Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
File: UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft (raw, json)
Hash identifier: nl8De8oceqANGruQPVIGMcri1m8nR7rZ5oajqmgINog=
Subject key identifier: 27:51:71:CE:67:1D:54:8A:45:58:7D:D1:0B:FE:26:F1:36:C0:13:63
Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79
Certificate issuer: /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279
Certificate serial: 03CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
Manifest number: 03C6
Signing time: Sat 29 Mar 2025 00:52:43 +0000
Manifest this update: Sat 29 Mar 2025 00:52:42 +0000
Manifest next update: Sat 05 Apr 2025 00:52:42 +0000
Files and hashes: 1: UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl (hash: z4y6nrxO8IQhyF+EYMb+/slUru02IWcHDmdy1o4eNDg=)
2: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (hash: c5V6Lua8bVtI2cCUYsdMWFX4y1DX6zS+QDVuvCq2xVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 970 (0x3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157031
Validity
Not Before: Mar 29 00:52:42 2025 GMT
Not After : Apr 5 00:52:42 2025 GMT
Subject: CN=67e7445b-bd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:0e:74:4c:ad:12:86:9c:d4:b3:8c:b2:07:
98:3b:df:48:7b:7b:71:8a:68:7b:56:29:fb:eb:bd:
4a:f6:af:03:21:c3:81:5a:4b:16:20:de:81:6b:17:
dd:c2:58:b2:24:a3:52:f8:d0:5d:ff:bb:37:7f:8a:
8b:c6:c2:62:9e:6a:b9:1b:99:26:d4:be:e2:c0:f2:
cb:e9:06:0d:3e:06:87:36:9b:71:8f:fe:ec:c1:2a:
ae:c4:ea:fd:45:d2:8d:eb:a2:70:1e:a4:c8:8d:3c:
47:6b:ed:53:02:31:4d:fb:07:c6:cd:a4:8a:a1:fd:
d4:4c:f0:0d:b2:1c:72:25:24:02:8c:4a:36:6d:83:
02:7a:ed:2f:76:e3:f5:87:ad:1f:60:69:51:15:3e:
be:c8:86:f6:de:ac:8a:2f:68:d6:1c:00:3f:78:d2:
aa:91:fc:62:ce:91:04:e4:9b:3e:1f:91:3a:de:fa:
d9:49:5b:4b:0d:e2:fb:23:83:27:ff:04:cb:bc:f7:
f1:3f:6c:22:d4:cc:e9:fc:ee:00:43:2b:0c:08:55:
fc:32:fa:22:f5:56:1a:fb:62:26:04:65:b4:36:12:
75:74:10:20:b6:7d:93:55:f9:4d:ec:54:84:4d:39:
c5:60:25:bf:bb:29:e1:2e:7b:50:ec:a9:35:65:5b:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:71:CE:67:1D:54:8A:45:58:7D:D1:0B:FE:26:F1:36:C0:13:63
X509v3 Authority Key Identifier:
keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ca:53:5f:d8:85:3d:79:26:17:98:19:b1:25:e2:6c:11:cf:
08:5a:a8:e2:91:67:b1:8b:d2:98:da:50:cf:a2:69:a0:ea:24:
a0:f0:1f:d4:f2:51:b5:34:f2:6c:fc:1c:31:7e:b1:39:2a:8a:
67:78:8e:84:b8:9a:23:92:11:fa:7e:d8:52:07:15:10:93:b0:
a4:2e:de:bc:7e:5b:c6:45:0a:d2:6a:2f:00:b6:7b:ab:b9:f0:
13:25:48:b5:12:40:8f:cc:3b:76:a3:14:61:c0:8c:91:f5:a6:
46:a4:7f:22:07:a9:99:a9:52:43:8c:f4:de:64:6b:bf:c4:38:
bc:c5:1c:ed:bc:e8:38:bb:8f:b1:ea:12:5f:52:b4:0a:0b:66:
65:d4:8e:f8:37:37:29:97:94:8a:f7:ff:9d:bb:10:49:07:8a:
31:53:19:ef:b5:4d:04:52:51:1a:29:1f:30:7b:de:94:b8:b7:
10:2b:85:90:ad:f4:31:79:73:9e:0b:31:5b:b5:35:e6:67:e8:
20:13:3d:cd:a9:98:8b:b8:d9:7f:e7:5e:62:c3:7b:00:5c:fd:
2e:6d:88:f6:ac:18:b8:1d:f9:9a:b0:4c:a5:57:b9:ed:40:65:
c0:b1:e6:30:1a:8a:b3:b2:0b:7f:f4:2e:ac:5f:29:d3:75:90:
07:4c:0f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:01:18 2025 by rpki-client