Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier: ukFrDV/B+YYOGzwcMEeABycBX5W7Sr6OzGRFDpaH8T8=
Subject key identifier: 7D:ED:F0:E6:DF:C6:08:D1:2F:B8:37:3C:41:61:67:74:2E:FC:C9:63
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial: 0C82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number: 0C70
Signing time: Fri 28 Mar 2025 18:28:05 +0000
Manifest this update: Fri 28 Mar 2025 18:28:03 +0000
Manifest next update: Fri 04 Apr 2025 18:28:03 +0000
Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: b2nkdly710779Sz1B4ip5xgc3trd9RCkKDw6UeuwLTY=)
2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: p5JyMcxJixg62lv7FaUL1kQInCYoLGWXuwUelGMNmyE=)
3: F1862B06642911EAA019224CC4F9AE02.roa (hash: ErM56dQSOmabkhk0xjyD2uWxD3CfkXhA/NcHUzIsCiI=)
4: F058F664642911EAA019224CC4F9AE02.roa (hash: pR8hpYrCoO89tivRWBJiZRzg2aFD3n8kIVZ7Qsgjqk8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3202 (0xc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BA2B
Validity
Not Before: Mar 28 18:28:03 2025 GMT
Not After : Apr 4 18:28:03 2025 GMT
Subject: CN=67e6ea35-b6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:3f:8f:db:09:21:02:43:88:fd:76:36:fb:
12:ca:68:5b:a5:e2:b7:80:09:02:9d:b3:ac:0e:5b:
90:96:f5:ba:34:ef:ce:68:f8:22:fc:9f:2c:cc:8d:
3c:04:91:ad:eb:a5:d8:99:89:3a:72:b0:fd:a7:f7:
db:ea:67:39:ce:cc:47:22:17:16:10:84:fa:0f:a0:
12:c2:f5:2f:74:54:94:aa:05:bd:c3:96:4b:ee:0f:
85:07:3a:d1:81:cf:64:ad:53:c1:45:00:da:b9:0d:
df:8c:b4:da:0f:c5:12:09:b8:f5:bc:0c:6d:e5:55:
1b:21:27:1c:c5:56:38:60:1a:76:2f:d2:8c:01:8a:
d3:7d:28:5c:5c:d9:13:33:cc:36:2e:6d:3d:9c:07:
6f:41:9e:c1:47:74:e0:9b:95:e8:8f:87:62:c1:de:
6f:2e:ee:73:02:70:86:43:0a:54:49:b3:63:f2:21:
f1:11:8b:d1:f7:3c:6c:02:81:c5:b0:95:11:4f:88:
f6:d0:02:d2:2c:47:c3:6f:df:8f:c1:1e:bd:e4:e5:
6e:24:1f:4c:bc:2f:49:4b:8c:d5:21:0b:53:ea:f1:
94:c1:3e:a3:8f:c6:79:63:7c:75:87:21:8a:6a:c0:
e2:20:1e:23:d1:15:0a:ff:6e:73:34:9e:a4:30:a1:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:ED:F0:E6:DF:C6:08:D1:2F:B8:37:3C:41:61:67:74:2E:FC:C9:63
X509v3 Authority Key Identifier:
keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:69:a5:56:d8:48:bf:3c:f9:e7:9b:9d:f7:e8:00:de:75:b0:
f8:9c:fd:c5:c9:aa:0d:92:5d:67:d3:5f:08:a5:d0:5e:6c:b3:
6c:b5:16:37:3c:37:9b:02:07:56:49:eb:cd:9e:7f:44:ad:d2:
4a:16:fb:34:b6:bb:cd:ad:0e:77:bb:e5:af:a4:ba:4e:dc:70:
74:f4:2e:60:19:1a:f0:58:19:ac:a4:87:8c:43:d1:30:22:fe:
93:b0:fa:38:ff:96:9c:c3:ae:85:5e:18:55:c4:3f:14:ab:93:
f3:4d:a6:59:6b:d0:e6:4e:8b:a4:26:31:c6:a6:fc:de:91:64:
fb:39:6f:d0:63:e0:95:1a:dc:2a:73:1d:6c:e0:48:d4:49:f2:
ee:b1:87:e4:fa:a4:35:39:84:f8:66:88:39:c8:f2:10:fa:df:
ac:a3:cb:c5:fc:3a:88:19:89:87:a6:eb:e0:21:e9:44:dc:31:
32:57:2f:99:9e:97:ba:19:81:7b:14:51:96:03:b3:24:69:17:
48:d6:c6:d2:dc:d2:8c:99:c4:3c:b2:0f:db:c6:73:89:fe:e5:
a8:8f:29:92:b4:3e:d2:76:46:f1:a4:f9:40:89:aa:d8:90:70:
89:1c:20:54:e4:91:69:a4:dd:0d:78:95:29:d0:6c:7f:ef:ac:
d5:c0:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:56:24 2025 by rpki-client