Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json)
Hash identifier: CYRAFHsq1yE/hd+f2FfkzbTCzR5kNdV/xEKqMcJtiNo=
Subject key identifier: 8D:7D:43:A9:11:16:95:A7:2F:AC:DA:C8:F5:84:E3:D7:96:BC:E1:05
Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
Manifest number: 8E
Signing time: Sat 29 Mar 2025 05:49:00 +0000
Manifest this update: Sat 29 Mar 2025 05:49:00 +0000
Manifest next update: Sat 05 Apr 2025 05:49:00 +0000
Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: +mOY5Y8o42LAm30gR7EhX+534nr8qC5ssilqGfPdpHA=)
2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178424
Validity
Not Before: Mar 29 05:49:00 2025 GMT
Not After : Apr 5 05:49:00 2025 GMT
Subject: CN=67e789cc-d778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:91:60:26:a5:62:3c:b5:75:44:a0:3b:a0:
c8:80:d0:48:2d:ce:38:25:f8:98:a2:b6:66:80:ca:
97:00:a4:71:82:c7:a5:8f:57:7f:f9:52:17:ca:48:
78:ed:10:25:22:bb:8e:6e:95:67:14:ef:bd:29:8b:
cd:80:9e:83:9c:f6:7f:2e:03:50:06:16:0a:96:c4:
77:aa:f9:eb:99:8a:be:cc:69:60:1d:03:de:9c:3a:
fb:d5:18:2f:d9:82:b7:d6:79:dd:40:93:ed:3d:bb:
ca:fb:39:7e:d4:84:b6:2c:f0:f4:86:06:8a:cd:9b:
fc:38:f4:64:d8:36:cc:04:fa:82:65:d6:a5:53:cd:
6f:73:40:6d:84:4d:cb:f5:08:80:55:b3:c7:d9:ae:
0c:b6:e3:61:ee:f0:dc:2a:9c:92:05:61:72:33:85:
e5:b5:a2:3b:02:0e:05:f1:81:42:d2:da:ec:c5:24:
22:be:98:cf:37:d3:88:cc:f2:d2:84:52:6e:84:37:
68:90:f8:79:69:c3:64:35:84:ce:89:09:a8:c4:d7:
5b:54:ea:d6:8c:48:ea:2a:26:79:5c:48:3d:85:bd:
d8:0a:1f:37:e9:22:75:37:9c:ac:33:41:8b:61:52:
0e:87:74:d8:28:5f:e1:e4:8b:da:a9:7e:e2:a2:95:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:43:A9:11:16:95:A7:2F:AC:DA:C8:F5:84:E3:D7:96:BC:E1:05
X509v3 Authority Key Identifier:
keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:f6:60:cf:0b:36:ef:53:70:f1:ef:82:8f:00:c2:a6:74:7b:
2e:3d:8e:fd:df:50:3f:b1:1b:19:89:3c:fd:40:b2:85:7e:76:
54:fb:aa:0e:28:44:ef:67:e0:1f:77:4f:43:c8:2c:34:10:17:
b6:c1:3b:7b:52:ed:86:16:13:02:69:ed:7a:96:77:46:db:34:
c5:2c:0e:98:ab:f4:83:57:ec:2a:97:c2:73:9f:45:27:62:33:
3a:2d:e9:1d:48:ca:c4:96:5f:27:4a:14:55:d7:bd:9a:2e:d1:
50:b1:d3:82:f9:32:0b:88:34:7c:3c:2b:0d:98:eb:d7:ef:7e:
d8:68:b1:69:2a:ee:61:c8:f9:7d:9a:9b:0e:de:8b:a0:58:05:
b4:5d:50:ee:f1:53:3b:c7:56:ba:58:cd:02:9d:8a:64:25:31:
52:6d:be:7a:e7:73:ad:40:3f:11:27:20:2b:57:6e:df:24:62:
5e:62:df:29:5d:f0:99:e2:70:2d:0b:36:90:76:2e:0d:18:d3:
01:40:26:2d:71:9f:d0:12:58:29:ba:1a:92:47:49:86:34:f5:
55:65:72:c5:81:ef:9b:bb:e8:ea:23:7e:33:2e:09:d0:41:92:
c8:0c:8f:d6:16:76:32:99:70:d1:7d:b4:f7:c6:d8:71:dd:94:
bb:03:fb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:11:04 2025 by rpki-client