Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
File: IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json)
Hash identifier: FwdoYEvSB3I1hyMnwe7R7m9wtJkGgeXbxY/p02cQkcU=
Subject key identifier: 86:FA:86:37:9F:D3:E8:0C:F9:C0:55:EB:D8:9F:50:26:40:8E:94:60
Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Certificate issuer: /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
Manifest number: 010B
Signing time: Sat 29 Mar 2025 04:23:01 +0000
Manifest this update: Sat 29 Mar 2025 04:23:01 +0000
Manifest next update: Sat 05 Apr 2025 04:23:01 +0000
Files and hashes: 1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: d1so39bJapBgcrjAo/uShVE0kCyuXfjT7alpXpUYQZY=)
2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E9A4
Validity
Not Before: Mar 29 04:23:01 2025 GMT
Not After : Apr 5 04:23:01 2025 GMT
Subject: CN=67e775a5-6214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:f8:87:84:de:0c:9d:4f:2f:df:72:07:b1:
34:e6:8e:5a:b2:9d:4e:c9:99:3a:05:02:27:3a:a6:
56:59:52:76:c3:d2:b0:32:3e:86:2a:07:01:af:3b:
a5:59:1e:5a:4e:26:36:8e:57:35:5d:97:64:7e:fd:
94:1a:9c:c1:1b:34:08:1d:17:60:24:1e:79:ad:c5:
a5:c6:a6:b5:b5:f3:4b:b0:19:9d:a2:98:ea:69:fd:
18:dd:93:ce:88:d6:fe:57:f4:ca:dc:db:1a:f7:35:
c7:20:fd:a5:2b:e0:45:8d:f0:35:96:e5:e8:d4:a3:
42:e1:59:79:fa:15:ce:64:a5:c8:54:46:60:1b:05:
63:2c:19:e5:96:b0:69:bf:34:72:49:12:51:23:86:
90:71:39:96:5a:73:ad:a4:df:30:6a:be:79:9b:70:
d2:9e:a8:c5:c9:3b:bf:5c:2a:89:57:ea:cb:ec:bd:
32:22:9e:7c:1f:3a:97:30:e1:82:f5:fc:7e:a4:2b:
81:50:83:e8:60:28:7b:8a:bd:35:34:8f:6f:ed:b6:
99:65:20:42:eb:bc:d3:6c:df:59:1d:73:2a:23:c9:
16:22:37:98:04:fc:bf:73:32:4a:e2:71:96:0f:c1:
6b:77:cc:8d:6b:d2:cb:37:1b:48:ea:a3:c8:ca:35:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:86:37:9F:D3:E8:0C:F9:C0:55:EB:D8:9F:50:26:40:8E:94:60
X509v3 Authority Key Identifier:
keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:46:21:34:80:68:45:64:ff:25:e9:d3:3c:7a:e1:9e:79:f9:
e2:1c:eb:4e:a7:93:d3:2c:03:3e:78:49:eb:d9:15:8b:a0:74:
cc:52:fd:c8:3b:1b:3f:43:70:14:5a:fc:a5:8f:92:e3:99:b7:
df:95:2c:4b:fc:2e:02:04:98:13:37:07:b3:c4:6f:8d:43:e7:
ed:5e:22:3b:18:e9:33:ca:c2:00:ac:01:a6:47:53:2b:35:38:
db:c2:8a:48:6e:da:35:f1:91:a5:71:fa:f6:aa:84:ec:7e:c6:
fe:46:e0:90:32:f8:7f:0a:10:68:c7:fb:35:81:e8:ab:94:2e:
e4:4f:a5:46:e1:c8:f4:b1:f7:40:e7:68:5d:a1:6a:a2:f5:21:
76:2a:67:ab:54:cb:3e:87:e3:c0:08:5f:02:d5:1b:30:75:7a:
29:0e:ca:41:a7:7c:5f:04:16:c5:89:cd:a0:2d:ed:4d:1b:de:
57:92:6c:42:5f:7d:14:18:3e:c9:5c:11:af:2c:3b:b2:77:4f:
ca:4b:73:5d:52:1f:de:72:57:54:4b:ff:06:d2:bb:d4:7f:c4:
36:c8:f7:1e:4e:2a:54:c5:04:cc:37:55:86:56:8e:36:38:27:
35:fd:94:3c:f3:29:ca:fe:4d:3d:8c:9f:a9:75:ee:45:69:57:
91:1c:f4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:34 2025 by rpki-client