Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json)
Hash identifier: 1y5mnpPdVgHhZGtgxrqIslkuc9kxLBIEbRsJuxHfdfc=
Subject key identifier: 12:FB:B4:32:C5:BA:8E:26:94:43:58:8D:6C:A3:4B:69:ED:1E:96:8F
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
Manifest number: 24
Signing time: Sat 29 Mar 2025 07:08:42 +0000
Manifest this update: Sat 29 Mar 2025 07:08:41 +0000
Manifest next update: Sat 05 Apr 2025 07:08:41 +0000
Files and hashes: 1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: 6mlUcbmkzxmLhne2f6N2ynGfHQl2QIMr84mzL6Xft9U=)
2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: OADH0Zf3ANJ0fVSGo4++5SGmG3UFA33H5Jy/cHOt0/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870
Validity
Not Before: Mar 29 07:08:41 2025 GMT
Not After : Apr 5 07:08:41 2025 GMT
Subject: CN=67e79c79-b95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:77:47:90:e2:fa:16:93:e8:37:23:51:18:
41:6e:a2:ef:65:34:e0:0f:6e:d0:92:45:0a:b7:f4:
6f:7e:59:a8:84:a0:c6:5d:85:0e:4d:a3:cb:51:65:
ad:7d:17:68:93:32:fb:94:e2:45:f9:a8:4b:0f:76:
53:c1:52:9a:e0:71:96:88:8b:bb:09:13:07:53:e3:
d1:c8:1e:58:b5:4a:ec:b1:ff:51:26:64:d5:0e:8f:
5f:f3:8b:e4:81:d0:d5:70:48:c5:e9:88:20:27:1e:
5e:26:0b:e5:7b:09:1e:26:04:af:b1:45:29:73:09:
54:40:97:25:b7:86:69:dd:3d:fa:12:f3:e7:83:62:
3a:0a:9d:45:8f:98:e8:51:53:f7:c3:79:ee:83:d2:
58:dc:36:48:66:d9:b1:c2:38:5d:b7:14:e2:5c:4f:
4c:cc:cc:4a:0c:ec:e8:c7:ff:d9:c0:8f:a6:17:16:
12:da:88:17:df:93:b6:6e:93:1e:71:b5:a0:b4:bd:
8f:0d:59:e0:5e:dc:cc:e1:75:f7:b5:73:fc:6c:12:
36:d0:f8:50:7b:34:df:c0:ba:40:87:be:2b:70:c6:
97:5d:66:97:6c:3b:8a:d5:d1:82:91:cc:ea:9c:1b:
e4:15:de:0a:82:15:64:00:a6:40:5b:bb:b7:c9:2c:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FB:B4:32:C5:BA:8E:26:94:43:58:8D:6C:A3:4B:69:ED:1E:96:8F
X509v3 Authority Key Identifier:
keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:ee:1e:1c:88:72:68:1c:d5:e3:79:81:86:2e:5a:45:ed:8b:
b7:6f:69:c2:86:8c:19:10:65:ff:51:b0:9b:0c:af:ac:0e:40:
3b:76:a2:85:39:1c:de:e0:cb:3e:90:06:46:7d:4a:76:80:d6:
11:e5:1e:8f:c3:23:91:8f:57:bf:88:fe:1f:9c:a6:51:73:4d:
6c:00:31:ed:6b:4c:97:6d:ac:17:fc:e3:10:15:48:cc:c7:cf:
bf:06:22:30:d4:33:c5:2c:a3:28:14:3f:c7:d4:7b:39:9b:06:
2f:70:e1:24:9c:46:84:54:30:be:21:fa:33:ea:00:55:63:32:
9b:57:2e:4a:9d:4b:0e:0a:bf:87:e0:85:15:2f:ea:51:b0:ad:
65:7b:25:8a:16:ec:45:bd:83:56:61:fd:4f:f2:98:55:16:4a:
56:25:7c:5c:91:a4:10:bb:2e:aa:03:73:0a:42:32:bd:8c:61:
f9:5f:2f:62:fa:b7:89:e3:1c:9f:52:36:2b:07:1d:49:9a:ff:
42:c1:7b:47:7c:fc:45:ea:a2:a1:84:8f:8a:0e:80:c8:e2:b4:
ae:8a:27:07:56:4b:8f:2c:41:fd:dd:3b:74:0d:7f:b9:65:13:
f4:b4:fd:86:ce:2b:9a:fc:07:9f:31:4e:a2:88:a5:22:4e:21:
6d:db:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:26 2025 by rpki-client