Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier: lqPdS761LOWMnDveMEidIIsft1MBLBwtaaxMB+OyVTM=
Subject key identifier: B9:6F:5A:C7:8E:1A:6A:89:7A:46:3C:A1:49:6A:1C:C4:1E:51:64:1E
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number: C1
Signing time: Sat 29 Mar 2025 05:16:07 +0000
Manifest this update: Sat 29 Mar 2025 05:16:07 +0000
Manifest next update: Sat 05 Apr 2025 05:16:07 +0000
Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: v2MXmSn/g83gKO9PdfU7YIgjjJpO6bdBfVVd4qY0jiA=)
2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: nAAaBPNOT83reooBTbRysc5FUHQ0lj/e8r5J8CDIx/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0BB
Validity
Not Before: Mar 29 05:16:07 2025 GMT
Not After : Apr 5 05:16:07 2025 GMT
Subject: CN=67e78217-d2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:58:be:4e:40:4b:67:89:0b:99:a2:97:88:ec:
40:a2:0c:3c:5d:f5:d0:a2:53:6b:c7:79:05:d6:2a:
74:54:67:e6:9c:50:f9:73:91:b6:c5:54:4b:52:58:
57:3a:53:5e:6a:e0:68:4c:50:3b:7c:59:b3:78:9d:
02:fc:ad:e9:69:01:46:19:4e:d5:a6:27:d4:87:d2:
5c:52:1d:94:6e:eb:af:2f:d6:0a:f1:13:13:d8:cc:
4f:fc:cb:2b:e7:23:44:95:d2:c9:eb:25:16:43:29:
44:b1:52:bf:c1:d1:eb:19:2b:d6:d7:5e:ed:34:4f:
8b:de:52:dd:57:1b:5e:08:7e:8d:30:55:21:d2:86:
67:89:f3:59:80:c1:7b:44:e1:da:9a:12:fd:fc:a6:
fe:16:fc:c6:fb:03:92:dd:17:0e:16:b0:dc:0f:17:
7c:2f:15:d3:83:b3:85:e4:02:62:5f:6e:5c:16:47:
26:3f:4f:fc:7f:0c:ac:fb:8a:df:79:55:ca:58:d8:
aa:16:30:ab:18:9e:23:41:c1:16:a1:7b:dc:54:d5:
ee:a1:b8:c6:37:0c:47:2e:d6:29:79:78:ec:1e:10:
29:ae:38:05:07:05:07:cb:8c:5d:80:e9:39:f8:4c:
54:87:cc:c7:ad:df:91:21:07:f5:da:6e:96:72:92:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6F:5A:C7:8E:1A:6A:89:7A:46:3C:A1:49:6A:1C:C4:1E:51:64:1E
X509v3 Authority Key Identifier:
keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:8a:5d:14:dc:13:cc:4b:fa:7c:b8:f4:23:8e:6b:62:dd:46:
69:b0:07:24:e3:a4:f1:7e:ed:73:cf:58:53:44:e5:06:e2:d2:
d3:7e:91:9d:20:32:f8:bf:01:3a:08:4b:c9:76:e0:4b:ee:9c:
92:ea:bc:dc:08:f7:b7:85:03:c4:51:0c:a5:ee:01:ea:9b:bd:
c3:74:52:fa:1a:77:d8:4d:a4:06:19:9c:21:41:d8:f3:c4:31:
01:8e:26:d6:12:5c:82:df:20:4c:48:cb:c6:32:73:73:8c:05:
1e:8e:b5:ca:83:27:36:48:2c:a8:26:94:9b:6d:2e:04:63:7c:
30:55:8b:ad:05:53:04:2f:7b:6c:13:8e:d2:2f:0a:07:c0:fc:
92:87:c2:70:b5:b4:98:3a:30:da:5b:01:03:c7:08:b8:65:ed:
5a:c6:b1:9d:b3:fc:24:09:15:b4:b8:37:96:ee:f0:f0:fb:25:
fa:80:66:67:52:c2:e1:52:2f:d2:77:8f:73:d2:0f:83:c3:54:
2e:5a:ae:95:92:14:56:49:bd:5d:1c:bb:2b:b5:4c:0e:94:18:
97:e5:73:70:51:47:83:ae:09:e9:70:ad:77:c5:84:81:12:74:
db:be:a9:10:20:e5:35:78:1e:b2:ef:95:d8:ec:0c:13:85:d7:
75:2e:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:24 2025 by rpki-client