Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
File: f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json)
Hash identifier: LCbJSadMvbVsFjqen4IriEoDv5A2s9/xYu773DBRfPE=
Subject key identifier: B7:68:F4:D7:4A:F2:D6:6F:BC:2A:FA:45:90:82:3E:7B:61:A1:46:1E
Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
Certificate issuer: /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
Certificate serial: 05D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
Manifest number: 05CA
Signing time: Fri 28 Mar 2025 23:19:59 +0000
Manifest this update: Fri 28 Mar 2025 23:19:59 +0000
Manifest next update: Fri 04 Apr 2025 23:19:59 +0000
Files and hashes: 1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: 33I/r+nvWkdx4HjllNkae5xWr5Uc14LtyAVlIVnvQtU=)
2: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: cm0YB5uH01fcy9KoTmPs0S4MdfKYnPhYE5csvx6cWLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DA3F
Validity
Not Before: Mar 28 23:19:59 2025 GMT
Not After : Apr 4 23:19:59 2025 GMT
Subject: CN=67e72e9f-a093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:e9:16:59:32:eb:55:65:18:44:63:91:b2:
06:5a:ef:44:4d:20:6d:1c:fc:90:bf:9e:36:6f:da:
99:48:84:24:e6:63:03:53:c5:de:d6:e4:8f:19:c2:
b9:ba:bf:6c:85:c6:e6:8f:f8:56:f3:23:7f:56:f7:
9c:f3:2a:7d:6d:9f:0f:a4:88:93:4d:b3:6f:c0:ea:
08:2e:ca:7f:cc:99:50:32:66:82:a8:e4:0c:ec:f4:
2b:cd:36:2a:5c:e7:fe:8e:6d:19:73:ea:72:37:9e:
5c:e6:f9:16:b4:8a:df:7f:24:cb:8c:c5:33:c9:c5:
34:2e:98:fc:b7:34:19:2a:a2:0b:71:7d:43:ed:0d:
d3:5b:13:11:6e:ff:2d:17:ac:a3:cb:e9:2d:75:3f:
56:d0:9b:b9:4f:89:df:72:eb:cf:e2:d5:e9:a3:99:
bb:d7:cd:23:84:05:06:2b:01:3e:95:3c:f7:00:7d:
32:39:e4:f5:5d:36:04:4b:b3:4f:b1:58:31:e6:b0:
ef:45:93:19:c5:77:37:8a:05:62:bb:26:5f:a2:26:
89:61:35:fc:c1:c5:3e:e7:72:3c:02:bd:4e:41:c7:
bf:c7:68:73:25:13:8a:28:02:05:02:18:79:2f:4b:
1c:9d:cc:6b:6d:e8:a7:83:31:fe:fe:91:35:a5:77:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:68:F4:D7:4A:F2:D6:6F:BC:2A:FA:45:90:82:3E:7B:61:A1:46:1E
X509v3 Authority Key Identifier:
keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:d7:b2:90:fa:63:94:f2:b6:8a:8f:77:bf:84:46:5e:e3:34:
15:04:99:75:8f:93:2e:a6:b8:ad:7c:25:a0:1e:94:4f:dc:fb:
b3:7e:93:21:26:7b:66:73:21:32:ce:f8:23:a3:0c:9e:2b:39:
00:ab:1f:f1:89:99:50:9f:5c:e2:d4:39:6e:40:e6:d4:19:45:
dc:ce:72:48:b3:10:91:fc:1d:6a:5e:fa:1f:e2:4f:19:10:a1:
e0:64:fd:ab:21:a6:8c:83:00:d7:0a:91:a8:65:32:70:d8:fd:
cf:f3:18:db:f6:24:44:1c:a6:35:7f:b7:b3:92:6f:10:9b:39:
ea:89:c7:f5:34:d5:90:a6:0e:12:a2:ca:d9:4f:e2:29:71:63:
c6:45:aa:ba:95:b8:86:57:b4:8f:d4:ea:77:ea:88:d4:05:b6:
fb:3f:ec:c1:4d:ba:13:b5:18:5f:0f:0b:97:af:7c:4e:26:86:
ac:74:7b:ba:2a:a3:d3:01:03:e6:fc:58:d4:e7:a3:15:03:63:
62:8c:ab:3a:4c:99:83:3a:49:ca:cc:ab:24:42:8c:79:27:31:
35:6c:d4:f1:cc:1e:d9:c2:af:b3:32:c7:93:8d:5e:86:10:ed:
a8:ff:79:a9:f1:24:d6:7c:ad:51:0b:e8:b2:0f:de:35:33:e9:
ba:cf:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:45:05 2025 by rpki-client