Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
File: AtoTJ_UsQCOjghrIeFDJF9joNSc.mft (raw, json)
Hash identifier: afC6lToicz6pGR13gghpZRwHnUQTy2lSLMWjvbVa6Ak=
Subject key identifier: A4:A1:36:D6:3A:50:F4:7E:BB:20:17:EF:02:A5:26:00:71:66:B4:D4
Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
Certificate issuer: /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
Manifest number: 6F
Signing time: Sat 29 Mar 2025 06:11:26 +0000
Manifest this update: Sat 29 Mar 2025 06:11:25 +0000
Manifest next update: Sat 05 Apr 2025 06:11:25 +0000
Files and hashes: 1: AtoTJ_UsQCOjghrIeFDJF9joNSc.crl (hash: LKUUbtMSlbwIs8eUWvtCwQgorBSHZ+61qsA6ujQPxUw=)
2: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (hash: TL1SnZ/gVu4gXR6fktiVjS67hjGfn2PQM4oWEdnN0mQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB7E
Validity
Not Before: Mar 29 06:11:25 2025 GMT
Not After : Apr 5 06:11:25 2025 GMT
Subject: CN=67e78f0e-4d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:bd:da:73:30:ff:8d:b9:f6:bd:8d:a0:10:
c3:60:57:29:5c:08:09:e4:cb:5a:20:3e:2d:bb:e8:
41:89:00:74:63:f7:47:b9:2b:87:83:ad:b6:c0:81:
5d:3d:26:a9:50:92:ac:7b:c7:67:79:fd:b8:6f:17:
be:b4:32:6b:7c:86:b1:91:e4:c3:27:a6:48:6b:84:
69:07:72:69:27:c2:e5:b1:ca:f6:14:8b:30:46:19:
45:fe:9b:19:9a:21:85:20:2e:dc:90:2d:1e:03:ac:
7e:25:68:70:f2:03:fc:37:11:6b:ef:19:64:d9:e9:
49:95:51:c9:29:bc:0e:ca:e1:13:df:ed:3b:c1:69:
9d:b4:3f:b9:1b:75:d6:92:7b:95:d2:dd:9f:5b:ef:
ce:30:40:d4:2c:f4:e8:6c:28:5c:cc:af:cc:03:27:
9d:3f:87:a3:bb:bb:27:ed:d6:76:7d:b9:62:2c:cc:
ce:4c:49:7e:f5:2f:28:5e:f2:ad:31:25:51:eb:92:
d2:14:2a:01:0a:d1:66:6a:b4:e0:af:18:ee:11:4e:
9d:e3:86:06:b0:b4:f1:fb:46:c0:74:96:d0:b5:68:
01:49:36:26:8f:25:f8:97:31:21:bf:54:99:4f:3f:
d8:aa:76:79:f3:d3:1c:d0:d7:7f:cb:1f:39:79:dd:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A1:36:D6:3A:50:F4:7E:BB:20:17:EF:02:A5:26:00:71:66:B4:D4
X509v3 Authority Key Identifier:
keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:c6:e4:6c:9c:de:f8:17:37:76:98:f5:a6:af:b2:64:b2:4f:
d8:27:75:1c:98:78:02:74:74:fe:3c:90:01:d6:cf:75:7a:12:
65:a0:be:a3:3f:14:5a:49:9a:47:3e:4c:00:2b:88:70:d0:f4:
4b:b7:f6:89:f5:0b:03:56:62:96:f8:29:c1:7d:c4:f9:0f:21:
70:80:46:12:3b:11:c3:90:db:25:89:b2:ad:69:11:8f:af:6b:
80:f0:77:aa:13:31:72:26:f2:4a:e8:8c:17:a2:de:f8:36:15:
63:0c:03:00:c8:36:b7:d5:79:6c:5a:8f:29:8b:8f:28:af:81:
ca:23:87:6b:8c:46:04:5a:06:07:51:43:6e:69:dd:70:5f:87:
4d:73:d2:a5:10:5e:02:ae:28:0e:1f:55:a3:ed:82:b9:3e:3d:
db:7f:05:47:30:8a:9b:f3:4a:99:8c:5d:88:fe:cf:86:ad:33:
cd:5e:f0:e4:2d:43:98:aa:c5:15:f5:f0:9a:15:3f:68:7b:17:
34:51:34:f4:a0:4c:16:3a:d3:fd:8f:fb:f6:1b:6a:78:6e:2d:
40:1c:85:02:6d:34:fc:d4:ec:1c:8b:65:d6:03:57:52:e3:e5:
08:11:4c:10:37:01:89:ac:b0:51:16:e5:39:31:ce:17:bc:1d:
54:92:a6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:33:33 2025 by rpki-client