Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json)
Hash identifier: aovDYNNX2uB2+tGj2Mq3Qf7wxXNPd6sTyVEMLCMGWqg=
Subject key identifier: 6C:5E:92:C6:90:7C:C5:34:9E:2A:39:B3:26:49:D2:A1:E7:68:9A:95
Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
Manifest number: 3B
Signing time: Sat 29 Mar 2025 06:52:37 +0000
Manifest this update: Sat 29 Mar 2025 06:52:36 +0000
Manifest next update: Sat 05 Apr 2025 06:52:36 +0000
Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: ErytJFbAHC1GEbu4CJ1Q7FyCkDvvoPpuslUUcASo46Y=)
2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: XoqSoHkPs1ffdTh6W19ne37H+1CKa62i2t43qmhHxIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FA96
Validity
Not Before: Mar 29 06:52:36 2025 GMT
Not After : Apr 5 06:52:36 2025 GMT
Subject: CN=67e798b4-3a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:57:75:87:38:91:95:9c:0d:3e:5e:24:ae:
da:0a:dc:68:a0:97:78:ea:7d:8e:46:52:fb:94:2a:
2f:7a:0d:d7:9b:1d:fc:36:78:13:5f:2b:36:36:d4:
10:21:a0:93:1d:12:db:cb:65:9d:89:17:b0:b4:09:
c6:b3:aa:20:c1:da:f8:31:eb:02:5a:50:10:8d:8e:
bb:fa:f8:ec:dd:5e:67:9d:7b:7b:68:d5:03:f1:0b:
c4:03:1a:d7:59:8d:12:42:43:e9:e2:b4:c8:fe:e3:
1f:25:c0:e2:59:00:38:41:db:4f:da:52:f4:81:2d:
83:a2:f6:5a:e2:72:cb:a4:71:a7:45:25:25:e1:0b:
2d:c8:92:3f:17:a7:09:bc:eb:e0:9d:82:c4:48:4e:
a6:6a:9f:8e:c3:06:50:cd:db:2c:46:ca:3b:b7:c1:
d6:37:ae:29:ac:32:a3:b5:ff:e0:71:ec:c1:cf:60:
e4:75:4d:3b:dc:3c:83:57:f8:c6:a0:ce:54:0b:ce:
fb:ee:b9:9d:43:39:7b:8c:89:8e:25:03:65:a3:fa:
27:75:ce:c0:b6:f1:88:98:95:3f:65:94:1f:c5:71:
7e:af:60:c0:b1:21:e9:e3:ca:e6:9d:b4:6a:1c:da:
32:5b:8e:ae:ec:16:bf:45:17:2a:b7:0c:c8:a0:07:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:92:C6:90:7C:C5:34:9E:2A:39:B3:26:49:D2:A1:E7:68:9A:95
X509v3 Authority Key Identifier:
keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:db:09:2a:a5:74:82:ab:d6:f0:2a:9b:26:95:21:a2:ac:17:
2a:e3:16:47:ef:fe:af:9b:00:44:47:fe:5a:e0:d7:a3:f2:18:
a1:11:b2:a4:69:66:da:a9:eb:52:ae:97:73:c7:a0:a9:0c:a5:
7a:fa:36:2c:1c:a2:73:bc:1a:24:b0:08:9a:94:d8:62:6c:47:
db:8b:0c:57:9d:f6:3a:bb:40:bf:78:dd:50:7b:c1:6a:20:8e:
4d:09:7c:41:ac:fe:47:31:d3:45:66:1f:a9:dc:b8:9d:46:e9:
5b:a7:3a:6a:64:d5:e2:80:36:2a:8f:4c:8e:33:d8:8c:b1:c5:
06:26:12:fb:3f:97:14:ca:4e:0b:ca:a5:c7:73:2b:36:06:be:
79:67:f0:2b:89:74:50:f0:8a:24:31:89:f2:e2:28:30:47:f1:
94:cd:2e:10:26:9f:47:1c:f9:a3:ac:61:ec:e3:8e:0d:a0:00:
77:92:2f:b3:b8:d5:50:25:02:d5:c8:f3:f5:85:fc:00:27:34:
4e:61:c0:cc:36:60:dc:c1:f8:b2:ee:f0:81:88:9a:84:a4:54:
2f:63:3f:c1:11:09:e7:bd:50:ba:79:20:c0:0a:35:cc:65:c6:
e7:cf:d7:86:68:59:c3:36:d1:46:80:f6:3e:a2:45:65:9f:95:
83:d0:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:56:20 2025 by rpki-client