Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
File: EdV6dX7VZXXQSeQpyOxzelYFC3k.mft (raw, json)
Hash identifier: 3Y9NUxxkABc4oUP75iXr0FCQlEsiQLKDi9gViN2SKcg=
Subject key identifier: 9F:A1:28:33:44:BA:EE:2A:47:39:42:55:68:EA:6B:29:49:A0:41:B9
Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
Certificate issuer: /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
Certificate serial: 0EC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
Manifest number: 0EBF
Signing time: Fri 28 Mar 2025 17:47:40 +0000
Manifest this update: Fri 28 Mar 2025 17:47:39 +0000
Manifest next update: Fri 04 Apr 2025 17:47:39 +0000
Files and hashes: 1: EdV6dX7VZXXQSeQpyOxzelYFC3k.crl (hash: qIMG8cEQuIIty0CV547Qk8mcLRiWNN9DGJl+pbKg+aw=)
2: 6F89ECBE80D611E99C76DF63C4F9AE02.roa (hash: 4nWtvEAf9d3E14HBFgTaH0QO/wlhVDZLBiHadsasEhY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3781 (0xec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91672F2
Validity
Not Before: Mar 28 17:47:39 2025 GMT
Not After : Apr 4 17:47:39 2025 GMT
Subject: CN=67e6e0bb-38b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:a8:a0:a2:3d:8e:38:fc:61:69:64:2f:4e:
d9:60:4b:bb:2d:98:48:ab:8a:70:fc:5b:cc:f1:20:
e1:04:79:e9:d4:57:d9:ee:f9:94:4b:a1:8e:7a:61:
0a:3a:32:a6:c7:fb:34:98:6c:9b:fb:91:c5:fc:c8:
71:ae:70:1f:5c:ca:06:68:94:ab:db:7d:b2:f2:73:
f2:9d:53:c2:df:18:b8:2c:1b:ed:bf:a0:87:03:8a:
46:e5:47:b9:92:a9:b6:e3:49:92:a0:57:d6:96:b9:
85:fe:d5:b9:8d:51:cb:dd:99:04:1b:a9:45:ed:42:
61:9a:92:1f:3f:63:84:57:17:8d:48:d8:a0:b6:5f:
6b:25:30:bc:36:1c:00:06:9a:0e:ab:6c:75:12:25:
c0:3b:e7:e9:02:22:11:2f:f6:88:45:2f:a7:40:f7:
b2:55:96:cb:94:12:db:97:6b:a5:14:15:f6:57:75:
86:ab:d4:6a:a1:4b:f4:ac:37:b6:6b:79:52:28:13:
78:ad:db:66:56:e1:4c:41:6b:85:b3:71:e5:54:a2:
1d:0a:67:68:1b:76:3a:c0:fe:94:41:1e:3f:7e:3f:
00:b2:5c:f4:31:14:e0:79:bb:1f:7a:ba:b2:cf:a1:
c3:24:b0:10:05:2b:c0:dc:d6:07:54:f9:7f:53:a0:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A1:28:33:44:BA:EE:2A:47:39:42:55:68:EA:6B:29:49:A0:41:B9
X509v3 Authority Key Identifier:
keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:92:f3:1b:21:a1:3f:01:e0:42:f1:43:cc:d8:4b:31:c7:8a:
50:ed:16:30:f6:2e:59:e1:77:ab:f5:49:d8:ab:30:07:b4:2f:
3e:82:75:2d:7b:22:cc:83:82:8c:9c:12:4c:a5:93:68:4b:de:
fd:63:5c:8e:50:65:1b:81:b3:29:de:e1:52:18:8a:76:d2:cb:
6a:e7:0b:6d:3d:8c:44:71:2c:be:66:e6:6a:1f:24:3c:58:f3:
58:ae:c2:0e:d9:b0:21:fc:15:f5:ae:5e:3c:69:1f:52:61:cd:
9e:38:01:6a:7a:c6:60:c0:9b:26:35:69:66:31:3a:23:80:89:
9f:fb:c7:ce:9f:10:b4:a0:72:15:d5:fc:37:38:85:0f:99:89:
85:de:bc:ef:54:f0:69:b4:0b:f4:67:b6:c2:5c:cc:4f:45:1e:
c7:9b:e3:97:7c:57:7e:62:15:23:bf:1b:04:06:fb:1b:db:80:
86:78:6d:ee:fb:a3:c7:31:90:d5:08:51:cf:9d:57:f1:22:f3:
26:75:61:85:ff:bc:6b:ac:b3:74:9f:28:95:a1:56:3c:a8:4e:
92:fe:0e:bd:33:46:df:50:45:45:41:9f:d6:82:56:5d:ed:7d:
22:a0:dd:ac:aa:63:99:3a:d7:b2:6b:d6:e0:11:9f:af:cd:f2:
9c:66:f7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:15 2025 by rpki-client