Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
File: xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft (raw, json)
Hash identifier: 6/t8Hv4SAO08PXplFT55+6rm1qNtksiZCMq6ryJHtJk=
Subject key identifier: 37:6A:FB:5B:71:54:6B:74:50:5F:F0:11:13:8F:7F:CD:B2:2C:EB:3A
Authority key identifier: C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
Certificate issuer: /CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Certificate serial: 086C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
Manifest number: 1453
Signing time: Fri 28 Mar 2025 18:53:36 +0000
Manifest this update: Fri 28 Mar 2025 18:53:36 +0000
Manifest next update: Fri 04 Apr 2025 18:53:36 +0000
Files and hashes: 1: xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl (hash: t7id24Xa53onOyMA5ar/h+uof4pq3RD2nQKOzHfzUTg=)
2: 7BBC1DD2040611EF909F6C3EC4F9AE02.roa (hash: d+L19gUHVaLQL/PMqiWFVUvVqO9gHwxatHS8mTM15PU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156 (0x86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FD04
Validity
Not Before: Mar 28 18:53:36 2025 GMT
Not After : Apr 4 18:53:36 2025 GMT
Subject: CN=67e6f030-67a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:90:a2:11:d4:bf:d9:06:cf:da:70:a7:30:61:
e3:01:e2:ef:d3:b0:49:d0:85:28:63:14:a4:19:56:
92:6a:af:ab:f8:b1:34:2b:df:d9:00:5d:b9:ad:40:
47:29:f7:13:83:5f:84:ec:0d:bb:0a:56:13:5a:3d:
e7:50:c1:aa:fd:52:35:bd:5d:08:97:b2:3d:0e:c0:
1d:4c:e7:ab:75:fe:dc:bf:13:42:08:e2:c0:f8:0a:
5e:6b:62:1d:83:38:2b:cf:95:2a:8e:f8:a3:a8:71:
89:7f:d9:c0:c1:5c:a5:f3:5f:ac:63:f7:c2:3a:b1:
c6:51:f9:d9:02:70:61:c6:bd:64:d5:ef:55:7f:89:
77:77:07:02:bf:5e:9d:10:8a:5d:66:8b:78:65:86:
da:56:08:7e:99:74:d7:bb:0b:36:38:a4:72:6f:ce:
e4:63:9b:07:db:78:35:fd:db:d2:08:06:3d:38:a5:
97:53:1b:97:d7:72:67:f8:a1:06:65:12:5d:72:dc:
ca:bb:d8:bd:68:8f:c4:f8:b1:bf:ea:39:e8:42:30:
b1:b2:04:43:68:79:5e:0f:3d:73:59:25:43:81:98:
0d:10:cd:3c:ff:dc:c1:ec:02:e5:4a:34:cb:dc:af:
8d:99:b7:e0:b9:c3:36:b9:d2:e4:14:ad:52:ce:9c:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6A:FB:5B:71:54:6B:74:50:5F:F0:11:13:8F:7F:CD:B2:2C:EB:3A
X509v3 Authority Key Identifier:
keyid:C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:8d:61:c3:ff:4f:a1:64:6f:77:ec:22:43:65:d3:76:cf:f2:
72:36:6a:0b:36:a2:7a:b6:08:33:98:77:7d:04:1a:6a:ac:ca:
d0:23:ba:03:08:7a:2e:25:6d:2d:16:28:46:b6:cd:9e:99:5d:
80:c3:f1:fb:a8:49:ab:7e:f0:a0:fd:93:73:0d:ae:14:a9:e2:
a5:3b:99:3a:0b:b4:98:e9:03:48:af:77:31:4a:94:0c:7b:6b:
77:4e:68:93:39:ce:bd:52:90:ee:24:07:68:3b:f2:c6:fe:eb:
1f:53:2b:c4:0c:49:eb:71:06:ee:5b:9d:7c:bf:20:c7:2a:f8:
e7:86:f6:87:5f:61:62:29:85:ce:c6:ab:ee:8a:53:dd:ac:39:
d1:0f:41:a1:1b:47:ea:9d:eb:a3:ca:26:b3:0e:7d:f1:01:fc:
c4:b9:a0:df:63:1f:d0:a1:41:0c:f1:bb:a8:e3:a7:2c:8f:be:
75:e4:f2:11:f3:90:78:87:fc:c0:8c:68:38:46:d7:42:6c:79:
0e:bf:a2:cd:32:9b:61:28:1e:86:22:95:5f:dd:c4:fb:41:20:
9a:fb:ff:52:ee:59:77:d6:6b:de:b6:c8:ea:ee:01:1d:90:dc:
dd:a5:ff:28:a6:ad:30:8d:b8:40:40:d4:23:70:dc:23:e6:e4:
2b:c1:c7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:08 2025 by rpki-client