Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json)
Hash identifier: 5lNJPJhGTDjY+RxqIOIE89MdC42Ii8sGXYnxGZKKNrs=
Subject key identifier: BE:A4:A4:78:F4:AB:9D:CA:05:9A:4D:3C:3D:8A:B0:E9:18:4B:7B:22
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial: 2350
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
Manifest number: 2325
Signing time: Fri 28 Mar 2025 15:55:28 +0000
Manifest this update: Fri 28 Mar 2025 15:55:28 +0000
Manifest next update: Fri 04 Apr 2025 15:55:28 +0000
Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: n7cSrtoOjaSAEb97lZNX/BAz8ie8nGqVF9C4Nkg1HFE=)
2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: +r4aMQM4Dy6HeFZGJPAMgBCQMQ+aLaqXV/nCCrcK1AY=)
3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: mpzCA23Ss/c1ac0bYDvVsjbQgPjS/ZvKyhpNDl7GtoA=)
4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: UV6QlTlLGBohRxKOc8jq6Tpr+8pOkhGlZ7tgyuvuvuc=)
5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: l+TYh6v3YY1hm+93/643Dl+hMCHqLK38fQC5FpyC0mY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9040 (0x2350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FA93
Validity
Not Before: Mar 28 15:55:28 2025 GMT
Not After : Apr 4 15:55:28 2025 GMT
Subject: CN=67e6c670-9123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:0c:5b:77:6b:a2:59:48:fd:3b:34:3a:68:
ea:1b:ae:9c:d9:45:63:ad:34:50:56:a3:3d:84:71:
1f:75:b0:0c:95:07:ef:d0:22:26:74:bd:3a:b7:5f:
85:f7:4a:3d:46:e1:4d:2d:b9:e6:b7:ee:59:d2:ae:
07:f8:76:b0:de:79:4f:eb:0e:20:98:a4:f5:d6:bc:
33:c8:45:eb:30:79:15:86:80:ad:0d:8f:01:70:77:
f6:d1:f6:a8:69:65:26:a8:11:9e:4b:36:07:35:8f:
87:57:8a:0f:fb:fe:c9:57:e7:fe:38:d0:88:f8:92:
b3:48:e9:2f:ca:66:2e:16:72:04:62:30:70:a0:9f:
3f:67:f3:bc:67:05:7c:7b:45:d6:19:ef:23:29:5e:
94:42:09:4a:5e:ee:e9:e7:f7:31:9c:23:cf:5a:7d:
a9:64:27:1f:67:3b:46:e3:a7:19:be:ba:03:13:2a:
e7:59:45:3a:c8:ec:b8:69:68:37:4e:35:f3:70:df:
70:b1:58:e1:5a:f5:f8:45:70:ec:8e:da:b3:b7:0f:
c1:ef:12:be:cd:7c:06:fd:70:04:66:f5:57:7c:98:
0a:02:f0:72:fc:ac:2a:ed:f4:31:80:46:48:0f:33:
0a:51:6c:23:fe:5f:5c:ca:e7:69:23:b6:77:4f:dc:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A4:A4:78:F4:AB:9D:CA:05:9A:4D:3C:3D:8A:B0:E9:18:4B:7B:22
X509v3 Authority Key Identifier:
keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:14:e4:8c:9b:7d:97:d9:f3:0c:44:99:60:62:54:54:4a:e9:
e4:03:a1:45:b2:bd:c4:a2:d5:d1:da:43:19:e2:0c:73:92:54:
f7:ab:db:79:7c:f9:87:bb:97:09:f5:f5:f1:57:f3:df:fa:63:
d4:e7:a2:02:6f:95:a2:e2:aa:2b:1d:e5:9d:5c:a3:52:3a:c8:
23:02:dc:36:ed:d0:48:85:9e:4d:60:3e:93:1d:74:9a:1e:a7:
37:0e:b4:cf:09:8b:a6:36:9d:94:a8:ce:dc:52:6e:d5:db:6a:
18:e5:b5:08:2b:e2:e8:4e:13:42:4a:af:a5:3c:1a:22:8b:7f:
99:29:08:c8:1b:0f:a3:b5:fa:0f:47:bd:a3:28:66:6c:b7:28:
f4:44:b7:f4:f8:37:8d:ae:78:94:38:49:8a:7b:80:4d:26:27:
0b:13:da:ea:63:5c:72:86:33:0a:1d:9b:28:bf:a3:4b:ff:fe:
5b:8f:93:25:46:a4:d2:0c:9b:69:23:d0:54:63:b0:ba:ca:5c:
8e:8b:ca:c5:f2:b7:37:a5:8a:9c:cd:79:9c:1b:50:31:49:44:
29:e9:17:be:3b:f6:fc:1a:22:95:d9:12:a0:45:01:db:ce:b8:
0e:f4:22:41:e7:b9:6a:22:2d:39:eb:5c:d4:27:30:c5:1e:90:
1e:f7:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:35:12 2025 by rpki-client