Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json)
Hash identifier: eH41PvNIh0chhrPQ0w7PX8YUIb5/9+OCLNcgZUyIPqc=
Subject key identifier: 54:C3:7C:40:15:84:36:E9:C2:DA:7D:0A:44:4F:21:AF:B2:BF:E5:44
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
Manifest number: 4D
Signing time: Sat 29 Mar 2025 06:37:40 +0000
Manifest this update: Sat 29 Mar 2025 06:37:40 +0000
Manifest next update: Sat 05 Apr 2025 06:37:40 +0000
Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: 7MdgTq/gyO8OZotSLvP68LxtZGaT2tZ3oDNTBEUoUU0=)
2: C62E0568C52811EF9EDAD649C4F9AE02.roa (hash: F5uXTjMiJni5HqVRUwrgZPii2IL1VQzAUq1Dx9Qk/Co=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916069A
Validity
Not Before: Mar 29 06:37:40 2025 GMT
Not After : Apr 5 06:37:40 2025 GMT
Subject: CN=67e79534-d5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:66:74:f3:41:97:29:54:30:31:71:3b:d7:
4d:64:b6:e9:6b:12:59:3d:24:ba:32:ff:fc:30:d4:
e2:9d:12:fc:52:7c:43:37:f1:01:a3:dc:56:98:ee:
72:c6:33:87:de:63:32:ef:e1:51:1d:3e:93:75:34:
a9:38:bd:3e:1a:f4:b5:b7:63:ca:cc:ab:50:9c:4c:
d4:e1:82:84:a1:51:61:3a:10:d2:5d:b2:17:09:56:
36:70:fb:74:78:09:8a:2b:21:a6:57:55:fb:be:d8:
23:2e:b7:20:b9:e9:40:70:30:e3:c3:3e:2a:91:97:
94:f8:52:93:13:70:65:74:30:59:5d:be:15:a1:3b:
d0:5a:78:7c:55:b7:18:76:85:6e:af:e8:b8:ec:29:
9c:08:66:1c:a5:d5:8f:24:f4:b0:84:f8:da:95:d1:
ba:e7:49:9b:9d:ed:63:1d:be:57:de:bb:ff:c0:d6:
ca:98:35:f0:5d:6c:e8:e8:32:dc:b4:f9:4d:bc:37:
15:c7:d6:3d:5d:05:0f:81:a7:9c:71:c4:9c:84:00:
14:b4:a4:b4:b5:ae:8f:57:37:ee:12:97:23:2b:0a:
d5:f6:21:cd:47:77:35:34:97:07:a4:00:2e:d2:c8:
cd:93:ee:78:6a:71:08:4b:02:b6:67:e0:08:56:bc:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C3:7C:40:15:84:36:E9:C2:DA:7D:0A:44:4F:21:AF:B2:BF:E5:44
X509v3 Authority Key Identifier:
keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:50:1b:6f:db:79:9e:bc:e6:cb:a7:08:87:4a:c1:30:70:bd:
c7:bc:7f:0c:9d:7d:28:ab:e7:0b:a7:be:91:59:d3:43:c3:ce:
7b:13:59:e0:6b:cc:4d:15:be:e5:16:1e:ea:30:b9:8d:ac:aa:
41:6c:8b:0a:52:c1:5a:15:b8:07:c8:f4:7e:15:34:60:8d:1e:
23:cd:99:47:21:22:67:88:b3:f1:0a:49:05:be:c0:4f:fe:4a:
b9:05:f5:3d:28:f6:6d:00:99:5c:cb:b1:a9:d6:00:9e:fe:62:
15:b5:eb:c4:3e:b3:7a:2f:9f:24:44:46:5b:b4:89:cb:fa:f1:
44:23:22:1d:a8:46:9b:dd:35:44:32:de:08:0c:93:1b:f6:0e:
9e:c5:b3:c1:38:6c:4e:72:93:04:d0:ba:b1:1f:19:5d:72:20:
89:bf:7f:e1:f1:b3:46:35:fb:f9:c2:c5:fc:7f:25:79:54:8d:
36:a6:d2:a6:e6:eb:e2:2d:b5:e8:95:d5:93:cf:d0:e0:d1:9f:
98:1b:6a:a3:a9:07:9c:ff:8f:e9:b2:dc:26:0a:9a:47:1b:57:
0e:48:47:5d:c8:89:ac:bb:44:dc:c8:15:09:86:74:85:e3:11:
fd:1d:9b:0b:c7:3b:9d:d4:d3:26:6c:01:c3:22:59:0f:f2:27:
d1:e3:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:47:42 2025 by rpki-client