a:0e:7a:f8:fe:87:
4a:0e:ae:dc:55:a7:72:0f:b5:40:61:cd:9b:b2:f3:
7c:83:58:8b:6d:17:a0:03:a8:5e:bd:31:77:8e:cf:
d0:57:0e:79:7a:bc:ee:c9:c3:42:24:24:84:48:4a:
a3:e4:a2:a8:da:0c:ff:48:b7:ba:93:30:26:dd:71:
31:6e:23:ca:9c:14:d0:55:b8:73:a5:35:da:a2:d6:
d3:27:b0:98:32:3b:a8:2b:d6:5e:04:ea:72:36:6a:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DD:06:11:71:6D:7A:71:30:F0:88:3A:D6:BE:C6:94:D4:F8:5B:F1
X509v3 Authority Key Identifier:
keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b4:77:b0:83:c4:e0:57:11:bb:9a:8f:b1:67:0c:f1:85:9b:
d5:ca:fa:7d:33:67:93:88:1d:9c:cd:f8:19:06:aa:7e:a7:f7:
da:f4:49:2d:15:a1:5f:06:70:8d:f1:ee:d8:eb:1d:49:50:9a:
ce:56:7e:dc:90:a8:9b:9f:b0:41:25:6c:71:d4:31:4b:06:4e:
a0:72:26:ec:bd:db:9c:81:ce:5d:39:26:83:fd:e4:d2:b7:bb:
58:07:4a:c2:ce:96:55:29:3c:9a:cd:a1:66:4e:bf:59:9c:46:
f2:74:1a:c5:7f:ae:5c:00:93:d6:ef:91:4f:b8:0e:4c:98:fc:
2a:a2:5b:da:00:e4:c2:a6:ea:32:d2:fd:58:66:cc:d0:8c:1d:
f5:35:fe:0d:88:15:a7:27:5a:05:00:57:21:dc:aa:ae:e9:37:
03:b0:6c:c5:8a:fa:95:8d:8e:4f:b6:80:21:3b:4d:e8:a9:77:
de:cd:3b:5c:95:da:d4:34:83:43:0c:6e:cb:9c:98:d2:b3:3c:
fd:ce:af:50:f4:6c:0d:8b:6e:06:9a:20:9b:b1:98:27:04:96:
67:6e:c8:72:93:2e:7c:fd:9f:07:ee:85:da:76:17:c0:4b:f0:
86:f2:e7:76:7f:6c:d7:4e:37:a7:28:a6:9b:96:14:e7:7d:42:
62:8d:a1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:50:03 2025 by rpki-client