Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json)
Hash identifier: J4d/1KaoZGKJwsj3WQzTvmCVuJtjqrn7nHyx2fz42wQ=
Subject key identifier: 2B:C7:36:33:0B:78:3C:F7:69:44:A6:E3:50:C7:2A:AA:26:3C:0E:14
Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Certificate serial: 0463
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
Manifest number: 045B
Signing time: Sat 29 Mar 2025 00:26:33 +0000
Manifest this update: Sat 29 Mar 2025 00:26:33 +0000
Manifest next update: Sat 05 Apr 2025 00:26:33 +0000
Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: QwFeAT7ODu3750ZGK0YIK4L0XEU76TR1WxPLUFBTRQk=)
2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: oit1Hcurqov7MCqWlGsRBKXsNTM2JCAP78/GFOI7Xmc=)
3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: 4z+897eYmawfXH/tzTqewnh8oQ4d+YXJLaFQ5gY8Qbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123 (0x463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152C89
Validity
Not Before: Mar 29 00:26:33 2025 GMT
Not After : Apr 5 00:26:33 2025 GMT
Subject: CN=67e73e39-bd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:01:78:3e:fc:73:82:7e:99:78:59:84:43:
f8:75:05:50:0d:5f:a7:95:30:b8:81:e1:b7:48:b6:
ad:b9:e3:d8:6d:34:27:35:59:b5:b1:f8:33:7b:04:
ba:2b:5b:75:0b:23:33:89:12:30:74:db:f6:a2:57:
22:34:f1:76:48:07:0a:c3:eb:2a:1e:ea:7e:b5:ce:
05:0e:42:d3:4c:03:97:15:70:f8:4c:3c:b3:6a:b3:
eb:da:c0:95:84:1d:94:c3:10:e0:43:4a:36:73:aa:
b6:11:a5:48:33:ec:2b:d0:02:2b:b8:e2:9d:69:f2:
5c:e2:73:b7:b2:94:1c:e0:d5:0d:ea:87:a1:bd:37:
20:6a:61:bc:0e:b9:a3:2c:73:20:0b:e4:0f:fb:d8:
ab:1f:61:22:77:78:28:9b:da:dc:f3:13:c8:29:14:
01:52:ae:3e:42:10:14:e7:7d:5f:76:5c:24:a2:a3:
30:05:33:83:72:86:fe:06:93:15:7e:67:47:da:af:
04:39:de:9d:4a:06:03:2d:4f:18:7c:de:24:6f:1f:
45:fb:79:e3:c0:f7:cd:94:ed:f1:00:5c:0a:20:eb:
b1:38:c3:98:32:4e:b9:39:19:f8:80:c8:ab:46:22:
16:27:01:df:94:72:23:65:ab:bf:18:fb:a5:03:9c:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C7:36:33:0B:78:3C:F7:69:44:A6:E3:50:C7:2A:AA:26:3C:0E:14
X509v3 Authority Key Identifier:
keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:18:73:3c:2f:d4:02:31:27:9a:43:9c:ec:e8:64:bb:4f:ea:
87:d1:a5:34:a6:86:05:28:85:cb:a0:d9:7d:c4:d3:30:c4:35:
ce:1c:2a:82:84:cf:8c:b3:4a:0f:b0:a9:07:00:53:05:28:70:
26:11:ee:20:c1:a1:75:56:dc:00:bf:df:a6:72:52:44:84:7d:
9f:cb:c7:4e:68:31:d2:81:b2:eb:81:c9:c9:42:e1:28:bb:9f:
78:2b:f5:6d:ea:7c:13:e9:4b:08:01:7a:71:73:1a:15:3e:a1:
f8:cb:53:fb:7b:ae:d4:7b:07:34:cb:d0:f3:ad:b9:b5:ff:68:
0e:64:b9:86:cd:5c:b3:4b:10:fa:4c:7e:31:04:0d:45:e5:8a:
55:a7:49:22:59:ef:91:b0:50:f8:fe:fb:33:03:71:2d:8c:29:
ac:03:ef:8c:d7:c7:2f:41:03:39:d0:5a:35:37:ff:75:d4:71:
bd:d9:5f:fc:05:13:84:15:d3:a0:d1:b1:0b:f0:49:f9:43:a0:
e2:c8:40:68:7e:fa:f9:52:7b:b0:bf:6e:82:10:e5:c6:74:4f:
66:24:6e:5b:38:b9:eb:ba:c4:5f:dd:b5:b4:52:f1:7f:ca:cb:
6f:87:ad:6b:cb:4b:37:29:11:02:87:b1:a2:39:ee:71:6f:01:
63:6e:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:40:22 2025 by rpki-client