Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json)
Hash identifier: yZEOAJqyFRrWz4Od7SIAJ/UdIGMyfb2FF8hXgQqcOpY=
Subject key identifier: FA:07:AC:FF:FE:13:B2:AA:B1:0D:EA:C5:58:A5:BE:B1:26:41:52:7B
Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D
Certificate serial: 0C28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
Manifest number: 0C21
Signing time: Fri 28 Mar 2025 18:41:39 +0000
Manifest this update: Fri 28 Mar 2025 18:41:39 +0000
Manifest next update: Fri 04 Apr 2025 18:41:39 +0000
Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: COJnTKZTS31mRpmZ6HyNs8x6HleVuNXg0LlM0eP3AaA=)
2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: 8ePOlBYKqgy0MK4nBzW4xCCIxX7mzxm4E8sEUtNm6nk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150EF7
Validity
Not Before: Mar 28 18:41:39 2025 GMT
Not After : Apr 4 18:41:39 2025 GMT
Subject: CN=67e6ed63-b85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:52:e6:0a:87:fa:a8:ca:15:dd:2b:db:46:
f2:41:9d:f9:e0:4d:ce:60:ec:3a:1f:5f:47:58:58:
14:cd:58:d4:56:c9:1d:74:43:cd:4f:f4:19:3d:71:
43:91:72:e9:ea:6c:5e:9c:7b:2c:28:79:ff:b8:07:
99:b1:eb:4b:e2:6c:77:85:46:da:64:02:ee:f6:71:
97:06:25:3d:c6:e8:90:ce:bc:6d:26:60:f5:62:74:
7f:c7:9e:43:a8:7a:bf:b2:ae:b1:70:58:35:bf:38:
cc:f0:2d:3a:ca:ad:e9:7e:d3:77:5b:cb:60:4f:9f:
e9:cc:6d:cf:32:1d:91:31:2c:a1:9a:d8:32:7a:84:
6e:6f:18:70:53:5b:b1:55:f6:88:48:5f:04:fa:01:
34:ae:ed:91:e8:1e:2d:34:ad:eb:b0:03:97:bd:ab:
09:00:41:cb:b6:4f:d7:3f:af:9d:2e:d1:81:f8:36:
25:0e:59:22:2e:22:c7:b9:ec:4b:2e:3c:64:ca:3d:
63:37:34:a9:8b:cc:29:ca:1f:45:be:a2:ab:48:fc:
8a:cb:bd:19:67:b6:4a:e6:82:40:8a:9f:e1:a1:d5:
a6:01:bc:54:1c:60:38:e4:bb:0a:d0:37:9d:62:f7:
9e:d0:8c:61:1b:af:c8:48:07:7b:da:f5:28:a2:c6:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:07:AC:FF:FE:13:B2:AA:B1:0D:EA:C5:58:A5:BE:B1:26:41:52:7B
X509v3 Authority Key Identifier:
keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:93:a3:95:5f:e4:fa:30:77:df:45:38:73:eb:12:82:3c:44:
99:71:72:52:4c:27:7d:5d:05:1c:33:a4:4d:e2:17:f0:5c:0d:
a1:76:a5:ee:37:69:f5:2c:5c:6b:e5:e0:19:36:e4:de:dd:31:
23:96:c5:e6:d0:64:d6:6f:2c:01:89:cf:ff:d7:ae:47:07:cd:
42:f6:8f:38:a7:18:49:b4:7e:65:f7:d5:4a:ee:d5:4b:66:01:
fe:83:62:48:65:71:8f:2c:db:7b:44:75:f1:f0:09:b3:75:63:
36:5e:9c:1a:a8:96:75:53:e5:d6:21:d1:23:f4:d9:31:53:b0:
1f:27:db:b6:57:32:d8:f3:20:7c:bf:3e:ae:28:79:99:e5:7c:
7e:bf:6b:22:5b:e3:1c:6b:5b:e5:29:8a:15:06:82:96:85:54:
8a:df:a1:0f:a9:66:52:f5:32:a9:87:ec:6c:46:8c:3c:9e:6a:
ba:64:53:91:a5:8a:a9:9d:ae:82:e1:1a:c0:9f:8a:4d:df:ec:
8f:c0:53:df:85:ec:04:31:e7:a6:39:be:5d:64:77:5f:ac:72:
d5:a8:30:52:6a:41:d9:d2:68:01:fb:c2:15:ce:05:bf:23:cf:
8a:3d:63:56:50:f3:db:de:55:bc:c1:8d:1f:25:df:95:5c:6e:
43:50:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:38:54 2025 by rpki-client