Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json)
Hash identifier: jA0+oiDRtb4vmeUztrOfvuZTfwJjVoG1NiwzDsvS//8=
Subject key identifier: DD:CF:7C:B4:4A:92:69:1D:34:19:04:AC:9D:3C:E8:28:66:EA:44:5B
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial: 0C46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
Manifest number: 0C2F
Signing time: Fri 28 Mar 2025 18:44:33 +0000
Manifest this update: Fri 28 Mar 2025 18:44:33 +0000
Manifest next update: Fri 04 Apr 2025 18:44:33 +0000
Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: 9PioTLUh5kPhpNxhNAfhwFiFZlPnGM8bDQasXiOksLE=)
2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: RkMRmNqmHZ9s0oSB72MGnOxEbYhdY42Vffpm2UpowTM=)
3: B430443A324211EFB14FB614C4F9AE02.roa (hash: CYY0LXP9X4xKQBGfZAofQe57hCMYIiU/YbWGmHYH8e0=)
4: 18CB29D4D42611EFAE000281C4F9AE02.roa (hash: GuYqrGtWVlJyoBE0Sfpp3oNaKMeRtWzRn135dDFohmw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3142 (0xc46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E308
Validity
Not Before: Mar 28 18:44:33 2025 GMT
Not After : Apr 4 18:44:33 2025 GMT
Subject: CN=67e6ee11-12a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:63:69:71:f0:54:84:63:9c:b0:74:92:16:
1e:bd:8e:5b:7a:4e:33:06:7a:5a:12:ea:9f:e1:bc:
db:81:b7:35:31:4f:02:7e:5d:a0:b7:34:8a:8f:c3:
d6:11:c2:d0:85:1a:58:c2:22:d5:c4:c8:7c:ac:e6:
40:96:f2:ce:60:f7:f4:7e:5f:60:c6:86:b1:46:09:
4a:12:83:74:f8:ea:d3:8b:fc:17:c4:7a:e5:af:1b:
51:1a:54:33:fe:4f:45:d0:75:46:b9:bd:e5:63:e5:
e6:a4:b4:73:e7:9d:09:70:2c:20:49:b1:4c:37:e2:
eb:d1:58:f3:6d:59:e9:9c:21:77:5a:ba:c3:06:ec:
c3:a2:00:a4:9b:8b:a7:79:6f:a0:45:a5:0e:5c:ea:
91:71:c6:2f:98:f1:28:82:ea:69:9e:d7:87:3e:18:
3f:46:00:f3:ba:7c:67:38:51:e3:80:5e:cf:1a:ec:
88:08:15:c1:16:9a:8b:e3:69:91:90:57:44:4a:27:
aa:d8:45:e7:24:5d:c0:bc:f7:a9:08:1e:45:4f:44:
1b:34:a3:0f:6a:65:60:57:e2:3f:69:c0:df:bd:ff:
9f:95:73:95:7a:89:a2:aa:45:89:16:92:50:47:ff:
61:89:85:b2:29:2a:d5:b2:8b:ee:6a:7d:05:69:72:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CF:7C:B4:4A:92:69:1D:34:19:04:AC:9D:3C:E8:28:66:EA:44:5B
X509v3 Authority Key Identifier:
keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1f:95:89:7a:85:71:bc:43:63:af:7c:8b:8d:7a:d1:f7:2b:
c3:a6:f6:e9:f5:c6:da:34:0f:99:26:53:79:83:ca:b9:77:6c:
a6:58:52:3c:45:3f:38:11:f9:df:76:a6:aa:1a:8f:fd:08:54:
b3:d6:ab:e4:02:05:30:bf:ff:09:0f:4f:0d:4c:68:35:96:b9:
7b:95:9f:6b:df:e1:1b:00:84:bb:54:bf:b7:36:2d:03:6e:7d:
d6:f8:8d:1a:0a:90:98:b8:26:b6:b5:bb:df:53:5b:bd:8c:0c:
d3:10:c4:20:dd:38:9a:82:08:97:e8:4e:1c:27:81:6f:d9:80:
18:b2:e7:0a:ad:dc:51:d4:c5:64:64:89:08:bc:49:16:5a:78:
54:25:08:5e:e2:75:82:96:d4:e9:b8:99:44:2e:97:cf:67:ba:
d0:ee:b1:3e:e1:dc:f4:d9:7d:0e:08:f4:43:68:12:e4:37:56:
40:09:a8:1f:c2:ec:ee:e2:cd:5a:be:c5:a4:55:dc:e1:83:b9:
34:d0:55:59:be:6e:c3:53:c5:24:54:89:11:20:97:0d:85:51:
69:b8:11:b3:17:87:9e:7b:93:a3:15:9b:50:c2:85:11:c4:94:
57:53:6e:eb:65:74:f6:fd:2e:97:66:22:c6:33:92:e7:47:2e:
17:28:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:27:19 2025 by rpki-client