Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.mft (raw, json)
Hash identifier: ZimJQkKaJaudsAYcg344Y9b0eFF56FoKubPEs/tr000=
Subject key identifier: 4A:BD:D1:3B:E2:25:7C:4D:E4:0A:AA:A9:35:8F:C1:BC:DF:45:96:C2
Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
Certificate issuer: /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
Manifest number: 0191
Signing time: Sat 29 Mar 2025 03:00:38 +0000
Manifest this update: Sat 29 Mar 2025 03:00:38 +0000
Manifest next update: Sat 05 Apr 2025 03:00:38 +0000
Files and hashes: 1: 1h3BeAj1jg-ZsoUs50hg-FPLINs.crl (hash: 67MQsHOdUnkb5wkGgHZNoo9K1NaLN37d6F5tJN5ZMLg=)
2: FB4FC092A83811ED94EE0437C4F9AE02.roa (hash: CsAbRFqHcEIzwNgcJyTBhfAP0i1+CDL52//CVRtHe84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FD2B
Validity
Not Before: Mar 29 03:00:38 2025 GMT
Not After : Apr 5 03:00:38 2025 GMT
Subject: CN=67e76256-a20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:eb:be:24:47:6d:b1:85:1b:91:02:e4:7e:
fd:0f:7a:d4:1e:0d:1d:b3:ed:c2:c5:49:7c:80:17:
ce:d6:e3:93:a7:8b:ec:0f:75:30:5f:f9:95:2c:af:
54:b1:26:36:31:93:44:60:2f:1c:c6:9b:9b:27:be:
07:50:d3:8a:bb:05:8a:6a:e7:c2:e4:f8:59:32:72:
70:d6:c0:03:a7:d8:d0:92:69:86:cd:0d:71:95:a7:
3c:bf:35:fa:6b:43:5a:ad:15:ea:a4:13:24:a1:87:
4d:02:ab:79:f1:09:43:1a:50:01:ca:f1:86:16:03:
dd:58:69:25:b5:22:ad:d5:56:55:68:58:f3:ec:ef:
d1:ac:0b:66:0d:5d:59:e4:7b:f7:59:52:08:d8:67:
d2:24:8a:1c:e4:4e:63:43:84:05:0e:71:67:a5:f1:
f0:d4:d7:ae:d8:6c:c6:2f:0b:00:b2:b2:1d:e9:48:
79:6a:bb:c7:1c:f5:ea:20:77:58:85:6b:8e:ce:93:
c7:9c:f7:fe:45:6c:b0:c8:cf:ff:f6:02:19:4c:0f:
fb:80:0e:57:17:ab:0b:eb:7b:16:84:9c:4b:fd:a1:
85:62:21:3b:19:49:bc:f5:40:16:4e:f2:11:a8:94:
f9:ba:93:7a:28:a0:8d:f4:c9:4d:f6:9a:66:67:e8:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:D1:3B:E2:25:7C:4D:E4:0A:AA:A9:35:8F:C1:BC:DF:45:96:C2
X509v3 Authority Key Identifier:
keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:ea:9e:16:f0:24:f9:e9:0b:5b:a1:e6:ff:b2:fd:3e:2c:a2:
e2:f0:59:11:27:f3:73:27:87:7d:56:4f:c7:28:99:9a:26:bc:
db:f8:f4:38:6b:02:bd:65:4e:4d:60:2e:fc:64:4d:c8:40:ba:
99:59:ab:e4:15:a8:d5:e3:86:8a:cf:ba:7b:f6:54:1e:8b:65:
59:ea:70:fb:cc:ef:50:cb:19:1b:44:c0:bf:e8:ad:19:ca:d7:
87:43:f5:e0:6a:ad:9c:e5:ca:04:15:d8:3f:ff:9f:47:62:b8:
10:db:c7:29:00:be:0e:a5:ab:da:e6:ab:d8:7b:f3:10:2f:65:
56:80:0c:60:7e:c3:64:52:ca:f5:89:51:42:15:be:6b:6a:87:
f8:3d:76:b1:f8:c2:e0:e9:14:c7:ec:5f:b9:ce:ff:e2:9c:9e:
5d:bb:96:db:bf:54:36:46:50:1c:3d:20:d7:a0:59:68:01:16:
c0:b0:00:57:b6:50:45:4e:3a:c4:c7:58:8e:9b:de:3d:aa:81:
c5:2b:e8:5b:ea:03:80:a2:ec:3a:11:3e:40:8d:48:17:f1:e0:
a4:9f:8e:7a:9c:5b:17:a2:6a:b3:a0:3a:45:d3:8a:5c:5c:a7:
6c:52:b1:47:2c:82:02:06:70:70:9d:53:55:ff:ef:00:0e:dd:
ae:be:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:25:58 2025 by rpki-client