Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json)
Hash identifier: lvEUea/rG+0aELjuZdCdJg4Dpm/qlBniIbDDotUpKhE=
Subject key identifier: 8D:2C:8E:77:AC:ED:7D:82:7F:5D:52:B9:A6:23:4D:EA:F5:CE:77:E0
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial: 247E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
Manifest number: 2465
Signing time: Fri 28 Mar 2025 15:52:46 +0000
Manifest this update: Fri 28 Mar 2025 15:52:45 +0000
Manifest next update: Fri 04 Apr 2025 15:52:45 +0000
Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: 1sWSWIV0Bovwj8sGUO0CR4zGkocqgWwZuQaGNDb7emA=)
2: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: EQJEwI6hBDPCVTYBcU1MDA5dcAO+zNo1IBrEYTkEo78=)
3: 6FEB20F0EF3011EFB4C15420C4F9AE02.roa (hash: rk5n7G9m4WZW7jLcqxF5X+WaA+gvkbnGPhX3dWrSEeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9342 (0x247e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169CD3
Validity
Not Before: Mar 28 15:52:45 2025 GMT
Not After : Apr 4 15:52:45 2025 GMT
Subject: CN=67e6c5cd-826f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9f:b7:2b:f0:6c:fe:73:b5:e6:1e:16:f5:01:
aa:ef:31:19:92:15:ce:dc:b7:fd:a4:2b:c1:99:ac:
81:35:02:4f:ba:5e:e7:f8:04:f8:e9:86:f2:1e:0a:
79:28:1b:cf:d1:4c:84:0f:20:15:94:14:e0:2d:a4:
da:4d:07:9d:d8:0f:5c:d7:15:4e:c1:7e:2b:15:9e:
12:94:9e:be:98:38:02:0b:31:e6:46:f3:fe:7c:ca:
9a:5d:e7:b2:f5:40:11:e4:ab:c5:d8:21:32:d1:ff:
04:81:94:b9:70:04:ad:cf:69:a9:12:b6:99:6b:dd:
fb:3d:1a:9f:e8:a5:91:56:32:67:f9:23:26:0f:ff:
dc:01:4f:b7:a3:8e:b6:ac:0c:c1:99:e1:d5:75:f2:
db:4f:fe:4b:53:d3:f5:90:b3:1f:cf:62:12:60:a5:
21:cc:85:7e:f0:16:51:72:03:17:c2:de:57:e6:04:
b6:a8:75:ea:82:53:5a:46:32:48:d6:f8:4a:57:5e:
9e:64:fa:d9:1c:f7:bb:90:21:8d:d5:98:67:70:6e:
e1:b0:20:d9:83:11:36:af:14:5f:db:d0:9f:f7:62:
3d:29:c8:b6:84:70:e7:7f:03:ee:94:fd:d2:20:93:
19:bd:a5:a2:3c:df:07:d7:ab:91:e1:d3:af:b8:94:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:8E:77:AC:ED:7D:82:7F:5D:52:B9:A6:23:4D:EA:F5:CE:77:E0
X509v3 Authority Key Identifier:
keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fa:c5:97:29:45:45:c3:06:cf:cd:4d:ba:f0:7e:79:b9:ae:
86:d4:01:bf:15:c7:ea:80:5c:44:6a:36:b1:b8:2a:1a:35:ae:
1d:ee:3e:75:7a:60:38:63:23:b3:51:ee:7c:8f:44:62:aa:10:
5a:6a:bd:03:30:34:25:c6:aa:41:78:a4:9c:20:88:d6:8a:57:
4b:9f:ae:cc:42:d9:87:b5:96:2b:c0:91:07:c6:c1:da:b7:ba:
06:48:d5:2e:e0:62:6f:e5:69:41:d3:76:d3:79:c8:61:3b:39:
2e:46:5a:aa:50:1d:5a:64:16:43:90:89:25:6d:2a:e5:e0:6d:
cd:07:18:08:98:81:d3:bf:6a:d3:f4:36:0b:ff:4f:c2:fa:01:
f9:51:dc:50:70:8e:e9:0b:65:7a:f3:e7:3b:2c:3e:9b:73:4b:
a8:34:9e:ae:1f:dc:36:37:20:82:c8:30:02:bf:6b:8a:ba:c6:
0c:d0:a9:7a:d3:08:25:dc:bd:86:6a:a5:ce:08:29:3f:9b:38:
7d:b6:aa:51:73:0a:0f:d8:b1:b8:61:bf:1c:2d:0a:ae:36:ba:
3e:51:ee:a8:39:2f:54:90:b1:7b:e6:9a:cb:d4:3f:82:90:42:
e9:b0:9e:06:68:45:0c:f8:67:2a:55:17:d4:b5:94:e1:75:3e:
81:91:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:59:46 2025 by rpki-client