Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
File: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft (raw, json)
Hash identifier: RmSjVbwEvNjrFJiJ4RorPo9ShPD0Wt78PhRknHJ/8/I=
Subject key identifier: B1:45:BF:81:E8:D2:EF:00:F2:8A:C9:83:D7:EC:60:D7:64:A6:51:D5
Authority key identifier: 22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8
Certificate issuer: /CN=A914C475/serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8
Certificate serial: 06D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
Manifest number: 0BDE
Signing time: Fri 28 Mar 2025 18:53:53 +0000
Manifest this update: Fri 28 Mar 2025 18:53:52 +0000
Manifest next update: Fri 04 Apr 2025 18:53:52 +0000
Files and hashes: 1: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl (hash: ERt0DDR9nlNviFQs8MYpewBGJqTZwO77+sFjEK6mgfc=)
2: 01283BC2532011EBAE6D1F37C4F9AE02.roa (hash: +Gukm6enyIbdbaf1JuwEUsgqXGQfDTqeuMKRTtycATA=)
3: D6F76118231C11EF84144357C4F9AE02.roa (hash: es734osl5liZ5XtweVos6tWec0UeUjh4JQH+2AuNXUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1752 (0x6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C475
Validity
Not Before: Mar 28 18:53:52 2025 GMT
Not After : Apr 4 18:53:52 2025 GMT
Subject: CN=67e6f040-4dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:a4:ef:70:84:ca:09:11:b7:76:1a:62:89:
cd:5a:03:a8:d6:21:21:00:9e:2f:56:5a:58:a6:5b:
f9:53:1b:80:7c:3b:b3:25:95:7c:b0:ce:38:a8:a7:
c4:9d:a6:0d:72:b0:ab:d9:3f:b7:39:db:96:9d:a8:
9c:97:e0:ac:28:d5:b7:9a:f3:7d:3a:a7:21:30:5f:
79:ac:21:8b:78:e5:29:b9:81:9d:e4:48:a8:df:d6:
d9:36:ab:d4:df:6a:36:9d:b1:14:81:2f:0c:2e:8f:
d4:6f:3e:52:9d:0d:9c:a7:99:ac:36:b5:bd:3c:5d:
3e:3a:d5:83:d8:ec:aa:50:8e:6f:eb:12:84:15:0c:
63:37:2d:52:87:b9:d7:77:55:24:bf:7c:6a:4a:49:
cc:45:3c:70:b2:4c:38:7f:7f:50:c3:b9:0e:a4:8d:
c5:5d:72:61:5e:e2:e3:9d:1d:9b:6d:96:e8:ee:93:
21:8e:dd:7b:39:42:70:bc:cd:bc:88:f3:e6:58:5f:
20:59:0b:71:56:22:14:37:c9:9a:3d:46:0c:8c:6a:
6b:12:62:1a:6b:d8:57:1e:38:b4:70:ee:28:d4:29:
60:1c:67:c6:6f:5f:5b:5c:7a:0f:ff:3a:76:1b:22:
0a:af:18:56:42:f8:f7:67:35:ec:93:1c:d6:77:48:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:45:BF:81:E8:D2:EF:00:F2:8A:C9:83:D7:EC:60:D7:64:A6:51:D5
X509v3 Authority Key Identifier:
keyid:22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:53:49:cf:63:90:a1:86:1b:df:40:5b:c4:83:29:d7:42:0a:
c5:ef:c1:0f:3b:f0:3a:60:42:33:62:ac:67:a5:1a:aa:72:79:
3d:99:39:32:00:81:b7:25:e8:b8:ad:40:07:cc:66:d4:b5:0c:
0b:d8:ce:78:cf:f5:37:f8:5e:eb:08:d5:46:58:60:41:89:35:
33:40:31:9c:5e:11:60:fb:ae:9f:89:73:fa:3e:23:ab:ed:b1:
f2:c4:42:34:d1:b3:e4:06:66:9e:10:17:50:26:9b:f6:1e:43:
70:48:da:be:d3:92:b9:74:41:cc:f4:36:69:f2:e8:c0:3a:6d:
d4:82:39:a0:23:be:06:ca:0a:38:b8:bd:16:79:64:42:0f:21:
3b:49:18:07:74:00:de:e1:3e:ef:f0:e2:d8:f6:b9:5b:a6:7a:
ef:4c:ad:0e:d2:bd:0d:e9:b9:22:19:da:d6:88:32:cb:e6:de:
77:90:de:91:56:97:2d:9d:14:60:55:3d:39:6f:8f:78:35:22:
a8:a9:75:0a:e1:2a:b2:cf:96:62:ac:a3:25:b2:89:8c:a0:33:
b0:05:13:a6:e9:42:23:c1:2b:1b:78:93:0b:40:61:e4:7a:54:
6e:a4:4f:35:ba:51:4d:c2:02:c0:19:c7:0b:3e:88:ad:ef:01:
0b:b6:fc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:32:49 2025 by rpki-client