Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File: P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier: eKzwcU4oWIm9dME8nEAVGKvviLbAfzyN+oATrhq1jZo=
Subject key identifier: 2D:FD:E9:05:12:26:A2:E5:37:2F:31:5E:66:BB:23:E4:51:AB:38:79
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number: 01FC
Signing time: Sat 29 Mar 2025 02:30:34 +0000
Manifest this update: Sat 29 Mar 2025 02:30:34 +0000
Manifest next update: Sat 05 Apr 2025 02:30:33 +0000
Files and hashes: 1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: KkaIYYMFfZrhrZYT11J/xLRHStyWcufW8WzPK3ka7lI=)
2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: b6MhCI2q2jPGB8Vadu+OAGml/y/4nQ509qbcxbzKawM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161DF8
Validity
Not Before: Mar 29 02:30:34 2025 GMT
Not After : Apr 5 02:30:33 2025 GMT
Subject: CN=67e75b4a-3bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:73:13:79:55:bb:72:b8:83:ab:79:94:53:a4:
b2:ed:f6:d0:2a:85:37:ab:b5:17:62:58:29:d3:13:
0f:d0:f2:fd:2e:c9:13:50:f1:83:d7:c7:13:34:7c:
5d:b9:c6:31:4e:72:32:6a:f3:d6:2f:6c:d3:d8:07:
4a:5e:7c:9e:51:f7:f0:ad:80:b0:21:a4:7d:09:49:
46:57:dc:ab:8f:1a:c3:94:28:4a:c0:b0:f4:ec:2d:
dd:19:02:df:6a:e6:1d:a4:0c:77:87:3a:fc:a2:90:
f6:b8:34:6f:89:31:fe:d7:28:8c:ee:e5:dc:d7:67:
22:c7:50:f9:63:a3:69:a6:02:03:29:f0:eb:4d:29:
6c:ed:78:04:1c:f8:f3:04:fb:09:b7:01:e9:d2:4d:
5f:e1:6c:6f:80:ee:e9:32:4f:50:24:77:a0:e4:4a:
3f:07:57:65:14:0b:a8:e4:96:22:99:b9:00:24:3b:
a0:29:5b:8b:04:07:f4:1a:d0:ec:97:fd:54:eb:48:
1a:ac:7d:6d:96:ba:11:d1:8b:bf:d4:47:68:17:73:
b8:24:f5:cf:80:9f:24:84:34:28:20:97:c4:dd:81:
04:3a:99:c4:49:16:da:38:d8:8d:b7:52:f6:aa:ee:
bc:ff:36:b8:1f:e7:4d:0b:9c:3a:de:b7:3a:3c:34:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FD:E9:05:12:26:A2:E5:37:2F:31:5E:66:BB:23:E4:51:AB:38:79
X509v3 Authority Key Identifier:
keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e8:3a:7a:0e:63:19:ba:de:53:cf:2d:33:52:21:26:99:fd:
0b:c0:7e:38:ee:4c:56:ea:b2:9b:7b:f1:ad:87:38:f6:d8:4e:
a4:05:dc:c4:b9:e5:8f:90:2a:ca:50:c7:7f:9b:ee:3d:f2:33:
83:17:fd:c2:57:53:4a:7e:e1:55:de:68:95:db:10:51:fb:ee:
18:55:e9:c8:ea:23:c4:06:b0:0b:04:5d:67:f2:32:86:ae:06:
9f:49:37:1c:75:19:d5:0c:08:b5:ae:5e:e1:1a:d5:13:19:05:
19:0a:20:f2:1d:9e:9f:cd:db:05:e1:a8:c2:25:33:65:ec:07:
6a:89:32:48:91:63:44:b2:4f:a0:e2:06:00:ee:2d:61:b6:c8:
54:bd:b4:db:a0:f6:7c:5b:f7:ac:0b:34:0e:60:1f:02:bf:32:
07:28:f9:7c:07:c6:f8:b8:34:48:db:1e:96:36:24:56:ba:a2:
a3:a0:e2:c0:56:f0:8a:c8:c4:ac:46:14:2f:65:a6:48:a5:85:
17:82:bc:57:15:cb:e6:30:75:d2:82:f8:9b:0e:93:39:b9:4c:
62:11:dd:69:6b:f9:82:9f:58:4b:bc:e9:69:1a:07:b5:54:84:
bc:fa:ef:9d:62:f0:57:98:f0:47:fb:1b:9d:d5:62:ae:c9:b3:
ba:ea:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:32:10 2025 by rpki-client