Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json)
Hash identifier: YmVFsaDpF/kVsIzCP7M0kCGAZod7QEAsjsOjNc9z6VQ=
Subject key identifier: 43:58:29:91:A9:B1:48:34:18:56:4D:84:BC:E5:10:7E:15:5C:2F:10
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
Manifest number: 59
Signing time: Sat 29 Mar 2025 06:27:10 +0000
Manifest this update: Sat 29 Mar 2025 06:27:09 +0000
Manifest next update: Sat 05 Apr 2025 06:27:09 +0000
Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: xQ8hOhxoAwRtCKkHV435UwlLN4/TSDOPZwN0TjNlal8=)
2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: kBrZwIHTbaSnaE7XdLULllQIjEnMuSEphHZrV4DhNKM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B633
Validity
Not Before: Mar 29 06:27:09 2025 GMT
Not After : Apr 5 06:27:09 2025 GMT
Subject: CN=67e792be-10a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:18:d6:39:95:9f:56:c0:2d:5a:51:e0:13:
3d:92:29:cb:ad:a8:9b:92:43:ff:48:8b:4b:2f:95:
1b:8d:94:7f:40:8c:65:c9:83:6a:23:fd:1b:0b:53:
bf:70:df:8a:80:7e:00:3c:d0:28:1e:63:d5:b4:c6:
2c:13:9c:a6:50:cf:2d:a9:86:89:a3:d5:35:db:a2:
bc:80:6a:11:02:19:31:73:45:f1:6b:4a:ca:4c:35:
eb:9a:90:25:af:a3:17:99:6a:ec:97:5e:f0:1a:4f:
f8:df:8b:fb:48:89:ce:e9:76:ce:73:af:b0:99:79:
ff:c7:4b:e5:84:0d:87:f8:88:ba:eb:38:97:d5:c9:
ea:c5:d8:05:c9:73:fa:b0:b6:89:29:39:d1:dc:12:
e5:bb:12:67:94:c2:f8:f2:82:39:5c:ae:2f:a8:ad:
39:2a:ab:02:da:61:39:39:41:c8:9a:1b:2b:cb:b4:
65:2e:4f:5b:3f:c1:91:e4:0b:63:1e:33:c4:4b:47:
23:74:18:4e:3f:be:48:7e:e0:b9:fe:34:80:52:23:
41:9a:03:81:8f:6c:d1:fd:44:01:04:26:ba:0d:58:
ae:32:d1:88:d0:fa:24:6f:ef:ea:d4:e7:8e:2b:83:
38:5e:bc:6d:38:a9:f5:5e:04:e2:66:80:54:fd:5d:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:29:91:A9:B1:48:34:18:56:4D:84:BC:E5:10:7E:15:5C:2F:10
X509v3 Authority Key Identifier:
keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:5d:67:24:2c:2e:e4:e7:30:f2:b3:58:07:42:94:a7:7e:cb:
73:a0:59:ad:80:d4:42:ca:cc:09:c3:b7:3d:63:a1:75:de:76:
19:e5:5f:77:07:d5:15:76:d6:3a:e9:65:75:61:4e:09:ec:27:
74:25:96:6f:dc:4a:cb:17:c1:c4:23:13:8e:38:5e:6a:41:cf:
55:28:b1:dc:d6:2c:ff:2c:21:b9:a9:76:3b:cc:8a:2b:fd:b7:
3a:8b:81:90:07:b8:ba:3c:b9:a8:62:2b:fe:61:18:68:e5:d9:
c0:bb:2c:05:2b:f1:7c:d7:92:7e:da:bd:c1:16:e5:51:2b:b9:
a6:83:4b:00:50:19:4e:28:7d:1d:bc:ac:9a:d5:cb:cd:9a:06:
33:0b:62:0c:2e:33:6f:2a:f8:4e:1a:6c:f1:45:40:ed:b4:3f:
b9:99:8a:a6:6b:d8:ad:9c:e9:76:aa:ab:5d:73:dc:74:7d:e3:
7f:b4:5b:5b:84:3e:51:52:22:a6:19:a6:d5:b9:70:67:40:c7:
b2:85:5d:db:ce:2b:7b:d4:7f:b7:b1:5f:4f:36:a7:52:bf:94:
20:3f:2b:33:78:dd:fd:04:3f:d8:38:ef:20:4f:2f:30:07:22:
4d:78:0f:b6:cc:2d:d1:72:f5:b2:e8:8b:10:b9:ab:e7:40:76:
95:48:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:10 2025 by rpki-client