Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft
File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json)
Hash identifier: aTdotq25McUk3PwN1Zv4lceSwfVMuyJDlCF0bIto2fk=
Subject key identifier: 2B:C2:4C:AB:3A:02:E8:D0:D0:A4:1E:B5:B9:32:CB:4F:5D:2F:69:29
Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1
Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1
Certificate serial: 02E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft
Manifest number: 02E4
Signing time: Sat 29 Mar 2025 01:36:00 +0000
Manifest this update: Sat 29 Mar 2025 01:36:00 +0000
Manifest next update: Sat 05 Apr 2025 01:36:00 +0000
Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: b6n5Ee5CkngPVfTalKE7n1JxfzYSFSuQ10xWK8ui1jw=)
2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: 70Ak7XUB7BzXLnPmthZhxV5PKsUoGnrCyTGpT6zqlJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743 (0x2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195661
Validity
Not Before: Mar 29 01:36:00 2025 GMT
Not After : Apr 5 01:36:00 2025 GMT
Subject: CN=67e74e80-a5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:04:30:94:ee:60:b5:95:6a:40:69:c3:4f:
04:b4:96:83:2e:95:c2:49:e1:eb:0c:71:a7:63:26:
6c:1a:6b:1f:4b:0e:1c:02:3d:07:a9:9f:c2:ef:10:
c3:bf:55:61:d3:f9:7c:07:ee:5f:76:99:f9:f0:9e:
08:ba:31:e5:b0:b7:65:ad:13:d4:a4:07:f3:1f:95:
77:1f:b5:07:6d:32:8c:1e:ae:8b:72:2e:8d:1c:98:
0b:3f:21:62:91:70:ba:72:cf:58:e9:a7:9e:e4:f1:
d4:0e:c4:19:46:00:08:8f:d2:f3:44:d0:41:1f:b3:
62:5c:ce:fd:1a:77:9f:94:f7:cb:c7:e7:1f:89:23:
c1:87:0b:fa:0d:a3:44:98:73:6c:52:02:b4:32:66:
6c:49:f4:32:d8:dc:9f:dd:44:c0:37:2f:4c:1d:5f:
6c:15:73:41:27:f5:c2:34:9f:d6:19:a7:30:67:c6:
d5:79:fd:53:25:80:42:3d:a1:42:27:ae:06:85:67:
2e:ee:11:c4:e1:fd:3a:d1:c7:23:39:44:b7:ca:61:
f3:08:ed:8e:ea:0e:99:96:f7:b5:4b:c1:f4:ce:22:
0b:b0:ee:d9:8e:6a:70:62:81:d4:63:b3:db:45:02:
e1:ef:c1:89:5b:3d:d3:bc:76:b8:20:63:05:4b:d1:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C2:4C:AB:3A:02:E8:D0:D0:A4:1E:B5:B9:32:CB:4F:5D:2F:69:29
X509v3 Authority Key Identifier:
keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:1e:26:2a:30:0d:0b:51:85:7d:e3:d2:31:60:3e:49:b3:c3:
5c:60:31:02:87:f9:2c:88:b6:79:67:80:a2:25:96:40:db:c4:
91:63:d5:17:9b:bb:29:bf:b4:b4:1c:f9:4e:09:34:bc:2e:92:
e2:1b:85:c8:58:98:d9:31:02:59:48:37:e8:e7:3b:53:e2:78:
de:cc:89:2e:89:9b:3d:d2:c6:80:14:ab:fb:57:10:73:72:d3:
9f:05:ef:bb:cf:e0:54:3a:55:9c:0f:21:7e:b5:a6:79:eb:21:
70:7c:c2:aa:13:35:33:a4:4f:90:c3:1a:0c:3e:55:aa:9e:0a:
e9:31:e3:31:b2:62:8d:54:3a:c5:58:43:44:2c:59:dd:e7:87:
a6:16:7c:b6:d9:74:cd:7c:48:1a:c3:41:0a:6d:9d:12:51:bc:
af:08:df:b7:ba:ff:11:b2:63:da:3e:6a:c9:7c:96:c3:03:cd:
07:ee:b3:c2:c5:ec:e6:ab:a1:29:11:a4:c3:0d:43:fe:e0:28:
2b:9d:a4:cc:a3:7b:43:e3:d3:5d:e7:19:87:1d:48:68:a6:8d:
8a:39:8b:07:60:9d:20:dd:bf:fc:aa:39:14:09:f7:74:c0:29:
76:1f:c6:b6:70:9a:df:6f:ce:9b:61:ce:bc:84:c4:10:47:06:
32:93:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:59:33 2025 by rpki-client