Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
File: tEoweljCbW-uB_4_KF7Wo4K0y0M.mft (raw, json)
Hash identifier: ITLYDTmqI/pGPNp3vcTcXK7MZ/YqHwS6ZOStzBLgVeQ=
Subject key identifier: 8D:62:5B:85:57:3D:82:B9:EC:3C:F3:5C:69:2C:58:01:1F:7B:64:7B
Authority key identifier: B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43
Certificate issuer: /CN=A9165CEF/serialNumber=B44A307A58C26D6FAE07FE3F285ED6A382B4CB43
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
Manifest number: 011F
Signing time: Sat 29 Mar 2025 04:09:24 +0000
Manifest this update: Sat 29 Mar 2025 04:09:23 +0000
Manifest next update: Sat 05 Apr 2025 04:09:23 +0000
Files and hashes: 1: tEoweljCbW-uB_4_KF7Wo4K0y0M.crl (hash: rQDKfcUi4Nu9wK8hUMIoRKQVNm40OC49S2JdkOjMMfc=)
2: CC954D50577211EEA63EF217C4F9AE02.roa (hash: EiQjdRFuXlYtCLTZbFxXGgOgXEXHeuVWajTCS8s1TyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165CEF
Validity
Not Before: Mar 29 04:09:23 2025 GMT
Not After : Apr 5 04:09:23 2025 GMT
Subject: CN=67e77273-dee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:2e:4d:0c:97:96:f1:eb:43:97:a8:9c:89:
d4:d7:58:d4:4f:17:e9:1b:a9:2a:5c:6a:56:56:9b:
75:a9:c8:77:47:92:c3:99:2c:9a:8f:d0:5e:9f:e3:
48:07:2c:6a:f9:2a:22:91:db:1a:8a:e3:32:ef:80:
f5:9c:11:bb:13:e9:2a:64:6b:79:19:65:ed:0c:7c:
5b:4f:f2:52:68:fa:9b:a8:b3:66:f2:50:25:7d:6b:
6e:ea:1c:45:93:d8:c2:6d:d1:1a:60:cd:9c:80:3e:
e1:fc:06:a9:49:da:72:38:11:5f:ee:72:91:59:1b:
89:ab:ab:45:c5:00:6f:99:7c:25:25:f3:5e:0d:d7:
8d:0b:2f:1c:55:ee:18:51:d4:4a:aa:39:ef:e1:0d:
d1:8d:c0:72:3e:d7:ee:b6:cd:28:6d:83:67:8c:93:
be:73:c9:37:c7:1c:b5:3a:12:e8:72:ed:d7:52:16:
ad:16:15:e3:c5:a5:f6:b1:c9:a0:f4:c8:a0:25:b2:
54:a5:4d:1a:fc:b6:39:6b:6c:f3:6f:21:0f:e3:77:
0c:e3:ad:09:f7:fe:c7:c3:35:b4:e6:ff:06:5e:d7:
7d:74:18:7d:11:70:bc:8b:12:db:c3:71:ab:8d:13:
9c:d0:bb:96:27:01:d7:6a:0d:5d:a1:a9:9c:c2:0d:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:62:5B:85:57:3D:82:B9:EC:3C:F3:5C:69:2C:58:01:1F:7B:64:7B
X509v3 Authority Key Identifier:
keyid:B4:4A:30:7A:58:C2:6D:6F:AE:07:FE:3F:28:5E:D6:A3:82:B4:CB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tEoweljCbW-uB_4_KF7Wo4K0y0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165CEF/27749C36577211EE9DAE6155C4F9AE02/tEoweljCbW-uB_4_KF7Wo4K0y0M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:3b:d0:3e:af:d6:0e:73:de:bb:75:8c:cc:9b:bb:58:74:9f:
ed:37:bc:d7:19:12:11:1b:9b:4e:4e:2c:68:6c:27:76:0b:bb:
68:f5:27:90:d7:da:7d:1e:d6:a9:00:7b:59:9f:4f:35:4a:da:
b3:70:59:2c:09:7d:7a:7a:83:dd:ce:7b:b9:15:e5:16:0e:a9:
f1:61:f3:50:f2:91:a9:ab:da:99:bd:59:c8:e0:58:ce:38:6c:
fe:28:3f:12:96:69:7d:dc:49:de:8a:f2:71:ac:f0:40:33:11:
f7:38:3a:ab:cf:9a:91:79:39:81:a4:e8:fb:79:5e:f9:12:37:
5a:02:fa:3b:41:0e:ce:9c:dd:9d:62:b2:66:d6:6b:ce:29:ab:
c7:c8:71:b4:29:93:c9:10:51:15:fb:8e:1e:de:7f:b6:0e:35:
e6:72:25:e6:5e:3e:5a:23:15:67:e5:55:73:99:47:a5:6a:62:
e5:6a:22:ab:7f:b6:0a:f9:41:64:0e:d1:4e:57:dc:1d:a5:cc:
d8:ea:49:18:15:c3:b4:a5:7d:0c:ed:59:a1:e3:4f:0d:64:a2:
b8:7c:4a:11:45:52:41:8d:18:5d:f4:cd:34:c6:e1:ec:2b:b9:
47:c3:ce:a9:bb:ce:3a:25:9f:6b:d9:1a:ea:89:00:da:d1:42:
7e:03:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:28:48 2025 by rpki-client