Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier: MPvO9uSdbiwMutXk3dX883hVegMEPmFddzRaJ/nqh2Q=
Subject key identifier: DD:1C:ED:E5:BB:DA:DB:8D:DB:CB:05:14:E3:2B:79:C8:89:D3:7A:D8
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer: /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial: 0C33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number: 1407
Signing time: Fri 28 Mar 2025 18:34:27 +0000
Manifest this update: Fri 28 Mar 2025 18:34:26 +0000
Manifest next update: Fri 04 Apr 2025 18:34:26 +0000
Files and hashes: 1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: jk9ju6xAFQWyQZCzUDRu58q+UErFkP07eYuPmC8eNps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3123 (0xc33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7D0
Validity
Not Before: Mar 28 18:34:26 2025 GMT
Not After : Apr 4 18:34:26 2025 GMT
Subject: CN=67e6ebb3-f3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:4b:ab:ce:a7:a1:fc:f3:b4:ec:eb:2f:33:
4f:55:7a:1e:81:99:af:3a:d5:92:7f:db:57:8f:73:
56:25:a4:57:57:27:cf:ae:21:17:d0:cc:b0:4a:70:
48:da:c5:8f:76:a7:43:d9:c7:db:fb:92:8b:a2:e9:
15:d2:20:fe:e3:c0:37:40:ea:fd:d5:ff:a4:2c:a6:
bf:f4:b9:17:84:c8:7f:3c:91:da:b0:ee:af:84:e7:
18:65:f7:cf:28:db:c5:08:29:21:aa:08:66:29:45:
61:28:d8:a1:f2:ad:9b:86:a5:38:e6:03:3c:01:25:
83:04:9c:eb:4d:16:c7:11:99:5d:26:12:9a:1d:98:
c7:d5:a1:1b:e0:de:1f:c4:e6:42:dc:dc:fc:83:46:
51:db:7c:97:f9:94:cb:51:08:f1:a2:a5:b8:dc:e9:
ed:e7:78:63:bd:fa:cc:41:b3:28:82:6b:dc:44:2e:
ba:25:66:8d:8c:18:51:1d:06:39:26:e9:6d:a2:80:
7c:77:10:3d:92:57:d7:40:3b:4d:b0:b8:51:39:49:
4d:03:dd:db:82:04:0e:c3:18:8c:fb:f9:80:ef:d0:
b8:98:a4:ec:2a:57:9b:9d:11:1c:e3:07:2d:5c:ba:
0b:9d:97:9f:da:00:67:e7:34:d8:1c:3d:bc:53:49:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1C:ED:E5:BB:DA:DB:8D:DB:CB:05:14:E3:2B:79:C8:89:D3:7A:D8
X509v3 Authority Key Identifier:
keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c3:d4:b5:77:45:14:42:a8:03:ea:1e:dd:3b:d1:f3:50:e5:
2b:80:be:b3:aa:b1:a2:57:ca:de:4e:9d:5d:d6:7b:8a:38:ac:
2e:48:a3:fa:aa:6d:c7:39:20:a9:2b:71:77:6c:b9:69:51:7e:
7c:3f:27:82:e3:89:89:e0:c4:e2:79:a7:d7:ad:4f:2a:85:74:
1d:82:b5:89:f6:45:d0:c0:72:6e:7a:8d:8f:40:48:de:e4:f6:
42:c2:39:c8:2f:f2:1e:30:8d:d5:06:c5:fe:8e:12:7f:45:44:
3a:49:65:8b:20:45:89:12:e9:e0:4b:4b:25:59:99:06:48:e6:
03:72:ac:17:36:78:33:dd:93:2e:3c:e0:b1:4f:db:fb:2d:39:
16:43:91:32:16:ef:8c:98:51:e1:94:94:58:f6:2f:cd:31:55:
c3:36:92:ef:c8:b9:9f:9f:b3:09:70:b5:85:9e:44:27:43:32:
3e:33:2e:8c:e8:8d:2c:86:8c:68:39:d7:a3:ed:78:57:54:28:
ad:ba:d3:4f:1e:27:9f:e0:a8:7f:fe:2b:43:03:eb:e4:6d:d5:
a9:c2:fe:aa:2f:1d:fa:9f:cb:ae:d7:be:f0:d1:64:0d:6f:2f:
af:c5:80:60:b9:01:a6:0e:d3:5c:a9:06:e5:bf:3e:18:d3:2d:
5a:52:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:18:18 2025 by rpki-client