Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
File: 0aHv0iQTWusJg56ovbjNxZnOZX8.mft (raw, json)
Hash identifier: X8dVNjWLcE2Q14goCBcOXI4DpPXp3+RXHbpqJBfVTts=
Subject key identifier: 7E:58:6A:44:48:E0:59:34:67:84:A2:56:98:74:29:D2:97:70:0C:87
Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
Certificate issuer: /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
Certificate serial: 046B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
Manifest number: 0467
Signing time: Fri 28 Mar 2025 16:39:52 +0000
Manifest this update: Fri 28 Mar 2025 16:39:51 +0000
Manifest next update: Fri 04 Apr 2025 16:39:51 +0000
Files and hashes: 1: 0aHv0iQTWusJg56ovbjNxZnOZX8.crl (hash: bCpOPBtOoCehXk0FlAvDmJexLbPVAHtWkydw8ghMFI0=)
2: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (hash: pu6dJPh07UcYd+mIMy5+Y6mbrncfU/s+tKgupfIo1HM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1131 (0x46b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9FC
Validity
Not Before: Mar 28 16:39:51 2025 GMT
Not After : Apr 4 16:39:51 2025 GMT
Subject: CN=67e6d0d8-4820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:a7:4c:b3:4b:8f:e0:54:53:b9:a7:af:d3:
f0:5c:ae:33:2a:81:f4:24:1c:74:6a:67:27:29:2d:
e0:be:dc:9e:5c:37:d5:13:bb:b1:ee:68:63:66:28:
be:ea:a3:68:5e:89:d3:0b:36:8e:c7:23:76:9c:b7:
97:87:70:33:da:0b:d0:35:a0:a5:c5:b9:09:ee:fb:
13:de:15:38:76:c9:77:05:b5:ae:80:44:45:13:9f:
2f:92:c5:e7:aa:fd:10:6b:d9:12:a7:c1:e1:43:e7:
63:5a:f9:1c:52:ad:11:98:a1:fb:5d:88:75:0f:c9:
18:d2:91:1a:7d:cc:22:1e:fa:6f:bd:19:0a:c7:1c:
6e:52:1a:c4:91:b0:b1:d8:0c:b8:9e:d0:1a:f4:ec:
da:26:54:58:cf:68:3b:6f:57:0e:e2:77:c7:07:7c:
98:ca:38:60:88:92:0f:e5:2a:df:15:94:97:b7:b0:
19:ce:cc:a4:a4:a9:d9:ef:18:41:2f:25:cf:4b:5e:
e9:1d:69:61:4e:be:02:43:36:dc:8b:5d:d1:83:d4:
19:67:73:29:8a:b1:26:63:bb:5f:2e:cd:3f:84:18:
8c:c5:5d:5b:f4:68:1c:89:b8:18:07:9e:17:4c:0d:
ce:f7:89:1c:18:2d:75:07:80:0b:37:c0:02:33:f1:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:58:6A:44:48:E0:59:34:67:84:A2:56:98:74:29:D2:97:70:0C:87
X509v3 Authority Key Identifier:
keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:79:34:82:be:b3:3f:73:fa:60:5f:b8:0d:a8:7a:d1:60:58:
9a:57:55:77:29:98:f6:17:dd:56:9b:5a:81:f4:b4:95:91:24:
5d:b9:06:ba:f9:57:b4:ec:a5:4c:b3:96:bc:32:44:50:d8:4d:
15:d8:69:cb:85:54:5d:41:31:77:46:58:97:d3:b2:51:4e:2b:
bd:45:80:ce:39:23:c8:43:5b:26:59:26:3f:7e:12:6e:64:a5:
9a:34:3a:d3:f5:4e:17:ba:a5:0c:b4:40:4c:bd:a1:37:27:a9:
72:5d:d0:e4:91:71:47:22:f9:87:51:20:b2:9f:83:7b:20:c1:
01:1a:59:b2:51:ae:01:83:52:ef:3b:fc:9b:f0:e0:f1:25:56:
04:6a:f8:fb:c4:bd:68:4b:84:81:c0:f1:8e:02:d8:f5:c7:25:
8f:4f:c3:70:92:c5:51:d6:92:58:2f:b1:cb:5a:f1:b4:b2:b8:
00:02:a5:42:df:83:4b:f7:58:42:d4:ee:ff:a7:c7:fe:3c:d9:
4d:25:76:93:e1:1e:b9:7b:ed:2f:bb:27:95:13:e7:f0:16:7a:
75:13:ba:86:87:2a:a4:32:ca:35:e5:5a:52:7b:79:35:04:b6:
48:94:ff:e3:fc:b2:a8:89:df:3b:38:25:ea:f9:b8:07:04:18:
51:e4:da:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:46:05 2025 by rpki-client