Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier: IVnlbxb60IXzv8i6qAmFcjS2y8nOcrHupqt9uLtfFB8=
Subject key identifier: D3:F7:F4:45:9F:9F:EE:65:F0:57:F5:29:B6:20:BB:94:95:26:37:45
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number: 0162
Signing time: Sat 29 Mar 2025 03:27:23 +0000
Manifest this update: Sat 29 Mar 2025 03:27:23 +0000
Manifest next update: Sat 05 Apr 2025 03:27:23 +0000
Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: aq0HwCtuB/UJh77pHlOroOXxHktvTd2Dhbahi4cIUpA=)
2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: uGKqx1ygUHWBkt6yQ6DRvhQVZZkNmLVdX986c5JBGJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915648D
Validity
Not Before: Mar 29 03:27:23 2025 GMT
Not After : Apr 5 03:27:23 2025 GMT
Subject: CN=67e7689b-90c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:26:14:65:84:0f:c1:65:48:51:37:c8:a8:
63:24:f9:4a:85:f9:5d:bb:0f:9c:92:96:3d:54:d0:
eb:4f:94:d5:70:72:d6:dc:b9:a7:22:50:cb:2d:de:
ac:ac:09:35:a3:39:29:7f:78:82:2a:1c:d6:45:32:
7a:22:a1:6f:cb:5e:33:d8:9f:ba:94:f8:c7:fa:b8:
d9:15:10:67:ba:85:c7:c9:10:4b:69:32:fe:ea:10:
a4:29:da:28:38:07:28:0c:39:7b:8a:14:df:09:ed:
50:b6:82:62:42:08:da:c9:bb:6d:9d:b9:75:d2:e7:
eb:54:36:60:a7:e2:08:78:ec:ce:b2:f1:30:cb:c2:
8b:69:b7:f2:c9:b0:df:d2:93:bb:11:cb:2f:76:45:
83:e1:36:93:85:51:5e:f5:c6:4c:13:61:a0:8a:e5:
30:70:e1:c8:64:84:dd:94:d9:f2:06:31:cc:3e:fd:
d2:30:c1:c8:4f:81:b8:f2:c7:5b:3a:7c:3f:d1:86:
60:4d:6c:dc:9f:1d:98:4e:3b:2b:6d:74:c7:29:55:
36:04:8d:d0:df:82:d6:6e:88:fb:67:20:69:f5:76:
ac:06:7a:b3:b3:01:c5:23:8b:51:ce:a8:be:5a:f7:
4f:1a:06:48:b2:35:b9:54:71:0a:bf:eb:41:24:fc:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F7:F4:45:9F:9F:EE:65:F0:57:F5:29:B6:20:BB:94:95:26:37:45
X509v3 Authority Key Identifier:
keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b7:26:f0:b5:fa:00:fa:b5:94:45:fd:53:fa:ed:09:a6:18:
4f:c1:49:f3:7e:6f:81:c4:42:38:09:d5:8b:be:69:ca:f2:6a:
87:c1:42:31:9f:6a:52:bd:40:f6:4f:3f:e0:f7:0a:a9:59:5f:
0c:94:00:f2:65:f6:47:19:9e:35:d0:b0:63:73:52:2c:7c:5d:
47:0a:f6:9e:2b:9b:14:65:74:28:78:40:7b:e7:08:13:d9:06:
37:0e:89:37:f3:45:8e:86:dd:71:30:eb:ce:46:89:d5:da:8e:
9d:62:70:5d:a0:24:4c:ef:ce:23:6d:bd:23:39:1e:1f:17:5d:
d1:98:16:fe:c3:fe:2b:4e:07:57:33:88:a8:b9:f4:5a:4d:69:
ab:2a:94:51:83:a5:7d:51:5d:a9:ff:1a:c8:16:9c:1a:cb:8d:
ff:c0:89:8a:72:49:e2:ac:45:82:aa:f6:fd:0c:c6:41:68:1c:
8a:88:1a:de:37:be:b8:bb:10:c6:dc:f9:8c:b5:f4:ef:7a:e4:
ec:cd:a8:44:ca:ba:48:cb:19:7a:d9:53:08:8a:58:2e:83:33:
16:0d:b9:91:5d:92:3e:93:2f:71:64:13:ba:2a:c0:32:83:d4:
a5:6e:c2:8a:db:18:91:65:8d:da:be:73:fb:12:7d:e7:ce:ea:
d3:1c:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:38:45 2025 by rpki-client