Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json)
Hash identifier: T8LCtMrb0isWSh9Ylo4/ax21DZ+NLbxOJQuvUGSfgTQ=
Subject key identifier: 04:53:88:55:08:CF:1D:A8:A2:A0:B2:DA:81:83:42:98:A4:36:DE:4A
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 078D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
Manifest number: 073F
Signing time: Fri 28 Mar 2025 22:11:45 +0000
Manifest this update: Fri 28 Mar 2025 22:11:45 +0000
Manifest next update: Fri 04 Apr 2025 22:11:45 +0000
Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: oLVGKdLkzvE7bQoKFjsaUSPf/kwG0blgsgy9nBhwEQI=)
2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: SgUApaKrz3I+VB8AtKHyQ8VOd7m+ovVx9xgf8pErYlU=)
3: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: mxB3yjYGB13RAoosj8FX8EoTGGWkUSin7w4er+g4SEM=)
4: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: JKRkAuL9yffO/Fe1PSsX5t/Ot6ARnJ9I/G6iI6zoO/g=)
5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: siwf/BRs/2qjsSqYe1YNo8fuooHbA+PHr0NQC6IUKoY=)
6: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: hyIj/oH1UbDGdOUj+NMHphg7x96naMtPuDiIW9PmlFc=)
7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: 7ARnOa15SPNUaY70Cimy+c5qoh+iIO5hu8LoR0cj8rc=)
8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: i6QopCT3wMyI5V4oS5AOopBe2SziRTgfYrO+6jKs/XA=)
9: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: pyTKRU9BUUR54eL45xj3zBjeNm0ArDMdCQGdgijd2ls=)
10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: zgVRs+6F7DXZL1anc6K7thLZ91kSFqktNq+7bQzMe3Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1933 (0x78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2
Validity
Not Before: Mar 28 22:11:45 2025 GMT
Not After : Apr 4 22:11:45 2025 GMT
Subject: CN=67e71ea1-d5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:be:55:37:18:5b:05:49:df:1e:58:f2:fb:
d6:c3:aa:a0:00:83:fd:be:a0:c0:6c:d1:f9:88:03:
c2:10:56:98:fe:8a:6c:b9:d5:66:d1:35:d8:d3:52:
73:55:55:a5:bf:6a:6c:2f:bd:c6:47:00:54:58:17:
48:2d:aa:ee:06:2f:00:d7:ae:4a:74:f9:15:60:e4:
4f:db:10:4a:00:f5:4a:1c:a2:36:9e:56:7e:c5:9b:
bb:a4:fe:01:11:de:9b:12:0e:54:91:78:30:83:47:
32:b2:30:8f:11:0e:2b:44:f9:d1:16:6a:bc:66:88:
5e:2b:93:c8:f3:8b:32:58:3f:e4:60:54:94:dc:ee:
81:c8:d3:7e:10:a6:e6:80:3d:48:de:d3:a1:20:3c:
67:45:f4:1e:86:3c:a9:1a:90:e9:c5:f2:73:7d:f6:
90:0d:90:91:07:1f:86:13:c0:d1:cc:7f:7d:5a:40:
e5:7d:de:34:55:60:81:9d:46:70:97:c8:01:74:87:
c3:e5:13:3a:9b:a9:25:e0:3a:a2:ad:f5:6f:0b:07:
9a:8d:66:9d:d8:a3:63:6d:00:4d:67:4a:ab:e8:7e:
1b:18:f9:ab:27:74:34:bf:c4:a0:79:04:3d:4d:46:
6d:42:36:7b:a0:67:76:5d:e4:fa:6b:be:9b:66:9b:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:53:88:55:08:CF:1D:A8:A2:A0:B2:DA:81:83:42:98:A4:36:DE:4A
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:41:c6:a7:00:f5:ab:dc:33:8a:56:d1:4f:54:e9:1d:d7:c8:
5b:10:93:65:3b:8c:34:61:7f:d4:0f:10:b0:3e:2f:fa:a8:75:
24:b3:c3:f9:a8:6b:e6:2e:4a:bb:6b:82:69:b2:0d:69:19:b9:
2d:df:a0:ae:fc:35:03:62:96:d2:23:32:4c:6e:a3:e0:88:aa:
37:9e:b8:0e:98:aa:ed:17:d3:76:14:65:b8:55:a1:31:01:7d:
21:8b:b4:73:bc:30:b9:8a:89:e4:e1:e2:d8:c6:f8:2f:b8:b6:
bc:5f:05:f4:b2:07:7d:c2:b2:eb:ae:8c:5c:08:4d:34:ee:00:
04:7b:78:f5:92:67:cd:46:e9:4d:47:76:a9:ec:f8:52:1a:f6:
05:87:8e:71:09:e9:aa:49:34:1e:e5:a1:d7:ef:e3:29:91:bc:
3f:8c:cd:12:b5:45:04:58:37:37:11:5f:ed:fa:8a:86:db:19:
b4:67:6c:42:6d:36:38:e7:a5:f2:f2:a2:ae:b3:6b:fb:0b:55:
5d:d4:1e:18:39:3e:86:4d:ba:a6:08:64:df:1b:74:da:7a:f7:
03:03:63:4d:30:b5:59:d4:4d:6b:68:bb:ec:03:ce:1a:7b:d9:
8b:ff:15:8f:36:10:c5:42:3d:82:06:43:1e:6a:53:b7:2e:f6:
e9:7f:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:53:51 2025 by rpki-client