Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
File: rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json)
Hash identifier: /1FCZkflUBrBxo0hMM4PJIIJcx2iuNvPPinSrKduvpM=
Subject key identifier: AE:07:77:48:EC:B1:E2:EF:96:99:05:D9:B1:15:23:2D:9B:4D:BB:FD
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial: 071A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
Manifest number: 0705
Signing time: Fri 28 Mar 2025 22:13:50 +0000
Manifest this update: Fri 28 Mar 2025 22:13:50 +0000
Manifest next update: Fri 04 Apr 2025 22:13:50 +0000
Files and hashes: 1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: 4WmlqbqRk0D4tH5GVU93X/yijMVoulOGP3A1RY4/yyg=)
2: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: 2JXMW+fr45VK5sWZ5vPmZ3HpKXF1OtYxpAwUvK0JoOo=)
3: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: 49sLLzSLtNmidSVGS5udGErAMHHN/OeLE93kClICECY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C23C
Validity
Not Before: Mar 28 22:13:50 2025 GMT
Not After : Apr 4 22:13:50 2025 GMT
Subject: CN=67e71f1e-3d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:81:9f:8b:ca:37:b9:a9:35:e7:72:72:79:
6b:71:b1:49:7d:01:0d:97:7b:e4:a1:3a:4d:7d:02:
b0:e1:c1:32:14:97:2f:67:d3:32:f2:bb:bb:d2:53:
5e:5f:04:99:b9:52:4d:15:80:80:5a:66:e0:c6:f4:
b2:04:d0:18:5c:c3:ca:95:9e:dd:a5:29:88:6b:8a:
46:18:f5:08:e5:98:b3:0a:dc:5b:25:09:cb:c2:f7:
47:57:47:07:50:42:c4:86:2f:59:e1:ad:70:5c:f8:
0b:a0:77:4a:a4:aa:bf:ad:93:ef:0b:be:7a:ce:aa:
73:02:29:fd:20:87:90:85:7b:ce:91:b5:22:ae:00:
64:0c:92:8f:1a:8f:d7:c0:54:b5:58:76:da:ea:39:
35:5e:31:05:5f:a3:61:fc:68:81:3a:b1:a5:0b:86:
2b:09:ac:1c:eb:4f:fc:56:44:d9:e9:ef:12:56:9a:
4f:74:0d:85:a8:de:28:42:1f:8b:21:1d:05:b9:23:
a3:1a:5e:c9:70:17:18:23:90:a4:93:4d:85:78:75:
c5:33:55:a3:4a:43:72:9f:3c:ed:71:d1:78:75:98:
88:68:5d:69:70:7d:ee:5b:44:0b:f1:2a:5e:62:63:
bf:80:56:90:04:06:6f:ab:f6:d3:f8:ee:d2:50:52:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:07:77:48:EC:B1:E2:EF:96:99:05:D9:B1:15:23:2D:9B:4D:BB:FD
X509v3 Authority Key Identifier:
keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:e7:85:5b:38:4e:55:81:af:22:53:27:87:ca:47:c0:8d:
c1:08:72:3c:51:27:15:f5:36:7d:e9:2b:e3:d3:90:c2:45:cc:
b5:05:97:70:ab:b8:d0:28:a7:bb:0f:60:26:27:4f:e3:81:bc:
6b:39:42:2e:61:6f:02:82:ba:0d:13:55:8f:89:4e:ee:74:b0:
c6:e2:97:d5:05:a9:7b:71:01:8d:d6:d5:a9:bc:f9:f0:77:12:
e2:ce:95:07:fc:6f:12:b0:1b:ed:70:1a:ad:61:0f:52:f1:69:
cd:cf:23:07:f1:a8:0c:bf:dd:ae:f3:0d:23:f3:40:a1:20:34:
3e:01:c2:87:ed:e5:1f:d9:e7:68:1f:b8:a3:4f:c5:f7:d7:d3:
ea:a7:64:2e:53:09:99:66:51:17:3a:01:12:aa:bd:0c:31:b4:
5d:f7:a3:ab:c1:96:be:a1:98:cb:af:4f:38:5e:a0:56:45:c9:
39:56:0e:34:a5:7c:73:c9:df:71:67:fc:84:92:29:2f:b3:e8:
62:21:3f:91:e6:2e:2f:20:72:53:88:2f:9d:94:06:14:62:4c:
f6:f0:7a:5b:b8:31:18:c0:6e:64:bf:a9:88:30:fb:c3:38:26:
f5:e4:91:37:84:f9:2e:1f:dd:a6:be:81:12:32:c2:54:ef:21:
a3:be:5c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:19:49 2025 by rpki-client