Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
File: 32d9hpNHe5Kh6f58IEImls6oYJ0.mft (raw, json)
Hash identifier: WGrZNc7MZfZZLgLkS6Jk+7uYIYyTU/0L4H/bhQxf0GI=
Subject key identifier: 80:8F:7E:43:2A:8F:73:3B:74:68:4A:DE:E6:6A:A9:DE:E0:A0:34:23
Authority key identifier: DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D
Certificate issuer: /CN=A918BDA2/serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D
Certificate serial: 02F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
Manifest number: 02F3
Signing time: Sat 29 Mar 2025 01:33:52 +0000
Manifest this update: Sat 29 Mar 2025 01:33:51 +0000
Manifest next update: Sat 05 Apr 2025 01:33:51 +0000
Files and hashes: 1: 32d9hpNHe5Kh6f58IEImls6oYJ0.crl (hash: 6AFe3Z9iazdByiRUiKhacpy4pmj4jOwmyL8GPB2hHaE=)
2: 756558C6D19611ECB75A996BC4F9AE02.roa (hash: jBN+GZ5K5hQcx74ci+Zj74gtJO93V93U4mPbsdd8SsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760 (0x2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BDA2
Validity
Not Before: Mar 29 01:33:51 2025 GMT
Not After : Apr 5 01:33:51 2025 GMT
Subject: CN=67e74dff-f2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:a5:c3:02:a1:35:44:c5:2c:97:60:73:69:
eb:4c:39:35:a9:1e:68:0f:a1:78:08:1f:7e:2a:18:
cb:e2:08:53:f6:9c:a9:13:62:30:a0:ac:64:84:dd:
31:0c:ce:4a:6b:ca:dc:a5:ca:40:c1:f8:53:9c:65:
fa:85:ee:36:26:45:b3:c2:02:c0:1b:9c:f5:92:e5:
0b:97:7c:db:4f:a6:79:55:7e:ab:0a:78:c8:f7:24:
5e:d6:75:e9:7c:78:bd:17:06:2c:e7:63:e4:05:86:
92:b6:c7:3d:8f:d9:84:c1:20:58:5c:c7:ff:ef:c5:
3f:fd:3a:47:12:e1:e1:1d:e6:25:d8:7d:92:24:86:
ba:e9:8d:f1:24:46:d2:5b:1a:57:3f:8c:8c:0d:be:
a7:40:bc:92:e3:83:f9:df:25:f7:66:d2:b5:da:fe:
06:25:28:5d:75:4a:08:87:47:b6:a2:58:de:5f:25:
44:70:13:e8:a9:53:4e:ec:37:92:be:4d:f2:e4:76:
84:c6:55:e3:a5:27:d7:cc:27:ba:67:90:e1:a6:3c:
02:a4:2d:b0:17:83:56:9f:5c:6c:bf:da:07:95:12:
d5:fb:67:ca:f5:21:51:43:34:03:99:c4:fd:d7:c7:
6c:e8:41:6b:6c:36:a7:a8:b1:56:61:90:16:f4:57:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:7E:43:2A:8F:73:3B:74:68:4A:DE:E6:6A:A9:DE:E0:A0:34:23
X509v3 Authority Key Identifier:
keyid:DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:13:af:87:fe:a4:dd:29:ae:2b:b4:20:15:84:8d:27:5d:c5:
ef:04:0e:f5:c0:35:80:52:c1:76:98:71:7c:3e:67:9d:b6:36:
01:f9:f0:59:25:93:77:e3:3e:25:53:de:e2:51:64:e0:d0:b9:
91:32:c9:68:61:06:12:e8:52:37:f0:d7:11:bb:33:99:43:d6:
1f:cf:6e:eb:22:6e:09:bc:12:3c:79:65:0a:6c:bf:1a:0e:15:
ea:ec:1f:f3:d8:4f:9e:4f:dd:e2:81:04:75:d0:24:e7:96:de:
be:52:a4:5d:54:6e:b7:d8:a9:16:45:77:50:21:76:c2:62:74:
6e:6b:2c:ff:45:15:69:61:6c:0e:b7:23:ad:bd:de:94:3b:7a:
57:42:16:33:b4:85:d4:6f:b1:2d:f7:c4:39:dd:86:12:9b:22:
aa:b7:a6:16:c3:05:fb:a3:14:91:39:b5:c5:3e:cf:d7:7f:6a:
d1:46:7a:96:c6:ad:17:a0:99:1c:a4:7c:15:cc:c3:b1:6d:23:
4b:b2:dd:8d:30:cf:42:4e:3a:2e:a2:b4:36:7e:fb:45:2d:ac:
2b:c7:79:e0:8a:e9:12:80:bc:85:e1:ee:3f:c8:4b:25:3b:e0:
c3:ad:57:71:33:eb:89:22:55:5e:2a:7a:11:6b:90:01:63:48:
e0:88:54:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:14 2025 by rpki-client