Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json)
Hash identifier: hYoY9JsAt07Mq8Ku64XBx35yKJRj0mZxUDmMgOZKlnI=
Subject key identifier: 86:15:A5:D9:7C:1D:02:3E:82:AA:E4:E9:39:F3:DA:42:84:7A:20:76
Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9
Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9
Certificate serial: 0656
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
Manifest number: 0651
Signing time: Fri 28 Mar 2025 22:42:40 +0000
Manifest this update: Fri 28 Mar 2025 22:42:39 +0000
Manifest next update: Fri 04 Apr 2025 22:42:39 +0000
Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: 63FORhf0fVk53HAWfKoTveNewZj/6RIlP2kSiaamsg4=)
2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: LymCYpP9ODjDnMZgIvd8/QCM8E6rGc1JYF+pBCdV8o4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D05C
Validity
Not Before: Mar 28 22:42:39 2025 GMT
Not After : Apr 4 22:42:39 2025 GMT
Subject: CN=67e725df-178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:ce:c4:17:38:45:2c:14:4b:e3:30:6c:07:
5f:cd:f1:3d:18:a3:a7:8e:45:2f:9f:f3:d4:27:d0:
43:3d:6c:bc:c0:60:db:26:87:c7:e8:f9:70:b7:be:
cd:52:b6:a2:b8:17:d7:7c:d6:7b:db:5e:a0:91:43:
1c:95:75:4a:7f:fc:6d:1b:76:bc:89:04:4f:5c:e0:
9e:42:79:5d:29:e3:0a:7d:d8:17:d8:fd:df:d5:b4:
d8:ff:5c:55:a2:fd:14:af:3a:a6:a2:73:cb:ea:aa:
50:0f:41:ec:d4:08:5a:ed:e5:aa:51:b2:5b:b9:b4:
10:ac:22:44:81:61:50:e1:68:ea:a3:a1:bc:06:1e:
62:16:4a:ea:8a:5e:63:fe:07:5e:0b:27:02:a7:3c:
cd:92:bc:ef:25:3d:5b:35:e7:47:76:af:fc:d6:c9:
2d:c7:ef:92:00:97:74:53:0e:3f:09:eb:f4:ef:9d:
26:1d:bf:a7:cb:1d:93:c8:8d:b5:1d:64:f6:e6:51:
02:b5:3c:0d:f7:a3:b2:40:72:20:82:2d:54:67:be:
e7:13:17:9e:7d:bc:03:00:d5:8f:0a:cd:c7:48:db:
c1:a9:1c:a8:be:8b:11:2a:13:78:f3:d2:35:2f:7d:
6e:72:60:a6:c9:4f:d9:ec:9c:e5:de:9c:6c:88:8d:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:15:A5:D9:7C:1D:02:3E:82:AA:E4:E9:39:F3:DA:42:84:7A:20:76
X509v3 Authority Key Identifier:
keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f7:ec:ff:40:c2:a2:25:0e:28:77:e3:02:2c:7f:9a:6a:b8:
0c:8d:d9:a6:03:75:c0:8a:4d:6c:7b:0e:6b:9f:d5:ea:7d:64:
0d:46:25:8f:79:5c:50:04:17:47:c1:86:e7:cc:68:5d:41:0b:
b0:b9:46:33:ab:0a:15:d6:13:4f:18:16:2b:18:ef:88:58:22:
e7:bd:27:b8:fe:67:0c:e1:53:26:31:b8:6e:89:ab:ba:5f:5a:
45:3e:54:72:94:84:dd:20:75:2b:90:c7:11:a4:41:8e:28:0c:
9c:7d:49:c9:fd:47:11:28:fa:32:f2:0a:2f:2f:88:e3:4d:d6:
87:e8:d3:6b:78:a1:c7:f2:92:ce:2d:6d:62:89:d8:e5:b6:4c:
4e:4c:6d:a0:78:2a:e0:74:e0:b3:c3:0e:89:c9:50:d3:b5:58:
91:b9:f5:a4:14:73:09:4c:ff:ab:1c:f5:68:3e:aa:b2:cc:c6:
cb:3b:7b:cd:16:05:0a:67:64:a6:02:69:e1:a0:43:af:4f:8d:
bd:fb:69:e8:34:00:cb:3c:76:9f:38:63:53:29:29:82:af:90:
0e:fa:83:13:4e:63:72:10:33:a4:a0:83:72:d7:b1:53:ed:24:
78:bc:14:2f:a2:6a:6a:0a:0d:b5:75:16:e2:84:e3:d0:b4:64:
70:e5:8f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:48:02 2025 by rpki-client