Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json)
Hash identifier: lvSuOt8qDYT1mn8Z7XC/Spz16d7JAeq5LeOmq5OfXt0=
Subject key identifier: 43:6C:74:8B:7E:56:66:3C:B6:18:85:0C:4E:95:B0:17:8E:64:F5:11
Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Certificate serial: 0490
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
Manifest number: 0490
Signing time: Sat 29 Mar 2025 00:14:43 +0000
Manifest this update: Sat 29 Mar 2025 00:14:42 +0000
Manifest next update: Sat 05 Apr 2025 00:14:42 +0000
Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: k3FRFsl/1pjE6UdXbAbqLjGN7H/5dEieSGnSSyona8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1168 (0x490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919470F
Validity
Not Before: Mar 29 00:14:42 2025 GMT
Not After : Apr 5 00:14:42 2025 GMT
Subject: CN=67e73b72-bf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:b6:ad:89:9c:e1:22:60:51:18:a0:ed:4b:
43:34:1e:e3:0a:c7:6a:c2:a5:6f:5e:80:fe:64:b1:
ab:97:0a:72:5a:a6:66:29:62:23:86:ef:d4:4e:d8:
e5:98:54:ee:0b:e7:46:32:39:36:6e:11:cc:95:ba:
5e:91:10:53:ef:35:52:33:63:5e:3a:16:c4:48:44:
88:5d:25:f7:6d:a0:6b:da:55:56:29:3f:d4:cf:d8:
a6:00:5d:ff:25:4f:19:5f:92:62:ad:16:c9:89:52:
36:88:ff:a7:f9:bb:29:dd:fc:31:ea:e4:1a:65:9f:
60:03:2a:6a:b1:43:b2:a8:d0:43:87:6b:ae:9f:2b:
a5:15:77:09:f6:93:d7:63:bb:28:26:1d:c8:67:1e:
1b:78:b8:8a:c4:1b:eb:70:af:fe:ed:b4:f3:39:f7:
ba:e1:07:c3:1c:fc:db:cf:96:4f:7a:c9:4b:6b:fc:
24:aa:10:1b:75:30:bc:ed:38:13:13:76:47:e7:1a:
72:cb:74:e3:c4:ca:84:21:41:b4:f1:16:dc:4e:37:
f6:9d:b2:55:a0:0f:bd:21:cb:69:10:8c:fa:a1:93:
bb:86:ce:06:11:dc:74:f2:6b:a6:2d:29:75:60:c0:
b2:7e:83:a8:70:1e:a0:9c:c4:cf:6e:f7:40:7e:74:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6C:74:8B:7E:56:66:3C:B6:18:85:0C:4E:95:B0:17:8E:64:F5:11
X509v3 Authority Key Identifier:
keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:22:ea:a8:8e:3e:1a:11:6e:d3:7a:fd:f2:aa:c7:42:b0:27:
dc:56:5c:86:08:a2:6e:ac:4e:db:0e:43:39:5c:77:59:4c:a8:
04:a9:8a:4d:ab:b5:fe:5a:49:e6:87:43:77:d9:39:fb:a9:08:
09:fb:76:dd:54:3c:95:fc:75:db:ae:38:8a:7b:a6:a9:3e:73:
f0:a3:5d:29:46:ff:ae:f5:99:b7:20:d8:69:14:87:30:85:31:
d5:73:4a:bc:39:c3:aa:c3:97:61:c5:2d:a6:d5:eb:1a:06:12:
f9:07:b0:f1:c7:94:c7:f3:84:f3:34:2a:db:f3:8c:84:f3:a3:
9c:fe:85:fa:fb:b4:cd:77:33:db:77:4a:4b:64:92:58:e3:d7:
64:7b:11:ac:06:9d:a9:10:72:d7:95:f3:74:48:82:93:77:9c:
f5:77:b1:1d:08:7d:f3:3f:d3:81:db:8f:da:78:99:08:14:b3:
24:e3:e8:5e:b1:8e:65:57:78:d6:a0:07:89:6b:35:11:65:3a:
b7:da:94:b5:0e:50:e3:e2:d7:d1:70:89:d0:cf:93:c6:b3:e6:
88:5d:bc:5d:76:c1:a2:0a:b6:04:d6:91:fe:ad:3a:7a:de:8c:
4a:31:fc:9c:2e:91:18:85:ce:ee:1d:6e:24:0a:0e:3a:02:e7:
51:ce:4e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:45:03 2025 by rpki-client