Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
File: muAi3ZD6yvK8XHN26KhM5QUeiWo.mft (raw, json)
Hash identifier: KlyRZg2MK20NDpCxNAC2AmULuNKz/3HhToizLZnAg00=
Subject key identifier: BA:6E:B8:EC:56:9A:BB:43:E9:E5:21:6D:5C:67:BC:38:30:39:CF:F6
Authority key identifier: 9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
Certificate issuer: /CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A
Certificate serial: 06C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
Manifest number: 06C2
Signing time: Fri 28 Mar 2025 22:22:10 +0000
Manifest this update: Fri 28 Mar 2025 22:22:09 +0000
Manifest next update: Fri 04 Apr 2025 22:22:09 +0000
Files and hashes: 1: muAi3ZD6yvK8XHN26KhM5QUeiWo.crl (hash: 1SqZ6hmtc8wmlmmj+IVhl9u71cZGBc8xbAbNyDpyeck=)
2: C17E4DE2503E11EBB72F4C61C4F9AE02.roa (hash: Cao5bthPX96QQ3SQheHb0r7GeyEcmcCxx6iv6SXw/fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919271C
Validity
Not Before: Mar 28 22:22:09 2025 GMT
Not After : Apr 4 22:22:09 2025 GMT
Subject: CN=67e72112-8518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:45:2b:ba:73:e3:50:ab:7c:27:bf:32:b2:
25:4e:f5:4c:e7:5a:39:f4:8c:3e:77:ac:76:e1:29:
8f:80:ea:59:e2:63:e5:6d:61:27:7a:fd:9c:68:19:
57:fb:c1:c2:f1:e3:c2:c3:ff:8b:0b:42:3b:ca:d4:
fd:98:1d:ee:34:62:73:57:b7:2d:2b:06:b9:aa:08:
f2:0b:6c:c2:a3:1e:e4:46:0b:2b:72:5b:b8:f1:1a:
07:ad:59:4f:27:10:13:df:19:e1:1d:22:fc:9e:aa:
bc:d5:34:71:01:b5:93:1d:42:18:4f:58:53:72:97:
21:c9:39:52:a9:51:88:03:ba:e7:f4:f6:96:a2:1f:
6b:bc:04:20:f9:de:86:c9:ec:f7:4d:bb:74:21:28:
25:29:c1:01:2c:61:4b:8e:59:7f:58:60:a9:00:42:
e3:73:f2:9b:29:e4:a5:cf:84:31:08:e0:28:da:ad:
64:33:b0:7e:4a:c2:f3:53:40:6e:08:48:3a:7f:3f:
a6:9b:71:73:61:b7:38:42:a1:c9:8f:10:05:a1:5e:
f1:fc:61:1e:7c:69:9f:bd:a3:77:d2:8d:cb:b3:1b:
af:0f:e6:ed:a9:5e:08:08:1e:ab:ec:a3:9f:47:f8:
16:35:2d:76:81:5c:63:1e:00:2b:01:2b:1a:1e:9e:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:B8:EC:56:9A:BB:43:E9:E5:21:6D:5C:67:BC:38:30:39:CF:F6
X509v3 Authority Key Identifier:
keyid:9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5e:b4:95:e7:31:a2:16:47:0e:ec:4e:07:a6:cb:b6:c6:5c:
0e:c8:8e:52:ba:e2:a0:4e:bc:56:49:a1:cb:07:03:e1:c9:6f:
54:8b:11:9c:a4:2a:a6:27:6d:75:6f:85:8e:ca:a1:ed:d3:d9:
9c:27:d4:14:6c:c2:4a:56:17:36:77:bf:73:f4:a7:8a:14:a6:
d5:f5:8e:83:ce:25:13:19:66:e4:7d:1c:97:93:76:00:41:c8:
2c:95:0d:31:00:29:ae:3d:c0:74:c7:1f:c2:61:74:b3:6b:42:
c9:5c:96:55:3a:ac:5e:d2:5f:89:1a:5c:39:1e:9f:fa:96:0d:
2e:45:c3:51:ea:e5:ce:0d:9d:9b:41:70:0a:55:4d:80:c5:f5:
ae:cc:49:60:13:e1:63:3e:50:1e:31:01:0d:b4:92:df:56:e9:
02:86:f3:cf:2c:18:ef:3a:52:b4:5d:1e:48:df:5e:54:da:bf:
b6:ef:6c:5a:fb:f4:e4:47:0f:af:41:63:ec:71:1e:93:61:65:
44:ae:ed:f4:97:ad:19:5b:5a:73:1b:78:4d:56:69:26:2e:d3:
32:ff:56:b1:54:89:f9:57:35:44:21:22:c3:9d:31:f6:4c:96:
ef:47:ee:c2:8e:60:c3:fb:17:8a:e9:d2:98:8c:47:a0:f6:76:
eb:e1:6b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:56:57 2025 by rpki-client