Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
File: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json)
Hash identifier: OUuRDLikOKE09wZUZP+CC+QStS3G4hzATvz2fMr2ebg=
Subject key identifier: F8:FA:EB:43:3A:52:01:4A:EE:E8:67:B4:3A:8B:01:91:E3:51:42:8A
Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69
Certificate issuer: /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369
Certificate serial: 0451
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
Manifest number: 044B
Signing time: Sat 29 Mar 2025 00:29:15 +0000
Manifest this update: Sat 29 Mar 2025 00:29:15 +0000
Manifest next update: Sat 05 Apr 2025 00:29:15 +0000
Files and hashes: 1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: XfPZEBTA2G4HpICkRdSFAYiF3ULVHXhSSAVWElaBjKw=)
2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: VtnOs46KlpQVSJ9THDVnSS8EzLS3A9xUSm3n/4RNrWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1105 (0x451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B41
Validity
Not Before: Mar 29 00:29:15 2025 GMT
Not After : Apr 5 00:29:15 2025 GMT
Subject: CN=67e73edb-0fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:59:1b:db:66:d4:b6:53:00:66:10:96:ca:
ae:e1:ef:70:6a:02:a9:73:7a:63:15:9f:93:34:7c:
2a:e2:77:a2:01:c6:2f:51:78:83:f8:c5:7f:57:34:
05:be:bc:73:28:08:3b:06:ca:9a:f7:2c:21:fa:38:
9c:dd:17:53:9c:50:6f:bf:e1:68:c2:72:7a:10:d8:
0e:6a:ed:7a:77:13:fd:58:5b:ac:01:3b:b9:00:48:
71:bb:a6:3e:d5:90:bb:02:4a:e2:5c:58:38:9d:86:
e7:d3:9b:8f:13:a2:e3:4d:1b:72:1e:45:61:c3:24:
5d:05:b9:d2:75:b3:bd:cb:f3:10:14:4a:41:5b:bc:
32:b7:9c:37:2a:96:06:05:62:cc:36:d1:ae:cf:7a:
a3:f5:7b:7e:10:ef:18:77:ce:4e:f2:cf:d5:62:1c:
ed:cd:c4:2b:85:08:72:d6:3e:de:c7:de:78:b9:da:
40:81:d0:d2:c0:f6:e9:c7:83:da:4f:0a:b2:87:f4:
00:8c:6e:cb:b5:b4:b9:4c:36:e4:00:96:46:35:a0:
39:82:5c:00:79:93:f1:b2:61:fe:57:f1:2e:fd:b3:
92:2b:96:b8:72:72:21:59:fe:96:27:57:9a:20:b3:
81:e4:15:1c:f0:d0:ed:af:bb:12:e0:d7:c0:6f:dc:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FA:EB:43:3A:52:01:4A:EE:E8:67:B4:3A:8B:01:91:E3:51:42:8A
X509v3 Authority Key Identifier:
keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:03:0a:db:19:ef:05:5e:12:51:44:b8:d0:b8:6b:d7:87:d1:
72:10:2e:dc:b5:d2:e9:22:cf:f4:c9:e8:46:44:f7:7c:fe:12:
46:bf:a7:a1:fe:9b:e9:9c:d3:c2:96:a0:4e:db:e0:da:38:ae:
94:59:56:67:35:6c:5c:17:5d:44:04:13:b2:23:22:f8:b6:2f:
18:32:cc:7a:40:f4:3a:7f:a0:38:38:74:07:27:79:97:bd:05:
d1:f8:f1:cf:24:54:f0:93:1e:5e:ec:0b:d3:9f:91:0f:86:87:
d5:17:d3:e1:96:a2:b0:8a:32:5a:fd:c1:c2:2d:00:69:e9:f2:
e8:2f:e1:f9:76:03:a3:cb:f6:2d:d4:bd:79:fb:34:ac:7c:74:
61:d6:9d:9f:87:b1:f4:8f:4c:83:ac:49:22:57:cd:63:49:ff:
ce:af:cc:24:6f:8f:6a:e9:84:a5:cd:5c:80:5b:ab:6d:9d:43:
af:a8:29:66:50:e7:28:96:72:9d:a0:cd:b0:3b:e5:99:2c:92:
15:2c:bd:08:36:23:a3:24:98:0e:33:55:2b:cd:53:e9:88:ff:
74:31:ea:76:bd:ce:78:a5:1e:01:8d:24:db:81:2a:16:c8:64:
1b:2f:80:05:f0:4f:69:e9:ed:29:f7:ea:4a:e9:72:44:8e:e0:
12:9c:c5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:18:41 2025 by rpki-client