Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json)
Hash identifier: JiA8iVtn925USH+f/o8F/GW6NSsDSbvGVM2Dc4drCgg=
Subject key identifier: 07:AD:29:ED:8E:48:E0:1C:1B:5C:F1:20:A7:EB:42:5A:8A:E4:46:F3
Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Certificate serial: 076F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
Manifest number: 074E
Signing time: Fri 28 Mar 2025 22:01:54 +0000
Manifest this update: Fri 28 Mar 2025 22:01:53 +0000
Manifest next update: Fri 04 Apr 2025 22:01:53 +0000
Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: qv+VNOnibIpg8auakFjU0pb4AS9dilw7ly1QaVlzhrw=)
2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 3/Y1r0LMBII6zW5USQairn62r7Znj5u8VXmSgbR98nY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175027
Validity
Not Before: Mar 28 22:01:53 2025 GMT
Not After : Apr 4 22:01:53 2025 GMT
Subject: CN=67e71c51-c69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:8a:9a:9a:8c:da:c1:13:3a:14:1f:07:59:
84:d2:b0:b7:85:8c:b5:f0:6e:a4:b3:b2:70:0b:c9:
85:d5:2d:a0:c5:9d:78:11:8b:a4:90:9e:3c:56:4d:
5a:82:1f:8e:d6:03:0e:a0:31:2b:3c:cf:1d:b7:80:
6d:12:e4:6f:fc:d4:07:f6:e3:36:9c:da:a4:0c:df:
5b:b7:98:20:d5:63:e7:01:28:87:6d:20:56:4b:0d:
30:ae:04:57:e5:e7:eb:08:a0:c7:bb:79:75:b1:eb:
27:ba:b4:9b:87:df:f5:e2:e8:f7:9f:20:9d:66:ba:
65:f2:5c:97:45:53:cc:07:ed:9d:f5:13:7a:6d:07:
a4:1c:6d:a7:25:26:ae:1d:dd:af:ce:49:56:1b:38:
18:27:1f:d1:34:19:c4:31:d3:d0:0f:44:fa:38:f2:
b9:26:8e:5d:76:4a:1f:e9:b7:3e:35:60:9c:70:0a:
ca:e0:a7:c0:df:db:59:a7:55:e1:c2:0a:28:23:3b:
f9:fd:94:44:c6:18:8d:d1:c7:a0:7a:cc:38:a4:f8:
39:7a:bf:57:c5:f2:63:dc:99:5e:7e:4c:b3:15:21:
f3:62:c5:4d:3a:ac:bd:f8:d9:cc:e9:26:c7:30:18:
0d:95:d4:02:db:46:80:48:75:75:85:f6:10:6c:ee:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AD:29:ED:8E:48:E0:1C:1B:5C:F1:20:A7:EB:42:5A:8A:E4:46:F3
X509v3 Authority Key Identifier:
keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:67:a5:66:88:cc:75:30:56:0b:a4:89:74:6d:15:66:f4:
18:46:47:32:17:b9:f5:fe:72:9c:97:0d:3b:67:e2:30:af:49:
22:c8:3a:60:9e:c4:f3:92:b1:2b:14:56:88:e3:c2:e3:aa:13:
23:5a:89:c7:d5:96:c8:62:46:ff:5c:e5:98:c2:35:cf:c5:f4:
1b:5c:0f:21:d9:b2:92:8e:64:f5:3b:5b:e6:4d:a7:b9:62:f9:
ef:7d:de:09:3d:15:b7:13:cf:09:e4:50:c8:31:49:d3:0b:54:
59:5b:21:cb:c4:3e:80:75:b0:b1:9c:cb:ac:ec:10:41:ca:97:
d7:d4:d0:f1:23:a2:56:7e:8a:48:ae:cd:f9:e4:11:27:c2:2a:
6b:13:33:70:8f:a2:9c:8a:b6:ec:75:96:de:ed:6a:8e:66:8b:
74:70:b2:29:0c:df:71:4d:b7:b6:b3:9d:99:9e:6f:b4:da:d9:
b2:fb:ec:af:43:fc:b1:e6:71:c3:87:22:c7:f6:1d:05:a3:a6:
a8:49:c2:62:87:bb:db:88:63:4b:a4:22:e5:15:5e:d2:77:8e:
4d:f6:3b:6e:b1:7d:6b:fa:eb:0b:a5:2c:16:ec:b3:cd:43:eb:
7d:da:fa:9c:80:c8:08:d2:f6:57:44:8a:e9:7f:a9:4d:49:1c:
90:04:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:41 2025 by rpki-client