Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
File: ezWJ19jaa93mDzmOflK6heWuM1c.mft (raw, json)
Hash identifier: NTBKNvdOMbWfJAWxOhHssuzXiiVUVuVEo9Y+XAYjDOA=
Subject key identifier: 50:A8:78:33:B9:26:94:7E:43:F2:6E:60:C1:F1:43:07:41:F9:94:0A
Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57
Certificate issuer: /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357
Certificate serial: 17DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
Manifest number: 17D3
Signing time: Fri 28 Mar 2025 16:40:02 +0000
Manifest this update: Fri 28 Mar 2025 16:40:01 +0000
Manifest next update: Fri 04 Apr 2025 16:40:01 +0000
Files and hashes: 1: ezWJ19jaa93mDzmOflK6heWuM1c.crl (hash: DHg39Z/zT+XLyX+Qk//zSAOHfIjfHTCk2tCMZWLZjtU=)
2: B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (hash: nE2SMAFaQ2lno0OXjrXqdk80Cil1YlPktKv0bTOPaBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6107 (0x17db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EF76
Validity
Not Before: Mar 28 16:40:01 2025 GMT
Not After : Apr 4 16:40:01 2025 GMT
Subject: CN=67e6d0e1-22f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:01:ae:8e:fa:23:65:a3:d6:78:3f:fb:ea:
2f:ea:5d:9f:71:db:a5:fd:9f:2a:6d:1d:7b:cd:90:
50:29:ea:3c:e0:18:2a:b7:8e:ea:91:21:78:52:4f:
6b:01:a8:a5:65:1b:d9:77:db:ac:be:d7:33:7d:79:
6f:1e:3a:54:a0:78:81:11:99:1c:33:25:3f:42:72:
fe:be:e8:27:5a:3c:c6:bc:41:89:b1:42:f7:82:09:
bf:9f:b3:e5:c8:a2:32:7a:30:3e:42:5c:ee:36:e3:
69:2b:2b:36:9d:07:7c:c3:52:a5:b4:0a:c4:9c:8b:
63:d1:64:3b:e0:08:b1:cd:01:aa:9d:e1:27:20:c0:
54:5c:8e:75:57:44:a8:52:72:3e:6f:da:29:1c:42:
97:12:f3:c9:66:1c:ca:34:33:67:10:6f:64:91:e3:
57:2f:fb:ba:e0:ee:93:35:e9:bd:f3:8a:7e:0f:95:
f5:cd:41:aa:1d:21:19:01:16:0c:80:cc:63:91:70:
a6:dc:67:31:f7:68:c6:68:8c:0e:0d:01:5d:8a:b7:
13:09:15:4c:5e:c4:81:cc:85:9f:56:90:3c:d9:89:
ac:b1:f8:d1:6a:dc:17:8b:20:68:b6:af:32:96:ea:
31:ce:81:22:80:6f:2d:6d:e0:18:4a:27:86:9c:ad:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A8:78:33:B9:26:94:7E:43:F2:6E:60:C1:F1:43:07:41:F9:94:0A
X509v3 Authority Key Identifier:
keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:8e:0c:05:3e:05:f2:0a:69:d7:fa:bd:a0:f3:ad:13:cf:55:
a3:16:ab:61:b2:06:5d:2c:c5:ff:74:be:c4:7b:54:8c:f9:33:
7a:b3:2b:45:0b:a0:27:c2:dc:02:70:72:5a:8c:11:91:fb:09:
a6:a8:1a:aa:8e:6a:35:e2:3c:e0:06:b3:07:88:f7:c7:14:45:
ec:64:ce:1b:a1:fc:19:94:93:72:2c:d9:41:b8:15:50:0f:e1:
e2:6c:fd:c3:cd:23:54:cc:2b:40:7c:e5:29:16:dc:94:67:84:
01:b3:92:5b:89:98:ff:dd:ca:f4:b9:0b:92:c6:95:b3:ff:99:
0b:e1:4d:56:46:73:9e:ae:54:0d:47:90:ba:e6:f0:2e:ad:8d:
e9:85:c7:44:5c:43:f5:fb:62:f7:f1:93:80:3e:0a:37:30:82:
e5:dd:04:15:d0:7a:37:70:0f:cc:2d:69:e8:5e:83:9f:f8:77:
c8:10:42:90:54:22:19:58:75:01:c4:32:b4:4a:59:b5:f6:43:
ce:59:20:be:78:dc:4b:db:a7:10:83:a9:3b:f5:0f:d0:84:70:
4a:94:da:bf:23:f9:50:58:c0:33:ba:4c:40:e2:8d:f3:f6:67:
f7:26:6a:45:b4:09:ce:64:28:39:15:d8:15:58:c1:d3:73:83:
c9:47:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:21:30 2025 by rpki-client