Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
File: tN_eECSMkMVYSwFupua0nnge2CA.mft (raw, json)
Hash identifier: HMFoxPO7UCJEpxiwE760PHWBpJWLJPErs5T9vgdFcuI=
Subject key identifier: 9C:86:1C:1A:0E:6C:AB:BC:04:89:70:C8:2F:5F:24:BA:D6:96:98:AB
Authority key identifier: B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20
Certificate issuer: /CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820
Certificate serial: 0675
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
Manifest number: 066F
Signing time: Fri 28 Mar 2025 22:36:41 +0000
Manifest this update: Fri 28 Mar 2025 22:36:41 +0000
Manifest next update: Fri 04 Apr 2025 22:36:41 +0000
Files and hashes: 1: tN_eECSMkMVYSwFupua0nnge2CA.crl (hash: pVWm4CizNmsBbHkq23I1tPdWaAuKKRSP3JSXyEpBXB8=)
2: 9E9FA4C40AB011EC8906F464C4F9AE02.roa (hash: y+B4buIfbruqaejaK6x75+RSn7pa5KBjABUZlRGt/q8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A5B
Validity
Not Before: Mar 28 22:36:41 2025 GMT
Not After : Apr 4 22:36:41 2025 GMT
Subject: CN=67e72479-d4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:24:c7:17:41:ec:8e:a9:15:61:d8:84:96:
d3:68:2d:a7:95:55:8c:17:a3:15:bd:13:24:b3:2f:
35:34:16:a2:1d:2f:d4:83:bb:61:6b:2b:5c:ad:82:
df:5f:49:9e:21:2e:86:c8:2f:62:6a:90:cd:8d:71:
00:dc:55:be:57:17:23:73:8f:85:6b:99:de:74:9a:
91:23:68:b5:49:6f:d7:c2:5c:f1:cd:7f:2b:7d:3a:
9f:cd:9e:f4:c4:ca:1c:7b:b1:01:45:67:9a:ce:1a:
e8:59:d1:6c:cc:5d:87:6f:de:ce:03:c2:67:c7:01:
fa:37:da:f5:41:05:ca:af:05:df:5f:b3:48:e3:1b:
82:f8:88:65:9a:e1:23:74:26:0a:6c:9e:d6:66:9a:
ba:1d:ed:2e:e4:cb:5d:cf:9a:80:9b:4f:0d:ed:07:
f0:f3:e1:b8:78:f8:59:a9:ba:c2:43:80:46:92:89:
75:4c:e7:05:28:fe:b3:a9:2f:6c:6e:0e:ef:c2:9e:
6e:9e:c2:a0:ab:93:ab:fc:66:ef:5e:b1:00:48:0e:
3c:dc:b1:d0:69:e2:66:78:2f:e3:cd:5e:f1:3e:70:
22:a6:9e:f4:52:e9:dc:05:49:96:af:be:52:bf:bf:
76:37:5b:4c:a1:95:21:2b:e0:44:73:a4:32:36:2b:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:86:1C:1A:0E:6C:AB:BC:04:89:70:C8:2F:5F:24:BA:D6:96:98:AB
X509v3 Authority Key Identifier:
keyid:B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:e8:1d:6c:a1:2e:db:96:57:71:1d:b6:d4:c9:f9:e3:e8:18:
33:58:12:67:15:33:c3:bc:e7:8e:62:94:12:37:b5:f8:91:8b:
84:6f:d1:6b:91:79:d6:62:c4:85:7f:b9:a2:2e:fa:f6:7d:98:
39:4e:a5:76:e8:70:b6:33:2b:f2:6a:62:f5:2a:96:04:29:cd:
6d:e4:7a:88:28:ed:02:5a:99:1f:68:bc:89:70:f9:de:16:d1:
9b:68:d0:74:b1:39:b9:ec:a4:6c:ee:d4:5a:6a:30:2f:4b:ec:
41:7e:dc:a0:20:dd:44:b2:3a:12:d9:b6:e5:f3:05:9e:b7:64:
e3:24:1d:ef:1d:1d:ec:5a:99:c3:03:02:fb:f8:5e:16:42:da:
8a:da:32:56:f8:e0:24:0f:19:ad:77:33:88:67:a3:8f:94:1d:
5b:df:70:35:b7:f2:70:e9:3a:9a:24:6a:54:1b:94:5f:02:8d:
92:48:96:c6:dc:e2:0e:7c:55:64:58:cc:79:98:e4:68:0f:b7:
33:f6:98:8f:f2:11:ee:5f:9d:66:c1:1a:3d:8a:66:28:58:02:
ce:2c:36:40:fa:03:3e:c1:c4:14:c8:bb:3f:9b:76:95:98:63:
a9:8f:3f:ad:81:ee:47:eb:38:d6:e2:0c:17:a6:7d:97:6d:45:
31:34:5d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:47:46 2025 by rpki-client