Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json)
Hash identifier: BpSbNHILjFhsNDQYWmQtA64FMUwOdXqcvT5YysNHIko=
Subject key identifier: 20:65:B9:10:59:81:AD:85:B0:7A:D9:42:32:F5:C6:72:C3:25:C1:34
Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0
Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0
Certificate serial: 0C2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
Manifest number: 0C22
Signing time: Fri 28 Mar 2025 18:39:17 +0000
Manifest this update: Fri 28 Mar 2025 18:39:17 +0000
Manifest next update: Fri 04 Apr 2025 18:39:17 +0000
Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: LvgJQMpGesKaxraF81Y5ZoExqMcOH3pu3a7xJWpx+uA=)
2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: rjjlCBXic9PjXjyPWM+A+lhdUtqC6LPHHyzyg5jp9Pc=)
3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: tUTz8eY+t4ddLMBAcdiLEQQ0A3k/C+6KL0Lp4wdaHaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3118 (0xc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91856C4
Validity
Not Before: Mar 28 18:39:17 2025 GMT
Not After : Apr 4 18:39:17 2025 GMT
Subject: CN=67e6ecd5-9da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:cd:1a:25:98:ba:25:fc:96:2f:c7:fa:ea:
b7:08:51:00:77:b8:ec:6c:3c:44:fa:de:b5:af:9a:
5a:ea:57:c5:e6:14:28:c2:a4:0f:48:ab:38:7c:bf:
06:58:4c:1b:75:de:ff:ad:fa:97:cf:26:77:0d:9e:
51:49:4d:5d:a5:ae:19:84:f0:90:7c:00:db:7d:44:
fc:d3:b9:13:9e:e7:97:c5:be:88:c4:0d:d3:9b:70:
53:7b:0f:06:c9:40:3f:43:87:74:4d:c0:92:dd:a3:
12:00:6b:85:4b:ff:4d:44:d7:64:4a:ec:8f:6c:78:
53:a4:38:96:af:af:55:b2:a3:78:ba:26:cc:43:12:
27:a8:62:9f:08:a3:05:04:88:24:03:f6:ad:cd:94:
33:d7:4d:b3:85:38:14:92:9b:cc:cc:7a:73:fe:09:
66:d3:e5:5a:db:42:00:7e:57:4b:e4:87:31:0e:b1:
a7:b1:96:36:23:cd:c0:ca:20:35:d3:71:a5:4f:70:
ca:f0:dc:9c:b6:6e:16:96:f3:8f:01:21:fb:73:2c:
9b:c6:c2:e4:f4:79:44:58:9a:8b:55:5a:61:f0:26:
bd:f9:2d:73:aa:82:15:38:fd:1b:d3:5f:63:e3:f1:
6a:5a:0b:c8:43:12:92:66:3e:89:92:4c:b8:54:36:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:65:B9:10:59:81:AD:85:B0:7A:D9:42:32:F5:C6:72:C3:25:C1:34
X509v3 Authority Key Identifier:
keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:31:cd:3b:23:17:38:7b:cd:bc:f5:7d:75:ce:17:59:6d:a2:
c9:39:2f:ed:10:56:b5:43:c7:3b:f1:a9:d6:f7:c9:2d:33:13:
e0:0a:13:1b:6f:20:46:49:2c:57:b1:60:9e:cc:62:72:e4:d7:
91:70:8b:60:82:24:c1:c1:f7:0e:1f:49:de:61:c7:de:3e:f3:
9f:f5:0c:99:09:32:46:d9:1c:1a:71:f2:8c:1c:48:93:c1:85:
46:f5:60:5f:3c:99:09:7c:3f:db:0c:2b:10:38:67:5a:a3:a1:
a8:3d:64:ea:51:1d:36:e8:44:50:25:8c:2d:5a:b4:af:71:ab:
35:cd:f0:b9:32:8e:01:0f:7a:a3:7e:bb:ce:ec:94:b3:5a:ba:
51:71:ea:7e:86:67:f5:d9:a5:b4:d1:b9:e6:16:ba:7f:f6:01:
bd:f5:be:9f:14:3c:99:75:4d:fa:3a:7a:b6:fc:dd:45:ae:80:
7c:f2:f7:f3:d2:25:a6:dd:02:5d:ee:3e:ae:26:73:0f:ad:e7:
a3:d1:03:77:ba:f5:cc:0d:89:32:38:a8:10:f0:72:3c:63:19:
85:a8:ed:42:34:8c:e2:a6:f3:c4:d6:09:08:a3:30:9b:67:73:
33:d7:b4:91:e3:77:f3:b2:df:a7:aa:5c:86:7f:0d:83:57:e9:
f8:26:2b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:14:40 2025 by rpki-client