Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json)
Hash identifier: APT/pm6+NaMnQ12AN5XsgNZ89u3g5na6RruroGyIfFI=
Subject key identifier: 58:7A:CA:BD:47:7E:0B:7B:1C:C6:53:D1:77:86:F4:FF:23:D3:33:FF
Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
Manifest number: CF
Signing time: Sat 29 Mar 2025 05:05:28 +0000
Manifest this update: Sat 29 Mar 2025 05:05:28 +0000
Manifest next update: Sat 05 Apr 2025 05:05:28 +0000
Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: OwSE7PqP+tz77e1YTLSGxudm8ij4hpD2+6TTYCBU+IQ=)
2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: ojSPB0ISIGRw3cOfBtrECwI7sYrCbgl9SiZcYTomn1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D72
Validity
Not Before: Mar 29 05:05:28 2025 GMT
Not After : Apr 5 05:05:28 2025 GMT
Subject: CN=67e77f98-7499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:60:fb:05:ca:ac:29:f4:95:c5:e9:8c:e2:
50:e7:52:93:ac:df:d8:2b:47:5a:93:09:ee:0d:c8:
a7:26:40:14:24:4a:f9:93:87:56:25:72:ff:97:e9:
8d:60:fd:5c:51:c0:77:1e:e8:a3:49:a3:24:5d:d0:
49:35:26:d4:01:dd:d4:74:31:04:bc:96:02:0b:b1:
97:d1:34:f6:3e:8e:07:b5:da:c8:65:5c:ef:b8:fd:
3a:cf:d7:d2:f1:6d:04:38:03:5c:52:d6:7a:83:34:
28:bc:95:f1:4c:95:86:6f:87:1c:da:aa:4f:b0:3c:
76:bd:8d:ea:4f:32:dd:da:9f:26:8f:3c:51:65:c8:
f8:65:a6:e9:dc:d2:c4:50:32:f6:18:06:4a:3d:d1:
9c:47:8d:9a:42:7f:12:68:51:f6:c2:b5:eb:39:26:
f0:01:14:7c:16:7e:33:99:f9:97:6f:49:52:4d:37:
bf:5c:21:d1:88:9f:2e:c6:f1:e1:e5:4c:70:4e:38:
82:a5:17:e6:77:94:82:7e:ff:4d:33:39:01:93:62:
28:09:63:9e:6b:93:4c:29:8d:89:ed:15:87:67:e6:
d1:22:76:f5:6b:a7:6f:d5:d2:83:8c:52:2d:ec:66:
94:fa:b4:60:1b:a0:ce:08:84:af:7c:b2:f9:91:0b:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7A:CA:BD:47:7E:0B:7B:1C:C6:53:D1:77:86:F4:FF:23:D3:33:FF
X509v3 Authority Key Identifier:
keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7f:23:41:60:dc:42:3f:a1:b0:b3:76:60:a6:0f:ee:3a:dc:
29:15:71:5b:6e:f8:34:a8:9a:58:38:e4:93:1c:74:90:b4:b0:
8c:f2:ed:02:c4:dd:a0:00:31:3f:77:74:38:ac:3e:b4:97:1b:
a0:24:db:0b:24:f5:a2:3e:26:8b:99:3e:a8:ec:45:78:5e:04:
3b:96:e2:47:fc:a9:ce:cc:01:d2:92:ea:2b:be:51:b0:3d:65:
cc:58:3d:98:02:5c:83:ae:74:dc:fd:f9:f3:b5:f5:c4:08:6c:
e2:19:b7:0a:bd:b5:b5:d4:f1:12:ac:5c:4d:cf:18:00:60:95:
db:f0:0e:3a:43:1f:2c:f0:c9:6f:47:20:98:b0:6b:ea:85:78:
d2:22:d0:bd:2d:29:83:35:43:5f:f3:4d:c1:5c:cb:9e:bf:04:
51:a5:ab:b5:f4:db:a3:9c:c6:75:96:cf:3d:5b:c5:63:7f:2c:
15:d4:35:ad:fc:32:a2:b8:65:68:a1:c3:ce:70:2b:f1:ae:b1:
10:f2:27:98:4f:fd:f0:c1:a3:55:91:02:cd:73:07:22:e6:55:
e4:d0:9e:cf:8c:b7:34:78:6b:4b:2c:9c:2a:22:aa:0e:c4:d5:
e1:21:48:8d:bb:cb:e9:0a:57:ff:19:e6:7f:ee:4e:fd:c6:64:
b4:d2:d2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:25 2025 by rpki-client