Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
File: u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json)
Hash identifier: SppI1C+enYP5GlkkQgafY3zy7pYw2XplLC4oLrePU+c=
Subject key identifier: 63:05:80:C2:91:FF:30:70:B8:A6:EF:D5:BD:77:33:F5:81:56:47:17
Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB
Certificate issuer: /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
Manifest number: 0149
Signing time: Sat 29 Mar 2025 03:47:21 +0000
Manifest this update: Sat 29 Mar 2025 03:47:20 +0000
Manifest next update: Sat 05 Apr 2025 03:47:20 +0000
Files and hashes: 1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: UGR+CnzooRhZgwkpPdwiAhlyl9c4wdi/Y5GyTl7HHTc=)
2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: kUXrIsCImr57H9iIsS2NOqb5zBoEdoozllgsXyGeV7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D28
Validity
Not Before: Mar 29 03:47:20 2025 GMT
Not After : Apr 5 03:47:20 2025 GMT
Subject: CN=67e76d48-94b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:9f:5c:cb:fd:e1:53:8c:eb:4e:12:39:ac:
b4:a3:0d:f4:bc:65:36:57:69:7d:83:2b:e1:3e:61:
13:68:9e:55:69:0e:1b:77:ef:89:82:6f:3a:07:8d:
80:15:40:85:cc:62:4e:b3:67:5f:31:38:7b:e4:11:
cc:75:74:f5:1e:68:b6:2b:90:16:01:20:84:c7:82:
f6:73:94:bc:1a:36:00:bc:57:36:d1:e1:07:2e:ea:
28:62:19:f5:95:b5:be:81:f4:bd:bc:f9:81:84:74:
cd:5b:3c:a3:6d:83:9b:61:bd:f3:52:f0:04:0a:05:
1d:63:23:08:ef:99:0f:cd:dd:5f:c2:26:dd:45:8f:
aa:6c:11:6a:b2:da:09:87:75:a7:5d:34:f9:8f:9d:
38:5e:6d:d2:ff:61:e8:59:22:57:07:50:8f:73:01:
63:1b:52:ba:38:35:51:ec:71:9b:f9:16:0d:cc:8f:
d4:11:a7:df:d3:82:fe:ab:cd:ff:76:9f:0f:3a:5d:
25:53:37:5e:0e:ca:9f:41:5e:17:08:8d:4a:d0:3b:
2a:f7:c8:0b:9c:b9:7b:26:b8:89:30:27:12:9c:13:
25:47:65:a3:36:be:20:7e:db:be:ac:c1:ab:f1:3d:
ea:08:53:3e:10:c6:ba:1c:6c:4b:73:6c:0c:26:51:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:05:80:C2:91:FF:30:70:B8:A6:EF:D5:BD:77:33:F5:81:56:47:17
X509v3 Authority Key Identifier:
keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:a4:b1:f3:1f:46:a5:c9:61:7b:e9:ec:01:f5:55:24:d9:b9:
2f:b0:a8:3e:39:20:0d:01:fc:bd:5f:4a:df:24:43:bb:89:7f:
a1:0f:0d:9b:24:22:62:3e:9f:e3:60:0c:45:1f:67:97:94:8a:
da:35:d7:0d:ce:21:d5:e1:70:58:3f:a8:e4:bd:e8:d6:6d:3d:
26:0e:02:2d:af:f5:9b:fe:c1:0f:c7:f7:c5:09:bc:6b:89:d1:
38:9c:46:d3:29:c7:3b:71:5e:19:38:40:25:df:b3:c1:70:ee:
eb:f4:f5:04:fc:0a:72:b9:05:de:f2:30:99:f0:53:c0:f0:c4:
17:6c:d9:ed:f8:c7:51:0f:40:1c:d3:9b:61:aa:09:b5:66:34:
79:d1:2f:6c:97:ba:ed:10:f0:cb:94:2f:94:aa:33:55:db:6e:
33:f3:cb:d2:c6:26:67:c3:8b:ab:9b:9b:13:96:ad:89:83:6d:
74:cc:65:d9:18:f0:ed:41:be:cf:33:b7:67:b6:1b:eb:1e:e8:
e7:83:6b:3e:02:fb:9b:05:9b:d0:fc:65:29:68:3d:a2:cd:27:
08:ce:67:b1:a8:e8:db:1a:6d:70:8a:09:98:4c:fa:20:d0:09:
3c:6a:ce:8c:1b:95:d9:c1:bc:d0:06:22:8d:53:91:c9:a3:ca:
e2:62:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:55:19 2025 by rpki-client