
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
File: V2eQJEzCknXBEjVv9iDyYg19YV4.mft (raw, json)
Hash identifier: x3jDnVsaXsqexmB8eSV4pQa88vEpry861oejDnJGYVE=
Subject key identifier: AD:4D:A6:1A:98:CF:1D:07:BB:E2:9D:47:C2:F6:0F:01:2A:83:F3:04
Authority key identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E
Certificate issuer: /CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
Manifest number: 77
Signing time: Sat 29 Mar 2025 06:31:06 +0000
Manifest this update: Sat 29 Mar 2025 06:31:05 +0000
Manifest next update: Sat 05 Apr 2025 06:31:05 +0000
Files and hashes: 1: V2eQJEzCknXBEjVv9iDyYg19YV4.crl (hash: XWZZnFPLYXlhYw1rGntcmTwhnFc7cFW/BndlKV67fLg=)
2: 33A6DBFAD31C11EFA728D52FC4F9AE02.roa (hash: RNxiMOnl0yzJ3WNrMLWUMVP2z3pdPhwhvK/h6ws7iaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AC30
Validity
Not Before: Mar 29 06:31:05 2025 GMT
Not After : Apr 5 06:31:05 2025 GMT
Subject: CN=67e793a9-e5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:17:c3:f7:be:16:13:f0:0b:30:da:4d:25:c0:
b5:9c:72:eb:0d:5a:a5:b5:dc:3a:cb:46:04:2d:d8:
12:a5:f3:e2:7b:4d:15:00:ee:7a:57:db:04:02:13:
bb:78:e2:d8:ca:48:4a:fc:ca:ad:f0:f3:60:73:81:
26:18:9c:9e:66:32:82:ba:ad:26:25:42:0c:75:f2:
d5:87:d9:d7:a9:08:8e:05:ce:02:51:ba:92:c5:b8:
8b:81:55:c7:02:72:62:62:8b:bf:b1:99:a1:5f:b0:
2b:21:b1:63:6e:96:ad:aa:f7:9b:97:49:7d:bb:28:
9e:4c:86:92:d3:fa:87:a1:f6:3c:77:86:41:46:a4:
16:3f:f3:55:d2:e4:49:c3:5c:fd:2b:72:ec:ef:37:
27:c6:93:8f:8e:56:85:1b:e3:cf:40:6a:04:93:71:
b9:95:52:61:99:2b:47:d6:2a:72:9f:d1:1e:ec:47:
77:7e:e5:4a:70:5d:8b:14:0a:7c:d4:2c:8b:a9:55:
6a:7e:38:82:16:ac:7c:c2:19:28:cf:3c:47:8b:53:
b2:44:f9:92:2a:5a:e8:87:5c:4d:06:21:6c:aa:98:
77:56:1e:4e:f3:7e:4e:ae:29:c2:4f:23:98:81:cb:
33:19:68:4d:31:ce:3f:aa:e7:04:88:6f:a9:b8:f3:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4D:A6:1A:98:CF:1D:07:BB:E2:9D:47:C2:F6:0F:01:2A:83:F3:04
X509v3 Authority Key Identifier:
keyid:57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fd:aa:24:a5:0e:7b:e1:be:95:6f:f4:c1:ce:f0:fd:fd:42:
34:a6:d2:79:42:f7:25:74:a2:41:8a:bc:f4:da:af:8b:0a:df:
3e:e0:71:72:91:09:5d:ca:2f:78:44:5d:d1:b5:4d:76:ed:57:
7e:e8:a9:f0:17:3a:61:de:c9:b4:4d:a0:d9:4e:85:64:13:79:
a6:8e:89:35:31:7e:c4:d2:4f:aa:95:ea:a6:cb:65:a4:9f:f6:
32:a4:1a:a2:9b:d3:0f:fc:ac:82:40:15:bb:fb:03:14:e8:d1:
60:ce:12:92:9d:bc:01:bb:1d:04:89:2a:2a:85:fe:0e:89:30:
a9:95:15:09:d7:b8:e4:fd:f8:68:70:30:9e:9f:55:a2:fc:17:
54:60:2b:fc:5b:28:51:58:d5:75:5b:a2:cd:1d:6b:9c:1b:23:
5d:a5:c8:3f:28:3e:e8:8f:81:63:f1:c7:7e:ff:18:85:32:66:
1f:ff:0a:57:03:a1:23:2d:5f:b6:ee:fd:57:08:5c:a3:79:51:
bc:d5:18:24:69:0e:ab:b1:57:8c:3a:eb:0a:59:c8:34:2a:92:
ce:eb:8e:65:cd:7a:46:ce:36:6e:87:cf:cb:90:5c:a2:50:35:
34:8c:99:82:a4:d9:9c:bf:7d:21:79:0c:2f:dd:59:fe:a1:b9:
a1:bd:39:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:03:02 2025 by rpki-client