Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json)
Hash identifier: yUx63S0tisgnNegz2G6OLp+88shDR73BdiVk6GQJKz8=
Subject key identifier: 2E:84:E7:22:23:43:7D:46:21:7D:65:14:91:4A:1C:32:AA:A6:3B:B3
Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Certificate serial: 0C27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
Manifest number: 0C1F
Signing time: Fri 28 Mar 2025 18:44:26 +0000
Manifest this update: Fri 28 Mar 2025 18:44:25 +0000
Manifest next update: Fri 04 Apr 2025 18:44:25 +0000
Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: ciLNLxhrfHhG6J0/U6tNlKiImsgdxNKbcLczFcFyOZ0=)
2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: oMSMtDUOK/K2eVg/KodU05EhZSFOtXitxY9io4e/C/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156E6F
Validity
Not Before: Mar 28 18:44:25 2025 GMT
Not After : Apr 4 18:44:25 2025 GMT
Subject: CN=67e6ee09-4c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:a9:65:ab:80:76:60:e9:30:11:3d:35:c7:
56:76:6a:dd:a8:4d:b4:e7:c0:db:aa:7b:e5:c5:4e:
e0:f6:3f:c4:17:2f:88:98:33:a5:67:0d:e8:6f:8a:
fc:18:86:cc:d6:89:5f:d4:e8:1b:bd:a2:a0:22:71:
9a:9f:96:8a:91:b7:46:7f:a9:5a:21:c5:87:e5:fb:
9d:c7:bb:b2:6b:ac:93:2f:0d:80:e6:bb:76:5a:60:
86:a9:67:fd:2b:f9:38:de:47:18:84:7f:67:8a:1b:
de:4f:e7:a6:15:40:5d:d8:77:38:16:a1:4c:f5:73:
ef:2d:3e:50:39:08:f6:03:ed:79:72:dd:96:3d:49:
c4:c9:e3:94:c5:09:dc:3c:39:67:07:5c:85:96:ff:
3b:06:b7:27:8d:05:12:3d:8c:cb:5f:a2:c3:b6:3a:
50:51:b8:f7:8d:90:cd:94:15:0a:6c:96:13:2f:bf:
09:15:56:a6:5e:d2:5d:a0:e9:6e:6f:86:09:8f:c7:
26:fb:bd:12:80:15:f7:e5:7d:4c:63:f7:e5:97:d7:
6f:f5:a4:70:a0:9f:fc:0f:59:bb:ec:8a:0c:bc:9d:
1d:f0:d0:92:d9:1f:cb:ff:ad:a8:62:a3:37:87:09:
4b:8c:6b:79:d4:0d:5e:ad:b6:d1:9c:3d:62:fc:10:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:E7:22:23:43:7D:46:21:7D:65:14:91:4A:1C:32:AA:A6:3B:B3
X509v3 Authority Key Identifier:
keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:a1:72:49:c3:97:23:e6:68:5f:77:d4:5c:ff:04:0d:42:b1:
d8:59:ca:fb:22:01:f9:84:a3:a7:47:16:c0:41:cd:c9:a3:e0:
5a:ea:e1:96:1e:e2:b9:94:f4:35:b1:0d:a1:eb:bf:7a:5d:80:
0a:3e:76:28:a0:61:03:0b:52:7c:fb:de:ec:d6:43:cf:89:c3:
02:6d:a6:7f:a0:07:ff:1e:69:d9:7e:c9:98:53:70:cc:0c:84:
37:a1:3d:c9:2e:af:8d:90:9b:07:2a:0e:da:0e:cc:7f:b9:33:
68:10:7f:84:23:12:2f:31:e9:c3:20:b0:89:f1:df:49:c8:f9:
7b:f3:3e:ba:5b:c3:89:bd:52:5c:22:f9:62:2e:62:d2:47:62:
0a:f4:ab:69:9c:b1:d9:9a:00:99:b8:06:9e:30:dc:8a:e9:57:
f4:6b:4c:e2:79:9a:93:df:a5:1a:86:82:6f:4b:1f:a8:c5:3f:
5d:e0:59:39:c2:4f:06:1b:79:b9:aa:88:c5:a9:68:18:20:ff:
e4:62:76:13:2f:11:3d:71:00:c0:df:0f:81:ae:28:89:57:bd:
7d:f7:36:f4:65:75:3b:a8:60:22:de:f3:b0:21:88:a3:05:b9:
93:fb:28:04:13:08:3e:df:df:ed:a3:9d:19:6a:87:10:b1:9c:
db:c0:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:38:53 2025 by rpki-client