Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
File: cXGYzRpGea2dRS7h2wLQASpDdOw.mft (raw, json)
Hash identifier: VgzAi86g6oHQxatezqXCmk2S37x1ipOttm+ySBaEXRE=
Subject key identifier: C3:47:D2:27:5C:C5:CD:ED:FE:37:DC:4C:69:CB:64:98:58:3D:E1:76
Authority key identifier: 71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC
Certificate issuer: /CN=A9169F49/serialNumber=717198CD1A4679AD9D452EE1DB02D0012A4374EC
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
Manifest number: 0E
Signing time: Sat 29 Mar 2025 07:23:20 +0000
Manifest this update: Sat 29 Mar 2025 07:23:20 +0000
Manifest next update: Sat 05 Apr 2025 07:23:20 +0000
Files and hashes: 1: cXGYzRpGea2dRS7h2wLQASpDdOw.crl (hash: RB/cfVJtXYkKZEVYDc1/D36iZZ1OXLsq2VY3PwD0m54=)
2: 2B42D1D8F9B611EFB3AB154BC4F9AE02.roa (hash: qRFt1VDcs2OHFjFWZc9CCxRhXeBrmwOFxAL6+b0Q2Co=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169F49
Validity
Not Before: Mar 29 07:23:20 2025 GMT
Not After : Apr 5 07:23:20 2025 GMT
Subject: CN=67e79fe8-6fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:25:ed:c1:b1:6e:ef:c1:06:59:fb:61:42:
41:23:79:bd:fe:cc:b9:91:6b:c5:8a:21:40:05:80:
f6:a1:bd:16:86:27:b5:1e:b0:c0:fa:8f:cf:f0:bd:
2a:e4:ad:80:c3:49:c8:12:2f:c8:ef:20:97:1f:c9:
3b:ed:ef:4b:09:0a:ee:9f:7b:b2:80:3d:58:d3:05:
69:1b:41:5b:4b:b2:d2:b3:1f:e1:39:94:fa:74:0b:
5d:b8:16:74:a5:79:54:49:9e:8c:56:47:7d:5c:e3:
3d:fe:80:a3:f1:fc:53:7d:88:c5:d1:3c:9a:5b:87:
2d:9a:23:1d:71:1e:ab:77:7e:c1:75:00:ef:b3:cd:
3d:9b:ed:b8:ff:f7:12:51:2d:df:86:07:2d:1a:68:
0e:19:36:99:3c:44:f2:e6:3f:a3:2d:7e:2f:3e:4b:
84:b8:47:8d:aa:e4:b5:b4:80:56:fd:ff:dd:2c:56:
3a:53:96:39:85:50:a1:89:35:63:d7:6a:dd:68:7b:
49:06:27:0b:cd:46:7a:5c:3c:cd:d5:1d:b9:09:51:
78:94:5a:a9:8a:85:c0:b7:90:f5:84:c4:59:9c:2e:
83:7d:88:44:4d:c1:a7:0e:12:16:32:89:12:a8:90:
f0:9e:f9:dc:0d:f9:34:ad:cf:92:f7:7f:10:47:ed:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:47:D2:27:5C:C5:CD:ED:FE:37:DC:4C:69:CB:64:98:58:3D:E1:76
X509v3 Authority Key Identifier:
keyid:71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:7e:83:7e:0e:3d:ca:b5:43:32:31:45:c4:fc:f8:2b:cc:20:
fc:5f:b1:e3:26:28:1e:9d:de:71:87:2c:a1:3c:95:a5:98:40:
61:eb:79:3c:66:ed:fe:7f:5b:70:f5:72:56:04:e6:cb:4e:ff:
06:f4:f1:ef:53:92:23:d9:b0:27:53:74:fb:a1:94:ab:14:fb:
2e:84:45:14:ac:9d:50:06:a0:3f:4f:71:e6:47:0c:fd:53:7c:
9f:ee:e2:46:be:ce:5f:a6:ad:b1:c3:97:f5:3e:94:8e:8f:7e:
9d:b0:08:94:91:a4:9f:7d:b5:5a:c4:f5:bb:0a:7c:b1:32:f8:
32:15:b7:c9:c3:96:cc:61:75:48:59:d9:9c:0e:5e:37:8e:3c:
b3:10:23:b8:a5:61:71:68:b5:e9:9c:b5:a6:60:75:3d:d2:d4:
aa:65:d7:cc:25:db:d7:87:c2:42:91:8e:d9:47:6a:85:bb:27:
52:5d:99:6d:45:30:a0:f7:67:17:d7:e5:28:a4:de:a8:2d:93:
16:b2:69:2f:0b:c4:5c:ae:21:9e:bf:83:aa:e7:ec:d1:40:e2:
88:4c:93:90:2f:5e:e3:35:42:ee:55:d9:1c:c7:7e:da:1f:3c:
0a:d6:5d:ee:30:f7:9d:a0:ca:39:d5:c2:ee:cb:17:b0:a9:6f:
e4:87:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:57:48 2025 by rpki-client