Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
File: aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json)
Hash identifier: KMHljV2VIfYhl30PqBO1HbqGfVdh32+iSfzm5tQUvoo=
Subject key identifier: A2:9F:7E:8E:E1:53:79:DB:B5:5B:04:22:FA:03:64:E2:24:22:D2:B0
Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3
Certificate issuer: /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
Manifest number: 0F
Signing time: Sat 29 Mar 2025 07:22:54 +0000
Manifest this update: Sat 29 Mar 2025 07:22:54 +0000
Manifest next update: Sat 05 Apr 2025 07:22:54 +0000
Files and hashes: 1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: aukDGhLJx5HxcaWw/WzDzsokdhmdxdUPiuNfOR1JWkA=)
2: 8D2816C4F90211EF99692E40C4F9AE02.roa (hash: +NqGztaEhZpUZkM4BrFHd/HmjU1Jxg/vDaPsvxdwGGQ=)
3: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: 3CWgpxVwX8rXbxNTGaUyko/Ji2jUUIx/aqwN4MmZ++Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916763E
Validity
Not Before: Mar 29 07:22:54 2025 GMT
Not After : Apr 5 07:22:54 2025 GMT
Subject: CN=67e79fce-22c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:36:10:f1:74:f3:3b:03:a2:ec:2b:76:af:
cc:c1:a4:89:43:34:56:9e:b9:bc:c0:72:f7:cf:0e:
61:69:8f:0d:de:b5:d2:be:2e:96:8c:92:2c:5d:77:
d6:0f:2f:5a:cf:eb:0c:e7:c0:aa:51:14:00:83:1b:
da:ac:26:21:72:e4:e5:f6:9b:33:69:59:d9:19:1e:
c1:0d:ca:6f:96:76:88:68:15:12:a8:93:d4:0f:c1:
17:74:24:6e:b5:ad:6f:68:e8:cf:a2:65:5a:56:61:
fc:2c:4d:3d:61:02:4e:3f:fb:84:74:d3:52:46:fe:
97:3e:34:13:99:b8:a6:b1:22:58:45:e6:fc:0a:0f:
ea:90:fb:49:6b:be:cf:ee:5b:0b:9f:3b:de:09:30:
ff:bc:76:83:59:f3:6c:d6:6b:f8:b6:f4:fe:55:85:
f3:25:0a:b5:1b:d3:42:84:25:36:b7:8b:74:73:e3:
df:f7:78:16:00:bb:d0:af:31:df:65:75:4f:65:80:
7d:13:16:b4:ba:eb:c4:c0:1d:f5:e6:ac:29:53:b1:
ea:1e:4e:fa:88:cf:08:d7:58:37:d0:2c:8a:2d:ca:
a6:c0:d6:ac:ad:3c:f5:d2:38:87:75:d6:ab:52:83:
f6:17:9e:4f:e9:be:a7:1b:47:71:b8:73:80:79:4e:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9F:7E:8E:E1:53:79:DB:B5:5B:04:22:FA:03:64:E2:24:22:D2:B0
X509v3 Authority Key Identifier:
keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:26:a3:e0:c1:0a:88:b3:54:60:1f:72:e4:45:45:a4:6a:9f:
0c:d8:9b:81:39:a5:84:7d:ea:88:72:db:46:87:d0:12:58:7e:
7b:13:0f:40:09:28:25:65:3c:95:a3:7e:74:14:cc:bc:1f:99:
f8:6b:c0:85:48:d7:e6:49:17:cd:02:0d:c4:37:1f:b4:9d:28:
8f:d9:20:6e:9e:6d:c4:4a:10:b2:8c:df:6e:ed:1a:1c:43:b5:
17:f6:5d:ca:0b:cc:e4:f7:64:54:60:df:82:19:57:0d:11:2c:
fe:fd:0f:6e:a1:2a:09:18:fc:0b:40:b7:1a:4d:c1:69:83:0f:
12:d5:71:6c:c4:8f:48:ec:72:6a:ff:73:51:f9:47:fe:01:31:
90:aa:85:91:70:ca:25:7c:44:d2:ef:04:d6:a6:68:59:e2:0f:
65:22:78:b1:0d:10:0a:e6:d7:8e:a8:bc:2f:49:a7:f5:f4:e2:
03:27:ca:78:2f:22:5a:be:af:dd:33:7e:83:25:c3:aa:04:6f:
5a:a1:9c:d3:c9:97:77:c3:28:49:11:be:0f:5c:23:08:9e:db:
47:e2:83:09:cd:e4:dd:98:8e:ef:5e:40:16:d7:79:a5:b4:9f:
1f:52:ca:cc:bb:eb:eb:07:dc:1f:97:1e:16:7f:05:bb:6a:27:
37:68:86:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:50:03 2025 by rpki-client