Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json)
Hash identifier: SZRXE58QH9DiHkZCw63bWuRVmYFXOTSl70lcyj/qHso=
Subject key identifier: 52:ED:0C:34:E8:62:EE:F3:A1:D6:49:2D:86:8A:7B:4D:6E:C4:A8:ED
Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Certificate serial: 1CA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
Manifest number: 1C66
Signing time: Fri 28 Mar 2025 16:17:47 +0000
Manifest this update: Fri 28 Mar 2025 16:17:47 +0000
Manifest next update: Fri 04 Apr 2025 16:17:47 +0000
Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: +BjRiflVGMdgyqzs8hivc+pmNXPSBGIJwJiQj5afQrE=)
2: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: Lk2qEHSCNbYOjvU+PcwacX3VW6CH6qyKSanfWEzTYmU=)
3: A149F286EFD311EFB37AB53EC4F9AE02.roa (hash: 7lOYsVaaqHqx4pgPOBBbAkvs7oMzJU4VOgvj6HMpoQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7330 (0x1ca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164390
Validity
Not Before: Mar 28 16:17:47 2025 GMT
Not After : Apr 4 16:17:47 2025 GMT
Subject: CN=67e6cbab-02eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:e3:93:34:39:40:70:4b:9b:d5:c3:5a:f3:
73:6d:e1:e5:02:01:5f:3e:db:9d:2b:f7:f2:b1:74:
ca:d7:58:83:71:0b:eb:21:7e:9c:22:dd:3a:3d:b7:
a6:97:f4:1f:73:31:38:b8:aa:99:67:59:8f:ff:93:
a1:49:f1:f5:20:36:64:ea:a9:4f:e8:66:28:67:1d:
1f:af:04:b0:3a:71:75:20:7e:07:44:8a:96:7c:6e:
fe:8f:71:bc:9c:3d:ab:fc:99:a3:c6:e1:49:09:06:
de:c3:46:96:d0:0e:61:f5:01:ac:cc:61:37:1a:43:
0f:73:e8:3c:42:2d:c4:13:00:f4:fa:98:fd:34:86:
fa:45:5b:0c:f6:77:0b:82:82:87:1e:17:f5:c1:38:
cb:e7:88:cc:3c:6a:41:72:db:75:21:50:73:26:59:
a9:a3:41:8a:a0:b7:10:df:3c:bc:41:37:de:0e:bb:
21:57:b8:b8:98:f8:a8:d4:d1:04:76:72:7b:1b:ab:
36:04:b0:72:73:c9:b4:1b:d7:d0:ed:c2:57:6d:75:
d9:83:9c:e0:6d:3e:bc:b1:61:ca:a0:b0:6f:65:e6:
b3:c0:f0:4f:b6:e2:9e:42:96:ac:4d:28:2f:bd:bb:
8a:61:48:0c:65:56:b5:39:81:30:45:01:75:8d:f6:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:ED:0C:34:E8:62:EE:F3:A1:D6:49:2D:86:8A:7B:4D:6E:C4:A8:ED
X509v3 Authority Key Identifier:
keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:08:43:40:ab:23:19:81:4a:d3:15:81:0a:66:5b:9d:af:8e:
3e:55:25:74:d2:d1:ce:57:6d:f0:0e:71:f5:2d:8d:13:15:7c:
56:f0:10:a3:77:e0:ef:3b:13:07:fb:92:7f:76:76:2b:b8:d3:
14:9d:64:cc:0e:1d:f9:e4:5f:98:da:37:b3:9f:4d:fb:3f:aa:
fa:bd:ce:e8:24:7c:e4:0f:3e:96:e8:6e:2e:aa:82:e6:50:6d:
b9:76:9e:73:92:06:7b:d4:b7:c4:89:73:c4:0a:b5:37:8a:ac:
09:6e:f4:d3:d8:34:71:51:55:df:95:cb:20:24:41:65:5b:19:
1b:e7:69:82:86:6b:de:6d:69:ac:17:ab:54:7a:b4:50:1f:0f:
1e:4b:3f:a4:0a:b4:74:99:cb:49:b7:df:3c:b4:1c:aa:a7:1f:
27:e7:9f:ab:22:e3:9b:5b:9b:14:23:25:1e:d0:8d:9e:71:03:
a8:f2:e4:be:d6:49:1e:49:5a:b4:5c:b7:cf:2a:19:46:56:22:
b4:f3:b7:d4:56:70:4a:f5:c4:0f:57:53:aa:45:1d:7f:e9:85:
4b:23:c6:2d:a3:77:50:ae:3e:8e:da:49:f3:7d:7c:2e:32:dd:
91:e5:3a:76:c5:86:b9:4b:de:cb:71:b5:85:64:e6:63:b4:cf:
f5:54:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:27:46 2025 by rpki-client