Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft
File: dd3NDNRiWKwZGsOQoskl2MA1qFc.mft (raw, json)
Hash identifier: en2YFtb18SyXpQBMd7vTJMFFrKAN9hiX+X+/JX1eumM=
Subject key identifier: 15:B7:E7:0B:E1:F7:E9:99:97:FD:D3:51:37:EA:AA:8D:3C:60:E5:61
Authority key identifier: 75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57
Certificate issuer: /CN=A917E04F/serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857
Certificate serial: 0E5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft
Manifest number: 0E55
Signing time: Fri 28 Mar 2025 17:50:36 +0000
Manifest this update: Fri 28 Mar 2025 17:50:36 +0000
Manifest next update: Fri 04 Apr 2025 17:50:36 +0000
Files and hashes: 1: dd3NDNRiWKwZGsOQoskl2MA1qFc.crl (hash: xi1RndOovC5iOtjOAmz0WtGUEy8O6lgBCcaD9maiGJk=)
2: 9C9389D4970311E9B7D3DE5AC4F9AE02.roa (hash: 0msFIFHq8Bi6Dy0orrBJDRYbRJioucs5FAZf2jEryJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3677 (0xe5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E04F
Validity
Not Before: Mar 28 17:50:36 2025 GMT
Not After : Apr 4 17:50:36 2025 GMT
Subject: CN=67e6e16c-8269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:60:62:d7:a5:e2:3f:e2:b1:08:bb:3c:7a:
57:b0:e6:6c:a7:3e:b8:54:55:4f:96:d0:fe:83:24:
83:38:86:ed:61:f9:c6:c2:e3:42:bf:77:f3:37:67:
19:42:b7:63:02:7f:dc:b5:7f:9e:ad:36:7f:06:68:
ce:bf:c3:2e:98:f1:42:84:c2:1a:34:87:0d:97:53:
f5:71:12:5c:9d:8a:a1:e0:e1:1a:e8:1f:12:66:96:
c8:51:76:5f:25:f2:6b:0b:6f:61:a5:bc:b3:db:50:
0b:a4:87:93:96:04:df:c6:0e:de:72:db:95:54:9a:
ab:06:5d:28:5e:20:20:65:c0:d2:6a:a9:63:9c:af:
47:08:f0:8f:7c:60:86:76:f0:fb:2f:2d:43:a0:02:
02:f5:68:e9:a6:de:79:d2:6d:6e:f4:9a:7a:15:59:
d0:93:4d:ac:05:77:7e:c7:55:89:11:04:a8:27:82:
03:34:0c:0f:26:44:58:77:fc:ce:a4:a6:16:10:94:
c8:18:e6:d6:0f:3d:c7:31:b5:b6:79:ad:e0:22:d3:
f2:6d:80:45:25:09:15:21:29:24:82:4e:41:a9:5d:
a0:52:36:07:88:bb:6c:c7:0d:28:54:c2:fa:94:60:
fd:c8:aa:64:b8:a9:86:30:a8:f5:69:5f:70:9f:c7:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B7:E7:0B:E1:F7:E9:99:97:FD:D3:51:37:EA:AA:8D:3C:60:E5:61
X509v3 Authority Key Identifier:
keyid:75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:bb:39:7f:36:d7:df:b1:4e:ce:e2:38:26:bc:98:d0:ab:4e:
23:5b:c0:eb:65:12:2d:1f:13:4b:90:41:85:97:1c:0c:a2:1c:
ac:27:4f:3c:29:d9:a0:c4:26:47:01:85:a6:ce:1a:f2:c8:6e:
0e:9d:f1:3a:6f:80:1a:3d:56:9f:8b:17:7b:a3:c1:cb:64:a0:
fb:e9:84:77:04:11:80:72:7b:17:cd:9e:8d:41:ac:2f:96:4f:
fd:00:af:27:73:eb:00:ba:90:fc:5b:30:fe:61:8c:cf:24:41:
fe:71:5b:2d:09:e4:56:7e:8d:2b:a8:86:83:73:f8:83:5c:cf:
cc:c1:87:ac:1c:8c:12:d4:c1:9f:60:86:1e:1b:95:79:67:c5:
74:54:3f:a0:4d:40:b4:fe:d7:7e:19:c0:fe:f1:8f:f7:e3:c6:
b9:93:b2:7f:cd:a7:f0:25:0c:92:c8:d4:d0:3a:4e:5c:7a:a9:
27:11:27:70:07:b3:a8:8b:9e:be:6a:66:ea:7b:73:4c:02:cc:
88:2c:74:da:35:f6:49:1f:c4:ab:9b:d2:38:32:07:85:e4:45:
2c:d3:f0:a9:08:ab:85:99:9e:82:f1:ee:1b:90:7c:7c:a0:ed:
2b:7a:17:ff:88:38:28:04:21:5d:f9:c4:48:19:1a:6b:c9:cb:
91:66:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:01:20 2025 by rpki-client