Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft
File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json)
Hash identifier: O7viImkQIyAkrF1M7LvKxo9Awk29yEjUqT4ZlNAtECU=
Subject key identifier: 28:DB:8D:70:41:60:2F:73:DC:C0:7A:FE:32:91:CE:8F:4A:43:AE:D9
Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A
Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A
Certificate serial: 0774
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft
Manifest number: 0EC6
Signing time: Fri 28 Mar 2025 21:47:19 +0000
Manifest this update: Fri 28 Mar 2025 21:47:18 +0000
Manifest next update: Fri 04 Apr 2025 21:47:18 +0000
Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: ZCuEkA9XQyeQSxPrW4yOaEis8tQd1hd19f8BTK/rI4w=)
2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: cY1AExRbNMgLPmC3nhDGO719YIR4CnuH0TePCjqoYxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908 (0x774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186CDF
Validity
Not Before: Mar 28 21:47:18 2025 GMT
Not After : Apr 4 21:47:18 2025 GMT
Subject: CN=67e718e7-6c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:55:81:a4:ef:fd:03:01:33:37:dc:d0:a8:
8d:8d:14:9e:21:01:4c:b2:42:1a:bc:32:10:f4:12:
74:e4:65:28:25:1b:32:b2:9c:ce:68:98:8a:d3:fd:
aa:f3:0c:3d:94:32:2c:af:90:9a:e5:e1:d1:10:e2:
cf:3f:c7:ca:05:52:d1:dc:59:dd:62:a1:9b:81:82:
0b:91:3e:df:31:0b:59:78:47:8c:d2:19:21:c8:c6:
61:09:ce:af:ec:ed:aa:d9:e5:cc:ce:e4:d6:ee:e6:
d0:a2:92:bb:2a:22:01:84:47:fb:11:54:65:30:9a:
4b:99:3c:89:b3:b5:cc:a8:86:78:1f:1b:18:b4:ee:
94:60:9c:4f:d9:ff:00:ed:69:4d:23:14:54:c7:bc:
e4:d8:19:b7:46:84:8b:b2:6f:11:ab:f5:48:18:d8:
31:e1:43:98:fd:65:cd:b8:01:fa:6b:9c:48:e3:15:
b8:b5:45:8d:f2:3e:74:ac:2a:be:56:75:1f:24:14:
b2:ac:81:f6:1b:d1:91:ba:62:71:f8:c2:73:40:25:
3c:e1:f5:03:ac:1c:c3:8c:2f:0b:5e:09:37:38:c6:
3c:b8:32:a3:3a:6d:d3:fc:af:0e:1e:7e:0e:5a:ea:
2b:3f:af:65:8c:a4:0a:10:78:4c:05:64:b3:c9:a2:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DB:8D:70:41:60:2F:73:DC:C0:7A:FE:32:91:CE:8F:4A:43:AE:D9
X509v3 Authority Key Identifier:
keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:06:2b:8e:42:96:9a:e4:7f:f8:1b:a8:41:bb:7e:81:df:cf:
24:f3:a1:23:23:b8:69:da:6a:c8:e4:c1:4f:e5:2e:14:69:4b:
ec:11:f7:86:72:1c:f2:e6:15:40:f5:02:cc:be:27:47:6f:64:
b4:56:4b:e3:4d:75:b3:82:90:83:f6:5e:97:29:94:60:15:fe:
45:ba:2a:15:fb:e1:b5:50:d0:6a:15:cc:b3:ac:a7:38:94:1a:
6a:b4:1d:4c:cd:9b:a5:d5:ab:ce:fe:06:24:08:fa:f0:b6:bf:
f9:b3:3d:20:ad:ce:f8:64:db:9e:a2:33:3d:66:7f:05:02:b8:
9e:5a:d1:ed:7b:84:36:6c:88:73:cb:24:80:e0:11:ee:50:f1:
39:b1:28:76:d6:25:5f:9b:42:88:e1:f7:25:88:29:db:ac:e4:
54:50:03:12:8b:58:c0:77:74:f1:d1:46:7e:85:b7:8a:6e:2e:
ad:2f:c5:33:b5:08:07:e8:72:dc:16:13:ce:94:2f:f0:d9:ba:
aa:16:62:c4:48:fc:2c:0e:ff:a6:73:1b:d0:c6:3c:f4:80:dc:
65:5c:28:8b:0b:54:44:a8:af:f3:91:b4:1a:b3:c0:98:ac:55:
c0:9f:2c:67:cf:3f:da:bb:46:47:4a:7c:9f:01:69:6b:56:b4:
42:4a:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:27:55 2025 by rpki-client