Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json)
Hash identifier: ZhCA1dnImpMNyo4ndphWsBiaRZGeWFeY5ddh9bd7pZ0=
Subject key identifier: 57:8E:ED:DB:02:06:C7:17:97:1C:7D:9C:AE:35:60:0D:A5:3E:27:88
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
Manifest number: 75
Signing time: Sat 29 Mar 2025 06:04:27 +0000
Manifest this update: Sat 29 Mar 2025 06:04:27 +0000
Manifest next update: Sat 05 Apr 2025 06:04:27 +0000
Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: Fq1cLL7mdvaayyWFrtf1tEYZfQ/n+fkehFDOXk3Mt4s=)
2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: iVgLpNzw9WvLZDCrNCeZKcdKAVuHQLIqgkettJkRmpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175964
Validity
Not Before: Mar 29 06:04:27 2025 GMT
Not After : Apr 5 06:04:27 2025 GMT
Subject: CN=67e78d6b-b974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:ed:0d:be:8d:1f:87:fc:00:9a:61:3a:1e:
3a:4a:48:17:b9:f2:71:f3:b4:c2:46:8a:2d:c2:12:
34:7a:04:75:ad:4d:9c:fb:33:ce:64:f2:4c:20:dd:
38:7b:07:61:cb:f2:a5:54:3c:7f:ac:b5:75:e0:16:
f7:cb:1c:39:00:43:fa:cd:67:46:52:fe:e5:9f:d1:
79:cc:c6:06:b0:f0:f6:7c:fd:ce:37:33:27:c3:2f:
7e:2d:cf:60:3a:b4:07:d8:dc:a7:06:21:b0:d3:3b:
8e:3b:b6:07:fb:8f:3d:54:38:67:a3:8e:65:7b:52:
a2:d0:b2:ec:82:b8:57:3d:0b:3a:b2:dd:2e:0f:b3:
44:27:cb:b1:f5:3a:ca:ad:4d:4e:6b:75:6f:5c:16:
ac:49:6c:13:2a:99:82:cd:6e:22:2f:e6:cb:50:fb:
1b:86:4c:2b:ce:e8:d0:9c:6a:73:43:6d:5a:1c:05:
4b:bc:6b:ee:a5:cb:bb:89:ae:92:eb:2d:5b:5d:1b:
da:49:0f:82:9a:44:bc:fa:9d:94:62:89:5b:46:0a:
b1:86:b5:9b:5e:c4:c5:4f:30:c5:8c:11:db:dd:7f:
67:0a:2d:b5:9a:51:c2:88:e1:f7:ef:80:b8:d7:03:
d1:68:21:56:ca:69:bb:8c:84:f3:26:ce:0c:c4:bd:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:ED:DB:02:06:C7:17:97:1C:7D:9C:AE:35:60:0D:A5:3E:27:88
X509v3 Authority Key Identifier:
keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:ba:b7:01:a4:de:72:55:1f:5f:d6:d2:34:c0:5c:dc:36:28:
2c:65:8a:77:82:62:c1:0f:d3:96:b5:4c:15:00:22:bf:2b:59:
2b:cb:4e:bc:11:a4:9f:20:3f:5a:6a:c4:11:41:8d:66:e1:11:
03:61:d4:91:9a:58:79:e5:e8:25:c9:bb:8f:44:4f:e6:7b:52:
7e:91:72:16:10:8e:f0:51:72:08:77:54:5b:65:5b:51:c5:ec:
87:41:48:60:84:22:ab:10:5d:83:99:89:bf:fd:62:3d:8f:3a:
02:e0:8d:e5:05:91:1d:b2:a6:02:8e:b8:88:8d:40:ef:9a:55:
e3:70:59:e2:c5:0c:ac:96:e8:61:84:2f:89:4b:e3:28:94:f6:
57:16:c4:55:96:ba:2b:92:d2:13:77:86:ab:e1:2e:32:41:7f:
02:7f:9b:ee:cb:38:13:92:28:b9:58:bc:00:0f:82:47:29:22:
87:72:b1:6e:6e:33:28:26:2f:cc:b8:13:6d:c2:07:68:de:2e:
d2:03:be:fa:86:18:72:9f:fc:0c:fe:25:fd:db:73:ce:0a:30:
34:0c:2a:8c:91:e6:92:82:d7:c9:94:81:c2:c7:5c:e5:86:fc:
c0:fe:39:2a:f7:09:40:0e:81:44:63:76:27:c7:be:56:24:4c:
d6:53:26:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:12:28 2025 by rpki-client