Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft
File: k_rViPOepYxliN36F70Nb856YGo.mft (raw, json)
Hash identifier: 1MySJ2uOvdccHl8l6mgbuterGwHE7aDJGoiS2MK2cOU=
Subject key identifier: BB:1E:C1:24:91:61:17:B8:CA:72:6C:45:D1:0B:07:EC:16:8C:F7:FB
Authority key identifier: 93:FA:D5:88:F3:9E:A5:8C:65:88:DD:FA:17:BD:0D:6F:CE:7A:60:6A
Certificate issuer: /CN=A917F5F0/serialNumber=93FAD588F39EA58C6588DDFA17BD0D6FCE7A606A
Certificate serial: 07ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft
Manifest number: 07E8
Signing time: Fri 28 Mar 2025 21:12:33 +0000
Manifest this update: Fri 28 Mar 2025 21:12:32 +0000
Manifest next update: Fri 04 Apr 2025 21:12:32 +0000
Files and hashes: 1: k_rViPOepYxliN36F70Nb856YGo.crl (hash: qLc/zQ1tM4E9XHamOM5CPIy/Wor8/CVTCI879CWgEkk=)
2: 4C89E536DC6311EA8C998087C4F9AE02.roa (hash: YKIQMLZ3tLnmlGKnXmNNQEY+DpZ472mwzMIx+1V0BW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F5F0
Validity
Not Before: Mar 28 21:12:32 2025 GMT
Not After : Apr 4 21:12:32 2025 GMT
Subject: CN=67e710c1-234b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:a4:ba:2f:e8:2d:a3:86:5c:a5:28:d8:08:
5a:e6:90:95:5a:70:1f:20:e5:09:1c:20:dd:b6:fc:
45:4b:9a:57:31:2d:5a:db:6a:f3:76:f5:16:db:d9:
9d:60:43:72:03:cc:72:29:d5:c9:c3:be:7d:d9:d2:
67:bf:c5:29:8e:78:ab:09:4c:3c:57:cb:ee:5c:84:
7b:9c:95:35:07:7e:57:56:08:6d:11:39:85:d0:9a:
59:99:6f:19:2c:de:6b:b1:b1:5b:cb:00:ca:64:5d:
62:f4:69:d6:1f:3a:b7:00:e1:ae:bb:59:70:d8:6a:
e6:7d:9f:84:69:86:af:69:79:f4:6c:d6:60:18:f9:
9d:af:78:a3:88:ea:a4:3b:3d:f0:e4:9b:43:35:be:
78:5f:77:7c:0a:6c:c2:fc:99:06:b4:40:7d:5e:4c:
20:9c:a1:ee:1b:f5:4e:41:7a:73:87:c4:6f:d9:73:
c3:19:3c:4f:4c:79:94:dd:fa:08:64:67:85:64:1c:
62:23:df:09:f3:11:94:dc:4a:fc:cf:ff:70:9b:8e:
39:c9:d1:e8:d0:03:1a:2c:64:64:a8:a9:aa:65:7a:
cf:d2:e2:28:6a:80:13:da:28:12:3b:5a:78:3c:23:
4e:d7:db:e1:d5:e7:c7:b1:4c:c5:21:a0:fc:3f:73:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1E:C1:24:91:61:17:B8:CA:72:6C:45:D1:0B:07:EC:16:8C:F7:FB
X509v3 Authority Key Identifier:
keyid:93:FA:D5:88:F3:9E:A5:8C:65:88:DD:FA:17:BD:0D:6F:CE:7A:60:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:43:31:b8:56:21:58:0e:e8:66:2c:49:53:05:03:c4:b9:7c:
52:2e:e6:71:13:c0:9d:eb:30:39:a7:eb:69:8b:7c:68:86:fb:
17:ea:51:f5:d5:5d:13:aa:88:d7:78:61:06:3a:e5:e9:fe:e0:
98:13:23:25:41:4a:46:c8:a8:01:32:cb:96:ab:13:9b:43:88:
10:94:0f:ee:e1:be:9d:51:83:2a:cb:4d:31:26:b8:15:c1:4d:
ee:e3:cf:53:bc:28:59:fd:ee:33:2a:7c:69:7b:05:98:7c:de:
23:02:d3:c4:52:f1:7b:86:03:96:1e:74:24:f1:d4:de:99:0b:
11:b9:1b:9f:83:59:a1:f7:63:ba:d2:8a:b8:91:20:77:f2:52:
20:27:47:e1:d9:18:e4:e1:98:3f:1f:e6:64:17:a5:2d:bb:21:
98:93:db:ef:72:d9:ea:4d:46:27:87:45:79:be:fb:cd:2a:61:
43:a3:c1:f0:42:3a:80:19:b1:1a:e2:1d:9e:cd:88:8c:ed:07:
91:0a:29:b3:e2:2b:98:c1:d1:ca:b5:74:b6:86:b7:21:a1:17:
e6:82:6d:c4:fe:56:f7:28:74:e0:c5:cb:14:d7:29:a4:5e:a1:
02:84:bd:7c:f2:a2:0c:07:5b:09:48:4f:99:21:7b:11:f7:34:
f2:fd:11:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:02 2025 by rpki-client