Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json)
Hash identifier: y6tbXGvEm9T+sYOQKJIMPX/RJbgVUEipQr9XitZEv84=
Subject key identifier: 82:50:15:07:38:D1:3A:5E:32:CF:CD:BD:AF:84:95:00:F4:F5:3C:12
Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Certificate serial: 0559
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
Manifest number: 0554
Signing time: Fri 28 Mar 2025 23:41:29 +0000
Manifest this update: Fri 28 Mar 2025 23:41:29 +0000
Manifest next update: Fri 04 Apr 2025 23:41:29 +0000
Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: bMXJKVaOe8uradY/SRydg2dNFRbx8KPWFcYS8TXjXkc=)
2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: +hS0TVD0X9uG67g79eiaJGg+9lKriguUI4QCyoszmNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916714C
Validity
Not Before: Mar 28 23:41:29 2025 GMT
Not After : Apr 4 23:41:29 2025 GMT
Subject: CN=67e733a9-0410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:ea:df:81:49:c8:cf:d1:7f:90:46:e8:c5:
04:4a:79:65:39:ad:2e:02:b6:d9:a6:68:fa:b9:d6:
9b:47:bc:7e:97:c9:92:b0:82:4a:0f:c2:bb:ce:d9:
74:3f:66:7f:79:14:19:39:b1:ff:31:df:07:0c:81:
7f:bd:1c:d0:9e:e0:cd:45:bd:fb:0c:b1:5f:fc:3f:
0c:33:00:93:57:4f:f3:72:27:83:d4:27:cd:00:77:
b5:c7:11:d6:d1:b0:a2:2f:27:94:ef:71:3a:47:7d:
8b:ad:c8:57:02:eb:51:b6:16:78:1c:b5:96:59:d0:
57:c6:60:f2:00:9d:f2:ae:5c:f6:0b:8a:85:ca:da:
37:7d:46:2a:1f:bc:13:06:ac:3b:cb:64:c4:4a:f9:
93:61:2d:5d:47:f0:d8:af:65:39:19:cc:6a:f2:ce:
06:f6:40:3f:19:7d:e4:85:93:f7:92:4a:ca:5c:60:
0c:4f:f8:94:95:3e:bc:37:65:b5:cd:2e:6e:ca:a7:
1c:c2:7b:a7:6d:1c:4d:38:06:63:4c:f9:38:a7:f6:
84:97:86:ba:8c:5c:d8:4b:82:a1:52:14:ba:bc:21:
3b:51:c2:4b:54:88:11:5d:f4:78:56:7e:2e:af:21:
c5:e9:db:b3:b3:54:ce:08:54:b1:0a:ea:eb:c3:bd:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:15:07:38:D1:3A:5E:32:CF:CD:BD:AF:84:95:00:F4:F5:3C:12
X509v3 Authority Key Identifier:
keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:1d:da:aa:13:0f:a1:ad:8a:7c:c1:6d:b1:79:bf:dd:f5:cf:
17:0d:aa:46:d7:6d:12:0c:4a:b1:72:a6:78:c1:d8:57:c0:30:
47:8b:cd:b7:85:c6:ea:e0:6a:c3:20:fb:63:5a:52:11:1a:97:
b6:13:16:91:08:bf:b8:22:ed:35:37:b5:96:c2:bb:c7:7f:5b:
59:77:2b:e1:a4:20:3f:30:a7:16:c9:b7:08:51:4d:fb:17:fb:
fe:74:34:f7:99:6c:21:c7:f4:ff:cb:98:ae:3c:92:b9:2a:5e:
53:70:06:94:5d:d9:d3:f5:59:d8:01:b9:e6:df:0e:e0:24:bf:
20:22:5b:fa:20:ac:79:64:1e:58:4e:b9:26:68:a1:8d:5a:b7:
fc:d9:0d:d3:e1:18:ab:c1:c6:5e:ce:9b:7d:dd:63:64:fc:b4:
65:78:a1:7f:fd:54:39:32:43:0c:cf:64:ab:04:d0:f5:a2:70:
20:d5:e1:eb:77:d4:eb:83:fb:55:c2:61:f5:86:a5:67:c3:ab:
0e:a1:8b:90:07:89:48:18:88:22:63:50:76:4c:b2:08:a3:09:
6d:58:28:cb:21:5e:3b:6c:31:bd:86:05:f6:50:80:f1:c8:a5:
51:59:bc:e7:84:d1:1c:1b:3e:fd:23:33:bb:1c:a9:c3:4b:bd:
c8:21:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:41:44 2025 by rpki-client