Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: OJLeQSjF3oHmjN8o1K8d2y0ZmxFaNmZo6haB24xkcs8=
Subject key identifier: 3C:09:22:10:01:77:6F:FE:E6:06:7D:4B:18:F1:B6:90:3F:78:47:83
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 17B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 1751
Signing time: Fri 28 Mar 2025 16:44:10 +0000
Manifest this update: Fri 28 Mar 2025 16:44:09 +0000
Manifest next update: Fri 04 Apr 2025 16:44:09 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: zRBgUIKG+WACULtXGjtaCNC3kfMeJUARpYqRtJu7xso=)
2: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: HwVvfhhBB2RSjFMDjowAziG6alcP2zuXw5LmUAX2gK8=)
3: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: 9OXjAAMYLAB5L3agld9axHr8PefYFycM5j/bsa1mWpA=)
4: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: rlaLzwVaLuL4ngSmjTuU0HKWW8Z5rb2WxCS8BXA4T2A=)
5: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: f4Nb70DFVEDtxBNhflIcmdj1De7oL7oNb+VI5wy+7A8=)
6: B04675FC959711EA9F290A33C4F9AE02.roa (hash: uYFRc83EBaJfN2GivSwIY06UqczGnSbs78PJfa9CAEA=)
7: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: jF4bRTQ1bhj8ogQbDSaGxO9z7G4aPx9aLlwCJEOU1qE=)
8: 696975861A3611EEA597E872C4F9AE02.roa (hash: B3kL8S/jc+3ePihG4qejPX9ur4Lx70UDT6EX1xakBa4=)
9: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: th7HEEEVK4zRCYHv7MzA93JGFKTxnTNbxPYDrvgQY58=)
10: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: dHpVockv1v0nsLKVjW4JjR0Rc9XC1Dp8MsDOOMq04/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6072 (0x17b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F
Validity
Not Before: Mar 28 16:44:09 2025 GMT
Not After : Apr 4 16:44:09 2025 GMT
Subject: CN=67e6d1da-3ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:5e:41:12:7b:de:4d:8f:5e:2a:5c:5f:7d:
22:44:02:7e:a8:b2:ee:fe:cd:b9:4a:5e:9d:b6:a7:
47:8c:b2:19:fd:55:24:08:e1:52:31:fc:70:c6:5e:
21:69:9d:07:0e:fa:d1:f0:c4:d9:69:95:24:58:0c:
bc:18:be:55:a7:66:ee:26:ca:f1:58:dd:96:f0:2f:
b1:75:ec:d1:99:6e:d7:67:1e:38:c1:29:90:14:ed:
0a:d2:e1:d1:1d:71:7a:c2:a9:a8:3b:73:3a:42:e3:
3c:f3:40:e8:83:08:50:75:bb:88:38:99:6f:7f:27:
af:49:30:8d:61:2d:b8:0a:ea:3e:5f:7a:9d:a6:d0:
22:66:9a:fd:15:0a:45:1a:43:fa:77:9d:5d:90:ec:
52:39:10:8e:8b:cc:ba:d6:ba:bb:f5:8b:a8:78:de:
81:2e:a8:85:3b:e0:93:0d:93:52:d5:22:81:5a:29:
0e:ce:39:1c:63:8d:b0:4b:72:3c:31:a6:da:b4:45:
d4:17:ab:23:a3:00:58:2a:a4:7d:28:33:d7:48:50:
c6:2a:68:1e:01:36:42:01:c9:7c:02:38:f6:6d:0e:
a6:5e:6a:27:58:00:72:88:97:91:8e:81:de:3d:50:
f3:c3:46:91:56:e6:67:b2:fc:32:75:9f:d6:37:23:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:09:22:10:01:77:6F:FE:E6:06:7D:4B:18:F1:B6:90:3F:78:47:83
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:01:69:47:a4:72:51:69:aa:bb:fd:46:83:f7:95:03:b0:04:
f8:32:a4:62:ce:ee:10:b9:3d:40:6d:03:20:1f:23:78:a3:a7:
ac:ee:92:62:81:79:d1:d7:29:e2:52:08:20:77:c3:4c:23:7b:
a1:4d:ff:ca:67:13:e4:44:02:76:93:40:c4:20:ad:f3:eb:43:
a9:39:9c:ee:4c:7d:2e:4a:60:d0:66:72:63:fa:d3:76:64:e0:
74:22:08:08:4b:20:f5:c4:c3:ea:84:2e:a0:a9:78:b4:7e:52:
91:80:b1:ae:bc:71:39:ab:36:8a:65:d0:74:cd:a4:b1:d9:13:
bf:22:67:bf:4f:76:99:c4:e5:cd:e3:f4:17:df:b4:07:4d:24:
22:3d:e3:54:16:95:01:cc:e0:f6:12:4d:db:7f:21:c8:47:a1:
e9:4b:de:1d:24:4a:62:66:f6:4e:6b:69:03:b8:c0:1f:d8:a9:
c2:cb:fa:39:e1:de:b6:96:8c:ab:98:7a:70:ac:00:7b:41:f7:
bd:43:a3:ef:3b:ca:53:56:06:95:e2:1c:a7:c3:4b:28:6c:68:
03:37:da:c1:1d:c6:83:41:05:17:d1:c7:d7:27:80:0f:86:a5:
ae:9c:d0:42:19:32:12:9e:8f:bf:e6:64:8e:af:86:66:b2:a5:
58:dc:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:51 2025 by rpki-client