Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json)
Hash identifier: SV4nrOOOOZyIaS8KRAW/659/XyJwaLYM1NCqjSRqqCk=
Subject key identifier: 6B:64:E4:95:53:CC:73:2D:A3:94:2A:EC:8C:1E:F3:31:31:F7:49:37
Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
Manifest number: 70
Signing time: Sat 29 Mar 2025 06:16:28 +0000
Manifest this update: Sat 29 Mar 2025 06:16:27 +0000
Manifest next update: Sat 05 Apr 2025 06:16:27 +0000
Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: zj+v+DUps/ru4LiWgO+dnyYGw4MEiAVyaNzaYxhSVXs=)
2: 10435EE8740511EF93658977C4F9AE02.roa (hash: xmMmx42YHDQ1ahK54oeYt43Mx+x7gEXdRkvJnhnT9V4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155806
Validity
Not Before: Mar 29 06:16:27 2025 GMT
Not After : Apr 5 06:16:27 2025 GMT
Subject: CN=67e7903b-5a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:99:80:93:e5:43:5c:52:b1:e2:35:c8:83:
4f:50:44:bf:83:b0:8a:4f:39:92:f6:63:ca:4b:ca:
c2:3d:f6:58:d7:7e:a0:6b:23:74:63:bd:9e:d6:88:
83:c6:16:3f:21:8e:bf:f6:f0:66:64:ad:10:c6:a6:
7f:ad:61:f6:04:c9:65:d0:8b:5a:fd:f2:f7:23:b9:
dd:81:65:2b:9e:10:89:fd:f8:98:15:ad:3d:c5:61:
fc:a7:d9:1a:f6:70:18:05:b9:78:56:a9:1f:87:99:
fc:14:45:8a:0f:54:95:92:7d:1a:5e:05:26:53:d0:
a5:34:79:c7:10:ec:0a:6e:ab:79:14:ec:08:21:8c:
6d:03:3c:a7:8d:fb:07:a9:ed:0e:e0:a5:06:53:db:
88:02:e8:48:30:c2:7b:90:a8:2b:fd:3f:39:cb:a8:
ca:d6:fe:fc:32:f6:82:20:f1:54:1c:5c:7f:23:a0:
7b:e0:86:4d:a7:54:f9:3f:4a:73:71:a0:19:40:85:
d7:ce:be:39:b7:e2:08:99:59:db:71:8c:06:7b:fc:
29:ee:ce:de:4e:f0:d9:1b:5a:86:78:88:ca:37:9d:
a7:78:9c:74:95:89:58:1a:a4:d0:0a:8a:cf:6e:23:
3c:35:8d:c9:59:44:96:cf:7f:64:a1:6f:3d:44:75:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:64:E4:95:53:CC:73:2D:A3:94:2A:EC:8C:1E:F3:31:31:F7:49:37
X509v3 Authority Key Identifier:
keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9c:f5:27:eb:61:5f:43:5b:93:5e:fe:d7:45:99:15:c6:36:
02:30:18:3f:44:6f:9c:84:a0:fa:d5:88:c4:9e:1f:70:b9:d1:
04:51:2a:a5:b4:be:31:82:31:20:81:a7:ed:e5:f7:db:1d:1f:
24:87:66:3e:59:08:92:47:37:89:ab:f9:36:bd:e6:ad:f5:f7:
81:e5:86:17:1f:62:73:c2:0a:55:f2:27:f1:e3:2e:98:f9:31:
43:a0:30:f5:ee:fe:be:17:29:af:91:e6:7d:96:c0:26:f7:db:
30:8e:79:ba:30:41:79:46:93:61:06:ac:53:cc:e9:06:5d:c6:
24:e8:e4:b1:96:8d:c5:2c:eb:80:ac:45:00:55:ef:f8:a8:c5:
52:0c:e1:d1:bf:f2:df:76:c4:f5:42:5c:77:4f:22:74:26:c5:
e5:34:18:1b:be:37:6b:9c:c7:72:4c:ff:4d:fc:2b:6f:2f:fc:
b7:18:d3:15:62:8b:0c:9f:09:d5:e1:f2:d4:29:16:83:cb:35:
79:bc:02:74:22:ec:e1:ec:29:05:38:09:88:1f:1f:d6:5e:cb:
ef:29:f9:94:c9:77:ba:73:a8:eb:f7:07:8b:78:1c:f2:ea:a9:
68:e9:bb:92:7d:97:28:bd:40:0e:b5:03:fd:b7:92:fc:c5:47:
46:ac:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:19:33 2025 by rpki-client