Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
File: sLGl1VkrzlyB63JtRkDKlVEEzpM.mft (raw, json)
Hash identifier: VUsVStM0HquGGfTCAIlVxJjZUJaGaM84Kq5q7/KIMNg=
Subject key identifier: 9E:07:20:8F:30:A7:44:45:2C:E7:EA:EF:C4:C1:96:5D:3D:AD:65:E5
Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
Certificate issuer: /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
Certificate serial: 0AF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
Manifest number: 0AE4
Signing time: Fri 28 Mar 2025 19:36:36 +0000
Manifest this update: Fri 28 Mar 2025 19:36:35 +0000
Manifest next update: Fri 04 Apr 2025 19:36:35 +0000
Files and hashes: 1: sLGl1VkrzlyB63JtRkDKlVEEzpM.crl (hash: xTMg8xjGygUHyj7eYzF75wpgFJyYtwwAXonsSD6PfvM=)
2: E91D4C42E19011EC8E1ECA75C4F9AE02.roa (hash: rXbrZfof91yb/Hm6bgo20zlM+XGL7dx/BaljKZMiBHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2800 (0xaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181259
Validity
Not Before: Mar 28 19:36:35 2025 GMT
Not After : Apr 4 19:36:35 2025 GMT
Subject: CN=67e6fa44-72c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:a3:3b:c4:57:72:a7:59:8f:57:81:d8:c6:
70:58:61:dc:c5:b7:54:67:3e:a6:da:95:51:6b:b6:
87:8a:91:fb:89:4c:57:d5:71:d4:36:53:74:24:46:
f4:dc:44:9b:52:1f:87:66:cd:d9:c8:61:d5:38:6b:
90:5d:f7:9f:92:76:aa:9e:69:16:ef:98:dc:26:d2:
b2:c4:e1:9e:a9:d9:4d:76:b8:be:67:ca:00:1c:18:
67:94:6d:2c:78:71:10:58:7d:1e:d0:2f:d7:a9:d9:
23:2a:2f:d0:95:36:92:09:de:8c:f9:5c:bc:fd:04:
1b:ac:1a:a2:ab:46:7a:22:6d:6a:7a:0d:20:19:a0:
e1:da:e7:fc:12:fc:33:ce:90:6a:e4:7b:8b:5c:0a:
1b:eb:c5:ca:5f:10:f8:5e:6f:02:ac:53:2a:4d:69:
61:c2:e4:5a:af:18:39:3e:29:62:98:17:95:c1:f5:
8b:dd:74:e2:2c:37:70:ba:76:de:c7:40:ff:6d:dc:
d6:84:ed:72:f0:46:eb:98:c0:67:c6:02:88:5b:39:
91:97:87:be:e9:8b:d7:e5:96:95:fe:0a:aa:9e:fd:
7f:a4:59:06:14:96:ab:59:1f:63:5e:97:d3:6c:18:
21:75:bd:70:97:0f:ee:a5:ee:2e:12:8f:04:ca:54:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:20:8F:30:A7:44:45:2C:E7:EA:EF:C4:C1:96:5D:3D:AD:65:E5
X509v3 Authority Key Identifier:
keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:33:05:10:c5:88:c8:9a:01:3d:91:d7:29:23:97:8d:ec:3c:
90:02:62:46:27:04:bf:aa:cd:a5:1c:34:f5:c7:93:67:7e:e4:
f3:63:84:df:a8:23:aa:79:d0:8f:10:f5:4e:e4:b5:e6:96:39:
43:bb:3f:b0:41:8f:e7:e4:86:33:72:4d:4d:d3:37:b8:f5:b7:
ed:a7:bc:f6:aa:47:94:02:8e:88:0b:cc:15:b7:79:28:7a:79:
56:77:79:22:a8:9a:d1:b1:fd:49:f5:02:0e:f0:68:ac:99:b3:
df:88:c2:f1:91:f0:4d:12:90:54:02:71:3c:bd:c1:43:11:20:
a5:e0:9d:dd:16:c4:04:74:62:3d:45:8e:73:27:f9:7c:82:c9:
f7:ff:8f:8d:ea:01:8d:94:96:ad:0e:60:b8:0d:e7:d6:e9:c9:
27:f4:17:20:f1:29:70:87:9f:e5:de:f1:b3:84:e2:03:7f:9c:
18:fc:62:ce:51:53:5f:91:56:65:0d:0e:6e:fc:9f:c3:1d:16:
56:65:4c:c3:16:2f:e7:21:f4:fb:58:fa:96:ed:fc:b8:49:16:
ba:d5:65:2d:c1:6d:7b:4a:d5:28:76:71:ed:3a:07:e7:4c:ad:
5f:82:60:a9:7b:dd:96:44:91:5e:86:15:84:fa:35:74:f0:10:
fb:35:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:22:59 2025 by rpki-client