Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
File: OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json)
Hash identifier: rtsig3Xg8oNTF8RciXnW6sAsRfr80sP9Y3Vsq6DkvTw=
Subject key identifier: DF:F4:E1:D8:FD:9D:1B:A4:7D:2F:49:EE:16:ED:56:E2:92:AD:3A:5D
Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
Certificate issuer: /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
Manifest number: 0160
Signing time: Sat 29 Mar 2025 03:30:35 +0000
Manifest this update: Sat 29 Mar 2025 03:30:34 +0000
Manifest next update: Sat 05 Apr 2025 03:30:34 +0000
Files and hashes: 1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: hHlgZUEp8gsFLlb6F+bTvOs6X+u43PFdXLDP3BLf/UY=)
2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: LDgnrMv06w2uH/2SaOTlpFRL0ITCYwRDAQrZfxJgOVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A533
Validity
Not Before: Mar 29 03:30:34 2025 GMT
Not After : Apr 5 03:30:34 2025 GMT
Subject: CN=67e7695b-de4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:fa:95:bd:ee:48:90:c7:8f:76:fc:3a:13:
f2:b0:69:79:c3:1f:49:05:7f:89:0d:8a:fd:13:57:
48:d7:3c:9f:4f:0f:e3:95:8d:6b:f2:a9:9f:79:17:
9b:98:10:e4:34:f2:28:41:0c:6e:26:f0:69:ee:26:
c0:e4:34:82:17:11:81:7e:bd:63:11:98:a7:df:52:
d4:53:fe:d1:4a:ee:16:32:49:c7:f4:20:f4:b1:2b:
d5:0e:91:37:03:8d:0b:d4:f5:24:99:be:6b:1f:db:
58:d5:ae:92:7b:73:fd:db:4d:e1:dc:50:4b:c5:fc:
fc:b4:41:a4:b1:57:3f:7c:42:4e:33:26:98:3c:7e:
01:a1:e0:06:35:94:22:31:b2:cc:61:89:2a:36:a3:
a4:31:3e:d8:00:68:b6:e7:cc:83:43:cd:c5:ae:f9:
36:bb:df:02:b8:ca:f4:98:c0:7a:50:ab:8c:1d:94:
67:cf:de:62:74:ae:78:30:be:62:d2:7b:0c:5c:0d:
bc:7b:a8:61:cf:0d:cc:2f:86:ba:6c:f4:08:d8:6f:
b2:e0:96:f9:cc:b4:81:89:8e:85:97:3c:c4:02:f3:
53:d7:64:21:a2:eb:ea:0a:fd:45:9c:d9:64:5d:12:
44:79:16:4d:b4:e5:3f:de:14:14:b9:26:fa:a0:2a:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:E1:D8:FD:9D:1B:A4:7D:2F:49:EE:16:ED:56:E2:92:AD:3A:5D
X509v3 Authority Key Identifier:
keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ce:0e:bc:ba:98:34:31:8a:6c:b8:dd:8f:56:4b:fd:7c:c0:
69:5f:d6:4f:1b:01:ed:71:3a:d5:7e:ea:a2:ac:76:ff:66:3e:
53:ad:e5:a2:e4:54:4e:68:ae:6c:aa:29:6c:36:a2:3d:15:c3:
82:99:e0:1b:da:99:67:39:2f:a9:db:36:31:7a:bd:63:ee:22:
71:30:b8:39:ce:81:5a:c5:16:76:77:bf:23:92:0d:d2:54:d9:
ac:da:6f:b5:33:83:df:3f:33:71:25:6c:9c:fa:4d:f5:36:db:
0d:47:7d:d8:b7:c5:f5:f8:b9:63:0a:8a:00:aa:71:39:ac:1b:
eb:4a:09:4e:af:6d:06:ad:51:7f:60:c6:51:60:50:5b:04:e3:
0c:4e:64:82:94:99:6c:ae:41:de:df:59:98:52:5f:bb:bf:e0:
0e:bf:6f:ed:50:99:a7:41:d2:d6:b1:23:1a:57:67:eb:03:01:
47:f8:46:bd:94:99:40:bd:b6:7e:af:b7:1c:b5:81:fc:3b:09:
a0:ba:33:95:54:ca:98:3b:a0:1c:89:a8:00:ba:45:98:da:ae:
51:88:ec:d4:bd:1e:78:19:49:bd:19:5f:40:f1:36:8c:09:d6:
f8:04:31:4c:e4:b8:73:4d:57:76:20:5b:fa:f5:41:1b:b6:4d:
19:12:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:51:23 2025 by rpki-client