Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier: /yeqobnNA6CWxiY+5krKg7nnutvpcL1H5k0DWVJLzBY=
Subject key identifier: 25:1A:CA:63:18:0D:4B:30:FE:F6:57:DA:66:7A:57:3D:8C:02:37:D3
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number: 0177
Signing time: Sat 29 Mar 2025 03:25:54 +0000
Manifest this update: Sat 29 Mar 2025 03:25:54 +0000
Manifest next update: Sat 05 Apr 2025 03:25:54 +0000
Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: xGxVwZE5uSkm5s5vjOdH6dzQ9iR+KfvOBvWkBNMKIH4=)
2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: H7tL4KJE0pVl8ulAcyEMhzXfQVRbRczv7arveo6DHyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B092
Validity
Not Before: Mar 29 03:25:54 2025 GMT
Not After : Apr 5 03:25:54 2025 GMT
Subject: CN=67e76842-6202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:07:f9:16:33:a8:58:2b:5f:47:0c:bb:22:5e:
e2:68:79:57:c7:6f:1d:9f:67:13:02:13:58:14:4d:
b0:e3:18:34:55:ef:fc:a8:65:94:93:ab:cb:a2:d7:
b6:dd:fe:e2:cc:a1:d1:1c:28:e2:a5:90:8f:a6:ee:
0b:f4:cd:7c:41:7d:a5:ef:13:ca:66:55:15:f7:ee:
c1:ed:ce:bf:f0:ee:6e:ae:e1:6b:95:ba:cd:c6:7b:
14:9e:20:f3:32:31:36:35:1e:8e:16:1c:6c:20:ab:
37:ec:b6:7a:29:f5:0a:96:58:b1:d6:8f:f6:99:e2:
65:7d:10:13:f2:e3:32:37:1b:ff:37:88:99:b4:76:
5c:d6:56:f9:81:91:8e:6c:5d:74:8d:dc:1c:bd:86:
71:be:ec:2d:27:c4:e9:69:38:4a:b5:4c:53:7d:f8:
bf:28:d2:2c:60:21:99:f9:5f:ac:7d:db:46:0b:cf:
7f:4d:7e:a3:e0:2d:c1:b8:a4:8f:87:38:44:e0:a8:
2a:58:d7:b6:24:02:8b:1a:06:a4:2a:17:f0:ce:e2:
7c:b3:c6:e1:fc:b1:01:bc:88:f9:8c:93:b1:34:cf:
b8:38:07:7f:24:c2:47:18:1a:89:cb:08:5d:08:39:
7f:d6:90:bc:f8:a6:de:10:01:7f:47:f4:89:bf:e1:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1A:CA:63:18:0D:4B:30:FE:F6:57:DA:66:7A:57:3D:8C:02:37:D3
X509v3 Authority Key Identifier:
keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4f:04:40:9c:de:e8:21:f9:71:cc:0e:50:d8:76:d1:14:64:
28:d9:87:f3:8f:39:7d:fc:27:a4:3a:a2:5e:63:8e:82:d7:0b:
70:14:fd:4d:f6:35:38:20:b0:d7:d0:96:f9:c0:72:65:4e:2b:
3d:1f:56:7b:f3:f8:a1:ad:92:ba:e9:92:5a:fa:9f:79:0e:4f:
b2:f6:15:07:6f:d6:b8:48:af:b0:8f:ba:9a:05:2f:41:a9:19:
ae:8c:fd:27:68:46:7f:d0:55:e4:6e:f4:d8:c7:26:81:51:6d:
f0:b9:d3:3b:ee:1b:6c:eb:61:27:a6:5d:4b:e5:bc:57:ab:90:
63:d0:6c:23:da:bf:89:fd:5a:ee:52:2a:75:1d:f9:f7:7c:61:
83:b8:a6:8b:71:39:98:24:94:37:8e:62:cb:e6:09:3f:de:80:
09:9c:81:b5:02:2a:1e:a9:d6:53:6c:fc:2c:ab:60:a2:0f:5f:
38:4b:54:fb:a5:90:a7:c9:ac:dd:45:60:95:2f:46:d7:98:70:
61:fe:40:92:06:cd:61:c9:6a:b6:53:4b:35:a8:c8:0b:db:92:
94:1e:4b:6a:0e:7e:89:7c:b8:de:47:01:4e:ff:c1:13:ab:9e:
d8:6a:d9:e7:a4:ba:c5:fc:d7:f9:35:a3:85:8d:60:0f:0b:7d:
3c:51:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:28:52 2025 by rpki-client