Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json)
Hash identifier: lKeKSoiaGnx7E1PlpY2LpFkBFztq+GbUz9yovinAkRo=
Subject key identifier: 37:50:28:3F:AE:B6:2E:A6:1B:37:BC:99:00:2B:77:FF:11:F8:E8:D6
Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
Manifest number: 3E
Signing time: Sat 29 Mar 2025 06:49:15 +0000
Manifest this update: Sat 29 Mar 2025 06:49:14 +0000
Manifest next update: Sat 05 Apr 2025 06:49:14 +0000
Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: pgDAOK1MxShF1JvLp7+soRzIU+JCTz+EboTb3tEAB8Q=)
2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: P+H7fb6sxOYzaDyJFH2WCrqrlvTjPog92898KvwjrwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186363
Validity
Not Before: Mar 29 06:49:14 2025 GMT
Not After : Apr 5 06:49:14 2025 GMT
Subject: CN=67e797ea-fe12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:80:de:ad:45:a1:f9:ee:55:68:c4:5d:9e:
9c:2f:55:f6:e2:6a:81:cd:5d:49:92:c2:a9:1a:3b:
04:aa:b0:b1:65:08:35:ee:a1:5b:6f:9d:72:97:4c:
89:20:b9:3f:38:a2:08:3f:ee:4f:f9:9b:40:b9:02:
20:10:46:20:57:f9:14:93:0a:ee:c7:03:ec:fc:ad:
3c:b9:67:b1:21:7c:2f:7a:ca:3c:46:bf:53:78:86:
34:15:f7:58:10:16:2c:b7:a5:32:2f:05:5c:c9:49:
72:19:72:77:a0:11:51:73:da:64:96:6e:2a:21:46:
91:c1:0e:28:b3:bd:36:b0:b5:77:97:48:0d:a8:e8:
b9:12:5b:be:cb:ea:9c:25:76:41:4c:dc:f1:f0:e0:
74:82:68:5f:ba:97:7c:b0:5d:fa:6a:1e:22:e6:c4:
fa:e0:12:be:3b:be:e5:5f:bd:fc:bc:cf:c1:47:12:
8d:c2:cb:86:7b:3c:c6:41:5f:2d:77:8c:a7:47:89:
21:2a:c3:be:20:ca:d4:79:e4:e5:16:29:0b:6c:0e:
2a:75:b7:96:7d:c8:cd:4f:f5:ae:5d:60:ba:c8:9b:
1e:47:e1:dc:e2:a8:7d:35:44:63:4d:ba:55:c1:08:
43:2a:27:78:f6:cb:50:c2:52:1c:10:58:d3:a2:51:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:50:28:3F:AE:B6:2E:A6:1B:37:BC:99:00:2B:77:FF:11:F8:E8:D6
X509v3 Authority Key Identifier:
keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d3:88:49:e8:20:e4:ff:50:63:93:47:b1:e0:41:59:d3:2a:
d2:c1:62:c8:48:9c:60:60:f8:00:67:89:1b:60:b7:d1:2e:5a:
98:7d:80:f9:67:20:da:85:eb:c7:61:70:e3:eb:eb:f1:e9:cb:
9a:75:26:65:49:a5:18:7a:1b:24:2b:d4:91:77:fb:b3:05:6b:
6c:3c:97:9a:6d:fb:3a:c1:f0:fe:c6:dc:c0:a9:e5:d3:f9:79:
d0:e4:c8:97:d7:b7:4e:0b:15:85:84:49:5c:ec:09:33:c0:cd:
eb:3b:e2:c1:39:11:c4:16:bb:92:04:19:36:64:3c:2b:5d:4e:
08:28:54:87:d0:8a:10:d1:a4:33:9c:c5:9d:da:f2:66:d8:4f:
cf:63:7d:e8:36:c7:1f:44:c4:a0:08:1c:27:89:75:66:9d:7d:
f5:7c:92:db:59:ac:93:e4:48:db:d2:08:11:75:e1:52:13:c0:
83:23:82:63:c5:a0:53:47:28:f2:2e:67:d6:5a:e0:42:b3:f5:
97:51:bd:12:66:46:67:1b:3f:c0:a2:1e:38:ea:d8:da:24:52:
3c:84:77:e0:3d:cc:9d:b1:4b:f6:5e:8f:b8:2c:89:56:98:01:
bc:66:f9:64:14:96:8a:4c:56:af:c4:7f:37:b5:3f:33:9f:2e:
4b:91:ff:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:36:15 2025 by rpki-client