Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json)
Hash identifier: Dmh5uFSHUmVwNGmWf+BufP9Y8DhUk55XBoDmWUQFitc=
Subject key identifier: EA:8B:31:B1:87:1A:06:36:7A:2D:D9:DA:DD:61:F6:92:5C:DF:4A:34
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
Manifest number: 01CB
Signing time: Sat 29 Mar 2025 02:35:01 +0000
Manifest this update: Sat 29 Mar 2025 02:35:00 +0000
Manifest next update: Sat 05 Apr 2025 02:35:00 +0000
Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: eHaydgiUBYtgKo/IyIq6AElyHrHQ9d2CNQ4mUisp/5k=)
2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: GYHUkkvyeIFfScmABzCLZTH4inEWtwXGbi+j71xqPHQ=)
3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7
Validity
Not Before: Mar 29 02:35:00 2025 GMT
Not After : Apr 5 02:35:00 2025 GMT
Subject: CN=67e75c54-4e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:94:ba:7f:3e:b9:64:6c:e5:e1:dc:c2:d3:
e6:0f:77:80:a7:00:2f:cf:ed:68:0e:3b:1e:69:2b:
a0:c1:df:c5:2f:cf:f3:c2:10:7e:09:2c:d7:df:c3:
fb:e8:c1:df:f0:14:8a:d9:74:d4:6d:0d:0c:a7:e8:
67:16:48:82:11:fa:39:56:3a:56:4a:a5:48:c6:44:
69:27:dc:89:2f:51:88:d7:b1:4c:eb:8a:16:d1:53:
aa:65:ed:d3:f2:e8:1f:de:5c:11:cd:6b:12:84:ee:
91:26:09:ee:94:95:c1:1e:4a:bc:72:4d:06:34:36:
81:e5:b1:bc:59:0c:9b:fe:de:a3:27:e4:b4:0d:ab:
a8:7f:6a:99:0a:bb:49:b5:b7:11:d5:b6:1f:0c:31:
40:a8:09:ed:fd:53:b0:e9:32:7a:99:de:80:d8:81:
29:a9:3a:72:e9:c4:be:a3:21:5a:39:11:8e:5c:4f:
1a:39:a0:09:21:16:af:53:01:8c:fa:54:52:c4:e3:
f3:f2:a8:b0:8a:6d:77:30:1b:b8:1d:a7:5b:5e:4a:
20:74:05:05:1a:79:0c:65:b7:d9:21:54:51:22:d6:
6c:04:3e:42:b7:76:6c:43:a0:f8:68:e0:e1:a4:61:
5a:36:b7:c8:df:d9:52:a0:82:3d:34:ed:32:5f:d0:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8B:31:B1:87:1A:06:36:7A:2D:D9:DA:DD:61:F6:92:5C:DF:4A:34
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:96:c5:f6:0a:99:49:e9:d9:91:ae:61:1c:36:d9:8d:3d:eb:
77:7e:ba:fd:66:7a:8e:11:85:67:b1:e8:d6:b9:f4:ed:01:a8:
74:2d:d2:06:78:f8:db:bd:eb:52:97:30:cc:61:96:02:32:57:
cf:4d:74:06:4a:97:ff:fe:8d:2f:11:71:55:0a:40:8c:47:75:
c4:a5:49:f3:8c:7f:c3:fe:41:2b:65:c8:e6:19:d2:00:2e:c1:
80:80:60:04:98:b2:6d:21:fb:0c:34:e1:ae:aa:65:61:bb:a0:
ff:cb:9e:05:02:81:d7:57:09:c7:3c:94:fd:53:4d:ee:ff:fc:
11:2f:5d:5e:72:a7:bb:e5:b8:3a:c5:86:9e:2c:24:7b:cd:9d:
2d:ab:2b:31:3a:4e:5c:d2:72:65:0a:b2:77:f6:eb:c8:bc:97:
60:db:fb:c4:a9:8c:35:d3:0a:5d:12:e6:e0:2b:1c:23:42:27:
bd:e1:df:11:c3:9d:13:dd:91:74:77:05:2f:80:f9:cd:2a:9a:
3b:99:18:19:ea:15:60:50:72:e6:d1:45:c0:ba:80:41:69:45:
53:a6:bb:bf:de:1c:23:a2:ce:01:a0:3b:77:78:c2:23:af:08:
87:96:d2:a3:de:43:68:9f:2c:2d:61:e1:f2:ed:1e:62:5e:10:
50:76:7d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:52:14 2025 by rpki-client