Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
File: 480mJgfLdDTJiY967Pbnw2o09pM.mft (raw, json)
Hash identifier: n7/x6OZO9/wJXtsxdynhoeU4gweDUyQfllYQG2cMGcI=
Subject key identifier: 42:EF:C3:00:CF:AE:DB:57:29:E1:50:F7:9A:9D:1D:2C:A9:2B:D5:CA
Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
Certificate issuer: /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Certificate serial: 0547
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
Manifest number: 0540
Signing time: Fri 28 Mar 2025 23:00:59 +0000
Manifest this update: Fri 28 Mar 2025 23:00:59 +0000
Manifest next update: Fri 04 Apr 2025 23:00:59 +0000
Files and hashes: 1: 480mJgfLdDTJiY967Pbnw2o09pM.crl (hash: bJlfMaUn94iwOggBivif/ke6Bj6ljaY9jLptq+ZOMNs=)
2: 0F106C42E9BF11EB9287F045C4F9AE02.roa (hash: RvNzl03JDVUp48sMZXLXZA1zzsN0lAMQGmHnXdeMUAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1351 (0x547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B33
Validity
Not Before: Mar 28 23:00:59 2025 GMT
Not After : Apr 4 23:00:59 2025 GMT
Subject: CN=67e72a2b-91fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:b9:3a:77:6f:12:81:44:bb:cc:37:88:1d:
5a:ad:f8:fa:98:3a:3f:8c:f8:f0:31:23:07:6d:e1:
51:d7:9b:c7:e8:84:f1:47:bd:51:77:61:73:5f:1b:
21:71:4d:46:8a:a3:53:16:62:14:a9:61:d8:c0:06:
fa:e3:95:09:03:a2:ce:e1:36:51:67:b0:92:90:65:
b9:da:65:46:e7:84:5d:f9:e1:22:bf:4d:7b:2c:c2:
36:d0:21:73:34:7e:65:41:9f:e8:fb:6e:72:a8:17:
ff:0d:f7:c2:eb:8c:82:92:24:d6:c1:77:11:9a:6d:
87:8d:10:1a:db:79:eb:7b:4f:26:df:0d:da:46:01:
bd:a4:c7:6e:8f:1f:a5:18:ee:e7:d9:23:58:05:e4:
5d:bf:5d:f4:19:cf:b7:ed:19:13:ee:06:ff:ad:10:
9e:4c:b7:ce:1a:20:4b:d5:85:76:3f:b5:9c:f3:be:
00:ed:60:be:4c:39:77:d2:f1:35:8b:62:a3:86:04:
03:2b:d7:ee:fc:61:33:8f:ac:17:35:22:21:af:43:
cd:7d:71:22:b2:88:a6:38:9c:12:36:bb:ad:74:44:
5d:c6:f2:17:74:55:d5:ae:2c:49:85:0b:68:88:6e:
24:97:16:88:a9:02:2d:6b:02:29:1c:c1:ae:a3:a6:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EF:C3:00:CF:AE:DB:57:29:E1:50:F7:9A:9D:1D:2C:A9:2B:D5:CA
X509v3 Authority Key Identifier:
keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:b6:dd:69:ef:6f:4b:b9:97:55:3a:af:3e:84:30:7b:be:ab:
b6:6f:88:60:19:da:12:bb:96:1a:d5:92:4f:dd:fa:e0:aa:f8:
32:8f:bd:78:48:ba:19:ff:a3:85:19:cd:36:f9:3e:9b:82:40:
b8:d6:cd:8e:b3:1d:28:c4:69:2c:2b:d0:58:c7:ba:1f:da:5b:
69:3e:cf:61:21:71:4e:b7:74:72:e8:16:f0:a6:ad:e4:8e:e7:
47:2b:a3:37:4c:94:0c:e9:cb:f5:3f:71:aa:61:50:6c:7c:a4:
6f:7e:94:99:6c:74:2d:f3:84:eb:0e:86:d0:84:53:c4:aa:19:
45:77:c0:4f:67:e9:3e:21:ce:5b:15:34:53:11:e4:5b:29:83:
ad:ff:6d:cb:c5:58:12:b8:e4:98:87:d5:99:fb:46:e7:ad:d4:
2e:7d:ba:78:c2:91:34:28:6e:67:43:d0:f0:55:4e:89:f5:b6:
b3:b6:a1:f4:7a:1a:5c:ef:18:5e:31:d2:90:d0:00:bc:86:23:
8b:92:65:6a:09:27:a2:ed:63:6f:53:f5:0e:f1:db:bf:6e:93:
8b:66:74:b3:54:d6:01:97:bb:ae:ef:18:23:11:41:5e:43:bb:
50:00:ba:59:ff:56:bd:cf:6d:7b:1d:3b:ed:de:7d:b9:67:a7:
d1:03:86:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:27 2025 by rpki-client