Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json)
Hash identifier: vkoSTg/wZuAYX1iQCjX4/PHDLZcmilkAlolX5fpRGSQ=
Subject key identifier: FB:AF:B9:6A:1F:96:4C:3C:E8:78:0D:8E:AF:D1:D0:84:51:04:2D:8C
Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
Certificate serial: 0CC4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
Manifest number: 0CB9
Signing time: Fri 28 Mar 2025 15:40:24 +0000
Manifest this update: Fri 28 Mar 2025 15:40:23 +0000
Manifest next update: Fri 04 Apr 2025 15:40:23 +0000
Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: MjHZjaAeIde4gRcKfmYVho6VQSkxQ2kQfq5T8aErYZg=)
2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: lu8oWRNPgJxFZ7Lozlet3TlMRukqbbGr2PrraLSuCsA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3268 (0xcc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A
Validity
Not Before: Mar 28 15:40:23 2025 GMT
Not After : Apr 4 15:40:23 2025 GMT
Subject: CN=67e6c2e7-e78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:00:01:6b:98:89:f7:98:0c:38:e4:03:5d:
e0:81:45:cf:48:c2:93:29:48:c8:f2:a5:f8:e9:9b:
94:ec:8f:94:d4:d8:c7:24:93:f7:23:a5:e3:77:78:
44:5e:bd:ea:57:c7:b1:cc:87:33:07:df:e2:64:35:
a4:3c:4d:7d:5e:80:b7:09:7c:da:03:9a:af:21:39:
91:1c:e8:9a:fc:56:89:01:8f:87:e2:39:75:80:9f:
d9:e0:d6:f5:71:94:b7:8a:12:87:19:9b:92:fc:55:
d4:4a:78:2e:4f:45:5d:18:7e:5d:66:4f:ed:fa:a4:
1d:32:d5:ea:c6:aa:df:fa:fd:26:00:b7:b4:b2:25:
56:b9:0a:29:b6:b7:6c:66:4b:93:0d:2e:e4:9e:be:
dd:5a:35:a2:0c:e5:69:2e:11:42:52:d8:84:64:3d:
b9:c4:68:8e:9d:0a:fd:2b:ac:66:fd:ae:32:aa:b7:
dc:88:0d:1e:a0:c5:c4:27:1e:9b:a0:fe:ab:ce:e8:
70:5e:c9:d7:f0:8e:8d:8b:58:a1:93:a9:6a:7d:ed:
14:fe:b1:e8:3e:ff:87:d6:a8:ce:14:9f:18:e6:64:
08:74:1b:9c:01:03:ea:6e:b3:f7:79:c1:a9:78:9c:
a7:3a:ed:84:6d:6a:b4:b5:a5:6e:1a:53:44:f3:68:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AF:B9:6A:1F:96:4C:3C:E8:78:0D:8E:AF:D1:D0:84:51:04:2D:8C
X509v3 Authority Key Identifier:
keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f2:6e:e2:9e:1c:d6:b8:f1:d6:58:a7:3e:2b:a0:32:dd:33:
97:4b:77:6f:d2:05:8e:ed:91:6d:e8:27:32:64:58:ef:5c:46:
79:aa:d6:82:a7:81:34:6c:67:f4:a5:90:64:e2:4f:9d:08:e4:
c0:01:b3:07:92:c4:08:45:b5:56:73:b8:ef:9d:da:9a:6d:08:
9a:c4:f8:73:c6:49:9e:e0:96:13:14:a3:1e:8d:bb:5a:42:b4:
11:52:c3:95:d1:e0:aa:ca:f4:3a:34:dd:6c:dc:a4:90:af:71:
12:9b:e6:a1:79:00:6c:a3:e0:20:e5:e7:94:79:2a:77:2a:54:
0f:44:63:0d:a9:59:8c:6a:2f:02:70:7a:08:54:a0:c3:01:2f:
92:6e:4f:3d:0d:96:56:85:4b:ec:65:5c:89:30:8e:6f:dc:b2:
9c:a4:92:c2:f8:38:fc:1f:36:c7:d5:3e:31:db:c5:c3:6a:c6:
fa:be:f7:e8:34:9b:95:b8:d0:ca:bb:a9:f4:27:2f:3c:83:12:
93:b4:66:02:c6:d5:99:f4:09:51:f1:30:33:f2:00:b2:69:0f:
6a:87:18:97:03:1e:95:2d:89:5d:b5:e7:85:e6:16:47:4e:18:
63:29:f0:93:68:04:ea:2e:9c:3b:d1:18:b6:ea:38:ed:64:3c:
b1:b1:f3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:57:34 2025 by rpki-client