Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json)
Hash identifier: 2bruQJlQ5YEqUac0HrlJdGQKbU5yvFrrLqW3LnO6Edw=
Subject key identifier: 6C:7D:3B:FA:BA:CD:48:07:34:61:04:65:00:BB:4A:2B:91:0E:A2:0C
Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44
Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
Manifest number: 01D1
Signing time: Sat 29 Mar 2025 02:24:32 +0000
Manifest this update: Sat 29 Mar 2025 02:24:32 +0000
Manifest next update: Sat 05 Apr 2025 02:24:32 +0000
Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: ohomCP7eiz0JfdzTH3JOyrLz1op6wVK7Mef3fy+ihfI=)
2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 91vo57eXpy+XLfc+60pdKiOcpCWF0pprhkB0No7XRi4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162FF2
Validity
Not Before: Mar 29 02:24:32 2025 GMT
Not After : Apr 5 02:24:32 2025 GMT
Subject: CN=67e759e0-3bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:10:bb:af:83:3e:c9:87:cd:d3:33:54:4d:
98:42:ca:45:6d:f2:df:4e:f5:81:49:71:8f:37:66:
8d:2c:59:de:25:3b:78:d0:fb:34:1a:c6:7f:61:d5:
6c:63:e2:4f:82:cd:e6:36:c4:32:ce:e9:2b:61:32:
d1:e8:4e:64:83:c7:39:a8:51:95:a7:cd:c0:ea:fa:
c9:93:0f:44:ec:35:d1:72:df:b3:d1:a9:34:92:6d:
11:2b:15:1b:35:c6:27:f6:cd:29:d7:f3:59:f1:82:
5c:61:7f:be:83:d9:c7:88:5d:f9:43:0d:ef:d8:fa:
9a:32:08:e4:43:81:3b:6c:4a:20:ed:45:cd:10:3f:
77:89:65:a9:e5:7f:99:f7:b3:85:9e:a0:dd:00:f4:
b7:e2:27:20:bf:d4:2f:b2:19:26:20:98:4b:1c:44:
bd:ac:68:29:fc:f8:3d:55:79:b5:1d:ef:8a:9c:ce:
a1:a5:d4:f1:db:ae:b5:c3:0c:6f:2e:e0:f2:e8:55:
71:0b:86:5d:90:c4:c1:7b:11:f7:9c:85:7e:ec:59:
aa:f2:e1:68:90:68:bd:10:97:c6:ce:ec:0d:42:e6:
2b:06:f7:13:d5:89:7f:c4:8c:49:66:29:4e:f9:dc:
4c:be:6b:81:59:41:f0:6f:2d:a0:cb:db:77:ab:2e:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7D:3B:FA:BA:CD:48:07:34:61:04:65:00:BB:4A:2B:91:0E:A2:0C
X509v3 Authority Key Identifier:
keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d0:ed:e2:b8:e2:df:60:37:d2:f3:b1:c0:92:37:44:a6:c9:
4a:af:0b:72:65:9f:18:61:16:f8:78:5c:65:b2:5e:d9:ee:6f:
22:75:9e:b3:09:c5:1e:0f:36:6a:5a:8f:5d:0a:74:22:da:e5:
3c:5f:25:fd:9c:1a:92:14:11:d2:e8:89:65:1a:78:af:3b:e6:
da:ee:92:d2:a0:df:db:ac:6e:6e:95:f9:bf:82:0d:46:4d:df:
0e:ca:34:e2:a5:c4:73:40:d3:2a:d1:1f:35:bd:73:16:20:f1:
0e:41:27:7d:a4:c3:fb:fc:70:b5:0b:43:6c:49:e3:ca:8f:90:
d3:6f:23:70:c1:f7:28:00:64:3a:10:8b:f8:15:b9:ef:e5:01:
8c:9f:d5:ab:98:b3:40:38:61:38:77:32:9d:e8:7f:ab:55:c9:
5d:7b:fa:97:16:c4:31:a7:99:5a:c8:61:69:6c:fd:ec:77:9b:
65:7c:09:21:ee:fe:fc:4a:a8:b3:4c:02:3c:39:5c:c2:66:04:
4c:63:2c:83:9a:ca:f0:d2:e8:d8:25:9d:6c:50:55:51:c1:43:
70:cb:11:4b:67:46:88:ac:fc:bc:d4:3a:f9:4d:62:1e:78:26:
07:c3:5b:63:c8:2f:90:38:6d:f5:91:e5:7e:49:23:ce:5b:b5:
44:5f:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:04:35 2025 by rpki-client