Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json)
Hash identifier: eE1sT7V6RwmEJrCgZaL40Vah+WHS+MKW/9ZJ1DQKnTQ=
Subject key identifier: 35:51:0F:FF:44:E0:03:39:01:0C:BC:AB:FA:CC:35:72:08:3B:75:E3
Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Certificate serial: 0371
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
Manifest number: 0368
Signing time: Sat 29 Mar 2025 01:12:53 +0000
Manifest this update: Sat 29 Mar 2025 01:12:53 +0000
Manifest next update: Sat 05 Apr 2025 01:12:53 +0000
Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: KUl4GV8kbQJJ4KWMzlou+mjDGcV8vPe91SYOD6ArG1A=)
2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: ycFGkMxe7h4Ku30iu/P421qHyOaZ/lm2w5Y03BcYNz8=)
3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: DbGKbMecwcykqDAfU21+x6Kvm9Z6g5WTzg4SdqXRisc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881 (0x371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CA5C
Validity
Not Before: Mar 29 01:12:53 2025 GMT
Not After : Apr 5 01:12:53 2025 GMT
Subject: CN=67e74915-e46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:bb:c8:b2:82:8f:a4:12:2d:ad:c3:6a:b4:
76:4d:cb:17:ac:37:0f:7a:b4:1d:f4:ca:34:86:2d:
80:a5:1c:8c:a1:bb:e7:57:c4:f4:e9:8f:bb:3c:07:
31:70:18:2f:c6:8e:a9:86:9a:32:2d:24:4f:4c:ad:
a5:83:f0:17:7c:2f:96:3c:1b:1c:55:51:bd:d7:a8:
89:7a:9f:9a:6c:87:77:91:96:24:e6:dc:ed:1d:69:
db:ba:ce:49:88:9f:73:1b:9e:6c:27:66:25:20:3d:
02:3d:c3:21:78:ac:1d:9e:c4:10:8b:32:d8:ef:68:
a6:89:72:68:c1:ae:c3:f3:aa:12:b7:e4:7c:fd:76:
3c:2a:34:4a:c3:91:bf:a3:39:d9:18:37:6d:8e:6e:
e6:27:f5:94:20:b1:89:d7:fc:0a:f1:0e:51:3b:67:
4d:9a:f4:5c:5b:9e:87:52:fe:0a:8a:f4:6e:67:5d:
41:b8:eb:0e:31:fd:f7:a3:2b:0c:4c:99:2b:1b:fa:
ca:34:77:e3:b9:c3:96:88:d9:e5:e6:af:ae:b2:78:
98:42:d4:b6:8e:79:07:d2:0c:59:96:00:d7:e7:51:
47:15:80:e9:d7:0d:c0:a4:02:20:9a:21:e4:4a:66:
64:b1:21:07:b2:c2:05:06:d0:cb:93:d6:49:fa:c0:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:0F:FF:44:E0:03:39:01:0C:BC:AB:FA:CC:35:72:08:3B:75:E3
X509v3 Authority Key Identifier:
keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e0:45:78:6c:73:76:11:d4:4b:46:2a:2d:8a:74:13:bb:e8:
a2:a6:73:ea:aa:cb:e8:f8:a0:eb:50:5b:00:ac:9c:fb:05:0b:
d7:3b:39:a6:6d:09:54:8b:8e:19:d4:53:04:fa:a7:b0:6d:54:
61:71:fa:52:3a:d5:92:57:a5:ad:40:c7:8e:a0:d9:f8:9d:77:
b8:94:7f:4a:04:1e:5b:91:d8:b0:20:7d:27:ae:6f:4c:eb:8c:
70:16:b8:c0:a8:c2:06:06:00:e8:8e:10:63:e4:a8:50:03:c7:
82:d5:bc:16:dc:16:58:3a:58:35:c4:c6:b4:89:90:87:1d:d6:
f3:24:db:dd:4b:69:9a:18:99:b5:2c:46:32:14:5a:47:66:4a:
d6:1d:45:43:ca:9f:d2:7f:eb:c8:ab:a6:25:9d:37:fd:bd:8b:
ce:7e:83:5f:2b:78:3e:de:a3:c2:4d:61:31:8c:aa:bc:e8:da:
57:16:2a:f1:f1:a2:e9:f1:e2:61:11:f8:7f:a3:e9:7c:09:9b:
41:ba:bd:88:d6:15:0b:9c:05:06:15:20:d7:6c:41:e5:b1:6e:
2c:e4:33:e9:94:0f:7c:3c:37:9f:e2:f6:3c:d9:d3:3a:c1:bb:
a3:23:e7:a2:76:ac:fa:45:be:50:97:66:f9:d7:28:16:9c:cb:
fe:39:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:13 2025 by rpki-client