Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
File: C1O4Cmyciut01te7VxpSAM5V2PM.mft (raw, json)
Hash identifier: SJbF0cKFnQltjZZ1rvrysEAjmbUdbYyosMv6/lfJkrQ=
Subject key identifier: 92:63:D7:64:CF:35:90:BD:8E:43:65:FA:42:9D:10:F2:FD:9D:35:FB
Authority key identifier: 0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
Certificate issuer: /CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
Certificate serial: 07E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
Manifest number: 07D5
Signing time: Fri 28 Mar 2025 21:20:23 +0000
Manifest this update: Fri 28 Mar 2025 21:20:22 +0000
Manifest next update: Fri 04 Apr 2025 21:20:22 +0000
Files and hashes: 1: C1O4Cmyciut01te7VxpSAM5V2PM.crl (hash: 6D39jdRyGJtP1mKYmMf6Nn62oGRz2nkgjUSlqf2UugA=)
2: E382826C4AF611EFB245AE59C4F9AE02.roa (hash: gHlBFVvPZXMJ6Q+hYaSkMK4+kMOfC8z9KiEMGQejTNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2017 (0x7e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155DEB
Validity
Not Before: Mar 28 21:20:22 2025 GMT
Not After : Apr 4 21:20:22 2025 GMT
Subject: CN=67e71297-22f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:c0:83:3a:3f:95:0b:f6:68:8c:78:db:c2:
06:62:37:32:3f:cd:45:bb:af:fb:ad:ad:df:4f:57:
d2:67:d7:7d:58:a7:fa:28:3e:c0:37:c5:ff:8d:71:
c3:dd:ec:76:1f:66:02:ac:07:e8:07:ae:93:94:6f:
38:81:b2:d6:3d:61:33:bc:7e:7a:13:0a:b7:c2:01:
99:46:f0:e1:0f:74:cb:81:f1:01:7f:6b:0b:a7:0c:
ee:54:c0:30:3b:d2:83:d3:fa:2d:95:80:53:00:5b:
b3:be:ee:cb:78:f8:68:4b:b9:cc:97:c9:32:12:27:
b7:e2:48:ab:9d:8c:6c:21:b3:7e:f1:6d:55:1d:12:
28:2e:1a:c1:8d:aa:bd:9a:64:04:ab:a6:b9:97:ba:
09:5c:d2:94:d0:c7:3d:b2:f6:dd:b4:17:11:4a:df:
d8:b0:bc:85:33:71:99:8e:24:66:21:b7:00:6c:36:
8c:19:0e:86:cc:69:45:8a:38:50:ef:f5:df:5e:8e:
79:db:f5:ca:c3:f7:77:84:5b:29:01:1e:dc:b0:4d:
86:f8:42:49:d5:dd:16:a7:68:2f:17:31:6a:72:9f:
b1:ab:7f:fb:e4:ef:fa:15:fa:eb:c4:03:e5:10:4f:
ab:64:f0:19:0b:9e:28:05:3f:10:78:9d:c1:2c:fe:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:63:D7:64:CF:35:90:BD:8E:43:65:FA:42:9D:10:F2:FD:9D:35:FB
X509v3 Authority Key Identifier:
keyid:0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:85:e1:d5:e4:12:f0:1d:91:47:78:3d:c7:8e:7a:17:a7:ef:
2e:cc:80:e0:06:29:42:47:7c:23:0c:a9:11:f5:ab:df:64:54:
48:08:28:df:46:4b:87:4a:c4:81:b9:44:b2:16:fc:94:8b:72:
19:ea:da:71:d8:f2:64:22:ef:fd:c2:30:90:79:9c:fa:52:71:
7f:e5:6e:71:17:71:ae:a6:15:16:f4:a2:b5:33:1e:27:9b:c9:
94:b7:0b:60:f4:24:ce:38:c6:f0:29:cb:0e:e3:c6:06:8d:98:
54:e2:56:15:6b:fd:94:69:51:88:fa:57:05:e6:c6:42:d2:4f:
33:c8:12:21:de:ba:af:55:06:ab:b0:ee:84:02:11:1e:a6:2e:
69:2f:67:ef:6a:5d:7b:48:45:eb:40:ad:7b:15:eb:cd:54:51:
1d:6a:04:26:b0:5f:b4:58:3d:a7:74:c8:3c:66:8b:e5:e8:c9:
44:95:ca:cc:36:fd:20:4a:72:0b:e6:a8:b7:e1:2b:43:46:d1:
6c:7d:4f:ca:b3:94:00:77:7e:28:c4:77:de:41:82:0d:19:78:
46:12:4d:f9:49:53:14:6a:ba:db:1c:bb:be:88:4e:62:c6:30:
41:76:65:d9:99:c9:0d:12:bf:5c:91:65:0b:f7:ad:53:cf:31:
15:d1:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:30:10 2025 by rpki-client