
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier: beIHdfkRUBr9/NX7aU342OHO3jNifvdD1yFx3v+2tLI=
Subject key identifier: A2:EB:3B:3D:A9:A1:99:0D:42:93:BD:B4:38:BD:1C:0B:6F:0D:E2:E7
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial: 0527
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number: 0514
Signing time: Fri 28 Mar 2025 23:55:23 +0000
Manifest this update: Fri 28 Mar 2025 23:55:23 +0000
Manifest next update: Fri 04 Apr 2025 23:55:23 +0000
Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: vTG0GNiej4k7TKkQXXxmaI8rIit9gwQzgDY+KYEXSOo=)
2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 9EHn/O7TWbIzxUUf7sMxruBfENB+nlmVCyCtMi2XPLc=)
3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: lPjfdwsG9MxSbp4hrYgWXk0XAJ3QHf0VRvCcBo4gZRI=)
4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: QPyPuuXiEoxMRcuvSgY9i0fqsHr66Z613AzBKY7x8bA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1319 (0x527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3
Validity
Not Before: Mar 28 23:55:23 2025 GMT
Not After : Apr 4 23:55:23 2025 GMT
Subject: CN=67e736eb-3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:c6:93:99:4c:d5:54:b9:ee:3a:b5:34:bc:
cf:02:f0:ed:a7:dd:78:b7:8a:52:41:77:ea:82:b8:
6c:50:90:04:90:f8:15:e2:6c:3b:1e:6d:47:5e:a1:
3b:da:4a:3a:86:03:91:20:dc:33:4d:17:8a:cd:e4:
3c:87:79:25:12:97:64:d6:5e:fb:4e:32:36:c2:51:
e2:b5:eb:4b:c3:79:51:2f:c1:d4:43:f1:ca:ab:f0:
92:8c:5b:50:e9:73:0f:73:6b:ee:f0:3b:18:2b:42:
7c:c7:94:24:92:15:db:10:8b:e3:a2:69:57:28:3e:
bb:30:be:29:46:23:c6:eb:40:dc:f8:a7:44:c4:e2:
77:7c:f5:b3:57:5c:19:ef:90:d5:81:4f:73:74:2f:
d8:ed:bc:d7:a2:5e:3d:9a:9e:50:49:06:4d:61:ff:
0b:21:a6:e5:d9:d0:f5:c9:ba:65:77:af:c6:f8:b2:
50:2b:80:01:d5:31:9d:5f:06:a4:d7:8c:a0:67:06:
59:45:79:07:8a:4e:a3:01:c2:a7:e6:25:17:90:3d:
9a:56:18:2c:3f:2e:93:9e:7a:b3:d1:be:d1:27:5b:
40:64:07:41:75:b9:f5:39:c3:ee:d4:de:84:de:ab:
a4:77:fe:f2:63:56:f7:b6:ed:b3:ab:e8:35:3a:af:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:3B:3D:A9:A1:99:0D:42:93:BD:B4:38:BD:1C:0B:6F:0D:E2:E7
X509v3 Authority Key Identifier:
keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:4d:3e:ec:37:07:78:75:9c:e3:e1:85:67:0f:93:cd:91:a8:
fc:f8:91:49:fe:b4:bf:35:3f:75:a7:06:95:f9:0c:b5:0f:c1:
cd:f4:7e:9f:2f:ed:29:20:1e:d4:32:90:7e:cf:18:79:f1:1e:
b1:5f:98:3f:ff:e5:02:b1:0b:0c:09:86:25:32:15:47:76:64:
9e:a6:e5:cf:89:e9:12:9e:ae:e0:08:5f:76:5d:9b:48:be:d6:
d8:cb:fa:18:00:d0:72:af:7d:72:aa:e7:9e:05:7d:96:ae:52:
bc:ff:04:6e:a9:aa:d6:0e:3a:49:aa:c6:af:58:e4:81:92:5e:
ff:a0:c3:e3:63:46:4f:6f:f6:40:ce:64:8f:7c:ce:2d:35:b5:
55:9a:d9:39:ca:e6:25:f7:12:33:28:e2:8d:86:8c:a4:92:16:
40:27:54:da:86:e0:d6:fd:54:05:b0:c5:3f:6c:a9:62:74:04:
04:58:10:f3:ca:78:17:d9:8d:6d:89:bc:d2:6a:e1:f8:90:c1:
a9:82:eb:50:2b:a4:c9:2f:0b:db:07:a5:f2:2a:53:e0:aa:6c:
14:f4:d1:b0:90:56:d8:53:04:a7:6f:0f:30:2e:06:80:72:47:
8c:b2:df:2e:70:a3:82:bd:81:d9:f0:78:1d:77:5b:cf:1e:d4:
aa:af:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:38 2025 by rpki-client