Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json)
Hash identifier: u+rYHo2gOS2FVbimSJJJxiFKE5TLgomYSxPN9C2JoBA=
Subject key identifier: 5C:D8:7E:6E:99:54:0A:2B:24:2D:7C:6F:5A:F4:E6:75:0D:F5:CD:E2
Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
Certificate issuer: /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7
Certificate serial: 08D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
Manifest number: 08CE
Signing time: Fri 28 Mar 2025 20:43:20 +0000
Manifest this update: Fri 28 Mar 2025 20:43:20 +0000
Manifest next update: Fri 04 Apr 2025 20:43:20 +0000
Files and hashes: 1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: 3F+zreFKA2nEoFRfE8vF1T5xZ1eLBKzeq2jP78Nu0i0=)
2: E04ADD7CB2E511EAA94E5634C4F9AE02.roa (hash: SDDF+daD6uA45d2pVbzA/cw/2JyMm9s9TzTDlHyfXN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150A9C
Validity
Not Before: Mar 28 20:43:20 2025 GMT
Not After : Apr 4 20:43:20 2025 GMT
Subject: CN=67e709e8-b544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:50:ab:fc:7c:1e:70:be:5a:b3:78:a7:d8:4a:
e4:c2:98:e5:70:c9:39:1a:ff:d6:6d:2f:5d:f5:ed:
ee:8c:fe:d5:e8:27:9e:c9:09:08:e1:ff:af:7d:87:
89:df:c9:e8:8c:c2:33:81:d1:27:19:7b:81:37:bc:
22:d6:26:0b:19:df:50:33:41:77:c1:f7:ea:96:67:
2f:04:c1:cc:f1:80:64:00:dd:b2:0f:7c:de:a0:e9:
fe:76:fb:72:ed:58:c2:f1:73:0f:2e:62:68:cb:e9:
d8:bc:39:31:a5:7b:82:48:40:3f:de:5f:1c:86:27:
e7:27:d5:5c:89:bd:fb:59:10:07:08:17:4f:e3:d7:
f0:6e:7b:8b:40:03:85:08:78:b2:06:ea:b7:d0:ef:
1f:91:7f:45:cd:b6:e9:31:75:8c:40:d2:cd:fa:14:
ae:f3:3e:74:f2:8f:2e:32:ca:f4:7c:a1:00:64:c1:
f2:7d:fa:a5:1f:e8:1c:2a:32:d5:e7:8d:6b:4e:18:
b8:40:c7:20:55:59:e0:28:04:2e:48:a0:45:26:25:
3d:e3:41:e6:d3:ab:af:26:b3:c4:51:fe:5e:36:6d:
77:27:6c:30:91:c8:c4:de:2c:7d:9d:f7:ac:48:da:
47:0f:a3:9a:02:b5:bd:18:d4:80:c2:a5:76:e3:d1:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D8:7E:6E:99:54:0A:2B:24:2D:7C:6F:5A:F4:E6:75:0D:F5:CD:E2
X509v3 Authority Key Identifier:
keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:29:d5:72:a2:d3:b1:ac:0f:6b:4b:29:da:19:fa:b8:4d:de:
b1:c8:4b:aa:a4:bf:41:70:72:12:d7:49:d0:f4:b7:db:94:a1:
a2:d5:a9:b7:ab:18:f5:4f:d7:7c:d3:a4:3d:70:5c:53:7a:65:
1a:9e:f6:e4:3c:47:23:f6:77:54:2b:fc:c1:d8:a4:84:dc:b7:
dd:87:96:72:0a:94:a0:bd:f8:6e:65:19:4f:0f:c6:e0:2c:bd:
bf:12:eb:57:b9:88:05:5f:c7:b9:c2:c8:41:3a:ab:e7:3d:69:
0c:81:a3:ef:e6:40:b3:17:00:e4:02:f8:87:b8:c4:29:31:26:
6a:71:26:61:35:15:42:25:6d:48:b9:8f:cb:79:9e:db:cc:ae:
b2:33:78:70:bf:cd:6e:df:bc:28:4f:df:86:fe:6d:6b:d1:d1:
15:87:e5:6f:36:64:0e:d4:bb:f4:a6:a3:94:28:21:97:cc:ff:
bc:01:4f:68:1d:ce:62:9b:65:9d:a4:65:7f:61:f8:32:d9:0e:
82:b5:a7:63:b0:03:cc:b4:31:e4:31:5e:65:c4:ec:63:b3:b1:
15:af:df:8d:9b:3e:0e:03:58:bd:1d:1e:e0:78:e2:14:90:7c:
f5:08:2d:f5:44:65:15:61:c5:d0:8d:f9:1f:cf:83:b8:fc:25:
65:01:24:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:48:25 2025 by rpki-client