Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
File: ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json)
Hash identifier: 5+u1HLMFlBQksvTgaugoslYPXD/YumRK12j8DBFAdXg=
Subject key identifier: 22:1F:7F:20:D3:37:3D:12:15:DF:B0:EF:99:03:0E:69:8D:74:34:04
Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76
Certificate issuer: /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
Manifest number: 4E
Signing time: Sat 29 Mar 2025 06:38:11 +0000
Manifest this update: Sat 29 Mar 2025 06:38:10 +0000
Manifest next update: Sat 05 Apr 2025 06:38:10 +0000
Files and hashes: 1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: 22siq2Q5ecB5mrQ3IBu87fUXhgp18fMFJTqFnK63XrE=)
2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: kNpNFTcyc7YR9nCZJjdQr+QDyHg/gCpaRE2tLnVIVt8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA46
Validity
Not Before: Mar 29 06:38:10 2025 GMT
Not After : Apr 5 06:38:10 2025 GMT
Subject: CN=67e79552-43a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:03:15:1e:3a:b3:5c:a9:99:44:00:1b:e7:
21:e1:d0:c5:24:ba:67:31:d2:02:e7:c2:30:6d:fc:
ff:e3:a1:a2:1d:22:a0:45:99:c9:b5:56:11:62:a5:
75:7a:85:83:fc:cb:ba:a4:2c:65:ef:23:87:75:1f:
24:f7:14:f2:56:3a:6f:b2:ea:4c:fb:95:7e:6b:cc:
e8:b8:99:37:c1:96:c2:89:c6:02:53:3c:ad:56:8e:
be:9d:35:48:59:f1:ec:a8:f0:55:74:93:fa:35:14:
87:85:85:e4:51:a9:32:9d:93:05:d5:46:b8:66:8e:
de:95:35:40:7d:03:8d:77:cb:e1:fe:40:fd:93:c4:
cc:cb:13:e8:84:7d:d5:dc:7d:3e:16:8b:87:35:98:
3e:bc:61:aa:12:ec:9d:c5:ce:5a:06:78:6c:5c:bb:
0b:77:c8:8f:10:89:2c:ab:58:ba:d0:1d:a3:e1:71:
75:69:5f:0f:27:a3:64:9c:60:79:af:ef:e7:b7:b3:
c7:15:57:fa:bd:38:f3:ea:98:eb:0e:db:2d:40:8f:
74:2e:62:c6:9c:46:2b:9e:a0:77:a7:7c:62:72:b3:
ff:ff:4a:24:79:c9:43:f7:f0:82:85:76:08:31:cd:
a5:83:01:f4:ec:d4:d1:c8:8a:2d:cf:61:40:a3:78:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1F:7F:20:D3:37:3D:12:15:DF:B0:EF:99:03:0E:69:8D:74:34:04
X509v3 Authority Key Identifier:
keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:22:7d:d8:08:7c:c8:b9:de:1c:4e:56:17:34:6c:de:0a:52:
1a:44:53:d5:a9:97:98:4f:d3:b5:e0:63:ea:b8:c9:16:d5:52:
2c:94:94:1b:de:cf:04:a0:6e:1e:e6:a2:89:6d:5e:f2:bd:3a:
bc:0d:5f:6f:e4:1e:36:ee:1a:77:4f:68:8f:4f:26:7b:31:ae:
f7:2e:3a:9f:20:63:d2:c2:e2:c4:67:ba:0e:fc:35:2f:80:b8:
63:bb:38:c1:52:b9:a3:54:91:cc:d1:67:a8:05:93:4a:42:09:
fb:38:af:f7:4d:21:af:79:65:24:92:6d:3c:c5:ba:96:68:f2:
7a:71:e4:10:1e:39:de:72:a5:85:6f:ba:7c:b6:3e:5a:1f:39:
8c:aa:34:62:5b:57:d1:ff:3a:55:73:64:fa:5a:d6:af:c2:fa:
5b:c7:3b:28:0d:71:64:ba:e6:49:87:d1:aa:7c:3b:a6:70:58:
ea:66:c4:f6:31:4b:10:32:06:bc:b0:64:f0:ec:46:37:5a:90:
fe:ec:1f:61:0c:2f:47:8d:0a:93:69:51:18:60:c1:98:89:71:
70:fe:2b:42:9a:2c:38:50:f8:0e:c2:5b:b5:a4:80:7c:16:1a:
94:a3:82:84:13:56:f9:38:ba:2c:02:eb:75:d1:73:b7:02:8d:
88:3e:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:36:58 2025 by rpki-client