Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier: Yzn2NBrS6bPU77+ssziBpZZteZQsWHl4pYomuWYcRUk=
Subject key identifier: 02:F7:64:5B:EA:C6:A4:C7:D6:14:C9:01:1D:09:52:88:73:F5:4E:B5
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number: 64
Signing time: Sat 29 Mar 2025 06:20:11 +0000
Manifest this update: Sat 29 Mar 2025 06:20:11 +0000
Manifest next update: Sat 05 Apr 2025 06:20:11 +0000
Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: p9uMqKMX2lJL5Dat4qG6y8h3WS4GIeNdpa8p6FFnbwY=)
2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: vFQI0/WMzcqMUL954AE6vlA2OPOfqfsgIiFbV+UqtL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600
Validity
Not Before: Mar 29 06:20:11 2025 GMT
Not After : Apr 5 06:20:11 2025 GMT
Subject: CN=67e7911b-8053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:fc:b8:16:6b:aa:f2:22:89:6f:d8:91:99:
54:37:68:1d:f2:5d:a4:e7:ab:34:a3:de:fa:a4:e6:
32:d6:15:be:e2:e4:ba:a0:1f:66:44:56:e5:59:7d:
73:47:26:93:22:ed:36:3e:28:f9:03:a9:53:ab:1a:
48:6f:1d:1a:b8:0d:e1:59:25:5f:ee:41:d9:69:81:
92:6d:7c:35:73:fb:df:d2:8b:30:74:3e:7b:a5:40:
49:4f:21:22:4e:de:51:c0:b7:44:6e:e5:33:f1:47:
d8:5d:36:df:8e:2f:57:3e:b1:74:bf:58:5d:e1:6f:
45:86:3e:1a:25:6a:1d:49:9e:1e:8c:74:98:b9:70:
60:1c:34:eb:0a:fb:ce:f9:cb:0d:af:a7:59:c1:f6:
7f:ae:4b:f8:1f:09:ef:cf:3c:80:fc:70:1d:f4:21:
9d:8f:f0:dd:06:68:ad:4b:cc:78:57:4d:f1:39:22:
ad:e1:c4:7a:a5:f4:0d:c1:47:24:5b:09:47:38:a6:
58:8c:7c:6c:19:da:73:8c:f6:aa:1b:a9:30:70:07:
1b:51:39:29:18:63:73:cb:ba:89:bb:7d:a7:79:07:
0e:b9:9e:90:f1:71:39:cb:9d:00:89:fe:78:0a:b9:
51:05:ca:69:b0:7f:50:ba:b6:14:2b:83:16:37:a4:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:64:5B:EA:C6:A4:C7:D6:14:C9:01:1D:09:52:88:73:F5:4E:B5
X509v3 Authority Key Identifier:
keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:49:52:8d:36:6d:3b:88:22:74:53:87:9c:42:3f:1c:d0:9c:
38:30:29:3b:79:71:ba:d4:18:47:73:fb:76:d7:8f:bc:6b:3a:
d4:f6:98:4a:55:c7:ad:48:04:a3:e4:19:5b:bf:0d:b7:07:be:
75:e6:47:f8:30:67:52:d3:cd:34:1c:61:a5:28:40:88:27:f3:
b8:f7:f0:72:ad:10:d2:24:be:49:26:5f:99:6d:83:69:7e:47:
65:28:51:bb:23:c5:88:24:b1:99:5e:97:19:db:3a:65:32:d3:
3c:bf:00:cf:09:fb:3b:62:f6:1d:95:b5:68:08:7b:90:25:bc:
40:00:9d:f9:bb:25:6d:b1:92:85:69:23:62:f2:75:31:33:b2:
de:5f:8a:49:71:00:8b:9d:45:89:1a:5b:d9:19:9d:53:43:23:
50:87:4e:af:0a:be:22:8e:c2:fd:39:3e:22:b7:d2:05:a3:51:
64:8b:fe:2b:6f:0b:e8:cd:2d:9a:1f:70:82:1b:81:ae:8e:6f:
94:9f:ff:aa:c8:da:ea:00:74:e7:2e:45:75:5b:f3:f2:32:2e:
a9:73:a6:8e:d6:16:cc:1c:df:00:18:5c:5e:ce:fe:f6:50:2c:
de:31:f9:25:08:c6:96:ec:82:2a:6f:a6:06:e5:a4:d5:b1:a9:
42:7e:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:00 2025 by rpki-client