Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
File: r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json)
Hash identifier: N2LoNHwl4Vy2wHsp1IYW+ro+DXng3tPP41SUbt6H96w=
Subject key identifier: 2E:90:12:D2:83:D2:E1:5C:44:17:A5:33:40:F0:E5:6D:AE:8C:3C:A4
Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Certificate serial: 02D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
Manifest number: 02CA
Signing time: Sat 29 Mar 2025 01:41:24 +0000
Manifest this update: Sat 29 Mar 2025 01:41:24 +0000
Manifest next update: Sat 05 Apr 2025 01:41:24 +0000
Files and hashes: 1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: w8ejtzKV07Ci1734xLt/19oQX1NwMMuGzzMafFBRCsk=)
2: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: F2rD9DTyJO/8KZY6J1+Hne/amu0UrQKM61Lrb0l7cz8=)
3: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: VQEy4E57oyCsilPS/N4eVIUrZJ0xe1SQnIjV1RgzS+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917414E
Validity
Not Before: Mar 29 01:41:24 2025 GMT
Not After : Apr 5 01:41:24 2025 GMT
Subject: CN=67e74fc4-35ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:b2:ab:eb:bc:2c:85:ea:e5:74:ae:c1:b8:
a1:15:e2:0d:60:fb:a5:65:7f:2f:82:43:d6:9a:e4:
be:74:80:1f:25:06:8b:fe:ac:5a:e0:25:98:7c:f5:
55:44:b3:4c:b1:2f:16:28:05:47:b1:f4:8a:57:1f:
56:c6:20:49:a5:c5:bc:6c:48:28:99:f3:a6:5d:90:
62:e6:ef:20:5d:3e:f6:f6:6c:9d:47:3a:54:69:ac:
30:df:6f:0e:41:0a:e0:54:16:9e:86:0e:1e:31:e5:
ca:85:7d:95:61:6d:4f:fb:5c:b4:98:66:9f:0b:11:
fa:9a:ef:d6:f8:e7:f4:fd:30:55:af:50:99:27:ea:
37:0d:87:14:4e:35:68:c3:ed:08:67:e3:1e:f2:20:
f1:f4:75:3e:49:53:c4:8f:0c:ac:f9:5f:e3:32:67:
fe:55:54:da:a3:b5:de:7c:61:bc:95:29:c4:47:c2:
5a:03:00:a7:d1:73:5e:16:c0:82:cc:34:54:ef:90:
74:e9:c8:3d:94:74:57:67:fd:1b:5e:3f:0a:50:69:
19:35:84:78:a4:60:27:dc:1a:f5:6a:ad:1b:22:cb:
84:52:40:89:b0:22:7b:9c:aa:34:86:36:77:67:47:
1e:ab:66:82:8a:7b:07:91:d5:85:ca:27:5f:b5:1b:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:90:12:D2:83:D2:E1:5C:44:17:A5:33:40:F0:E5:6D:AE:8C:3C:A4
X509v3 Authority Key Identifier:
keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e6:0f:dd:2d:43:e7:b5:c3:b7:56:c7:8b:4b:b6:e5:07:2e:
77:87:ef:82:0d:27:6c:a1:70:48:cd:a9:55:92:fe:48:15:08:
d7:32:de:77:2b:cc:03:dc:32:1d:9f:9c:fe:42:56:a2:70:0c:
c1:ae:4e:f4:a8:07:2a:4e:27:5f:df:ba:c2:4d:cb:6c:63:13:
e7:0e:6f:8c:4b:0e:fe:3a:65:4a:e6:f9:e2:b8:18:f8:01:d8:
82:5a:6c:77:b9:5e:5c:91:61:a7:bc:9d:5d:de:cb:07:a9:fc:
9f:f0:98:c4:43:4c:e6:a1:db:b1:dd:04:9b:61:61:53:3d:9d:
78:c2:08:58:91:a5:ab:f2:4c:89:95:1f:e5:b8:0f:54:d8:18:
a2:a1:b2:28:f3:36:a6:71:c6:53:07:57:d8:ca:6e:38:6e:22:
31:27:45:60:7a:89:2e:eb:b5:f5:93:ac:52:cb:7c:f1:e8:42:
24:01:26:5b:1f:54:d5:ab:9e:c2:7e:02:ce:43:89:91:cc:08:
8f:5c:02:57:1b:04:04:11:d0:7d:a8:8d:ce:24:5a:c5:f1:d0:
5a:a8:a2:f3:b2:8d:71:4e:4c:3c:63:6e:d0:35:a0:ea:50:40:
2d:ae:9d:c4:2b:4b:9f:03:d7:15:23:78:d2:07:87:70:ac:01:
3b:35:fc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:29:44 2025 by rpki-client