Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft
File: FOUWOGcQb85FUq7s-x8gJmHm310.mft (raw, json)
Hash identifier: YTdq6TlK/1SnUT5HOHKtOidwovDtQAnUDy6pbMiiEl8=
Subject key identifier: 28:34:FC:43:D5:FB:84:C4:BD:3B:73:3C:CB:DF:51:97:E4:65:1D:45
Authority key identifier: 14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
Certificate issuer: /CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
Certificate serial: 066D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft
Manifest number: 0660
Signing time: Fri 28 Mar 2025 22:40:48 +0000
Manifest this update: Fri 28 Mar 2025 22:40:48 +0000
Manifest next update: Fri 04 Apr 2025 22:40:48 +0000
Files and hashes: 1: FOUWOGcQb85FUq7s-x8gJmHm310.crl (hash: bzhnfyaIF14kKdgc32ml7gM2l5+MOhp1Mx8WrzBTJ/E=)
2: 81D7961ADD9211EDA5A21671C4F9AE02.roa (hash: gNRYTYMwj494RNxbNtDWuzvBMRPNNtKBT2cX5Pzvaas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F9F6
Validity
Not Before: Mar 28 22:40:48 2025 GMT
Not After : Apr 4 22:40:48 2025 GMT
Subject: CN=67e72570-a5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:43:89:09:f5:14:05:dd:a8:c2:7f:ca:16:
e8:39:04:c9:8c:9a:73:0b:26:1b:cf:6b:23:0b:f8:
ce:0c:29:19:eb:a3:b5:53:69:ec:9a:20:57:f7:2f:
e3:98:0d:1d:44:51:fe:24:95:be:fa:a4:f5:70:ca:
66:89:70:57:a8:40:fe:12:52:db:29:25:ff:52:9b:
35:32:74:a6:c7:b3:89:d9:09:22:9c:65:70:d5:09:
e3:66:ed:e1:2e:54:db:32:eb:30:82:4e:b6:13:80:
a0:95:3a:ad:a8:73:3a:ab:92:cd:2b:04:0a:20:59:
48:6e:0a:38:ea:da:55:42:19:b6:57:8c:5a:4c:2f:
75:3a:b3:1b:01:a5:ac:d6:f0:0b:2a:af:8c:bd:94:
eb:af:88:9e:30:44:23:d3:1f:7e:03:3a:7d:46:2e:
20:92:a8:bd:91:85:13:ce:57:c5:60:98:49:f3:e2:
62:14:1b:6b:ef:78:13:9c:bd:1f:51:f3:d5:70:50:
7b:54:47:d9:60:a4:30:43:4c:2d:a1:b6:f7:db:d9:
62:e5:f4:58:34:67:55:1d:aa:d9:02:cd:c8:59:42:
f4:ae:bf:2d:7b:40:3d:10:6f:0d:4f:47:fc:b1:21:
a0:ef:77:54:44:fe:61:fb:6c:b0:2d:c6:e0:6c:14:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:34:FC:43:D5:FB:84:C4:BD:3B:73:3C:CB:DF:51:97:E4:65:1D:45
X509v3 Authority Key Identifier:
keyid:14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ce:73:66:3d:8c:c2:5f:36:68:57:47:a6:9d:e0:56:5c:83:
10:ef:51:d9:7b:52:fe:2e:ba:9f:9e:bd:29:2b:76:a7:0e:1d:
ca:87:d1:aa:2f:ee:c7:60:a5:c5:59:cd:31:40:ba:c8:d3:e4:
61:14:e8:c6:67:12:23:98:a4:b5:1e:0f:4c:2d:0f:ba:aa:77:
23:f8:f4:e1:01:4c:a8:83:af:8d:48:77:cd:c3:ba:1c:f6:e2:
d3:e3:17:c3:d3:23:07:af:08:32:a6:a0:29:b9:9b:97:c8:54:
9f:bc:2e:7e:c3:b6:43:57:0a:24:4d:78:3b:96:92:15:de:59:
af:28:6e:2d:13:7f:7b:c7:42:8e:57:6c:24:32:f1:64:5e:27:
9d:00:ed:5c:a7:39:90:21:9e:3b:ab:0c:f6:66:58:d1:33:a7:
00:01:a0:6d:e7:c7:0e:6f:24:7a:96:ac:dc:7e:43:d5:35:96:
b3:6b:27:a7:fc:f8:e8:b5:9d:ee:d6:75:ab:46:46:6b:82:9c:
07:13:34:7a:69:e9:ac:7e:86:13:35:13:fe:ee:c8:c6:29:b4:
36:b4:de:40:de:7a:90:7b:3d:42:5c:ba:88:0b:f8:5d:62:1b:
a3:5d:6d:56:f4:ae:a3:29:ef:b6:e6:07:bf:1d:cd:96:a0:12:
33:0c:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:23:24 2025 by rpki-client