Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft
File: 67oUOyhmNxjNjH2j9jEAmpgE7l8.mft (raw, json)
Hash identifier: TqGBxoeviyE/DU6KZjc8SP7lzfqyUTOD5tgvi3zAPlE=
Subject key identifier: 06:FA:31:5E:0C:9E:AD:A8:34:E3:94:36:F7:D6:35:B0:C5:1A:47:6C
Authority key identifier: EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F
Certificate issuer: /CN=A919676F/serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft
Manifest number: 0176
Signing time: Sat 29 Mar 2025 03:18:45 +0000
Manifest this update: Sat 29 Mar 2025 03:18:44 +0000
Manifest next update: Sat 05 Apr 2025 03:18:44 +0000
Files and hashes: 1: 67oUOyhmNxjNjH2j9jEAmpgE7l8.crl (hash: XY/tmMlqCIA2LhWwLLs0d8RMySHzqJA1TcVDuVMhSKQ=)
2: D277F83CD3A411ED8C51160FC4F9AE02.roa (hash: xeDK9WlWOxddaeQUzhh0jJMfgRYN6KWkgPqKssZPync=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919676F
Validity
Not Before: Mar 29 03:18:44 2025 GMT
Not After : Apr 5 03:18:44 2025 GMT
Subject: CN=67e76694-3c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:ad:b2:b5:39:da:11:ac:9b:d4:e4:92:79:
dd:c8:98:64:a2:77:41:52:bf:e8:fd:80:76:9e:ae:
3f:b3:3a:5e:32:df:4a:ee:27:00:49:60:ca:7b:d4:
95:21:ae:96:15:34:76:08:95:f5:79:c7:d4:da:af:
c7:bb:8d:76:27:71:78:7f:40:b5:5b:f7:3a:cb:bb:
d6:f6:eb:59:de:9f:64:d8:61:68:63:74:bf:d7:71:
ae:f5:56:52:8b:d5:59:fc:ec:18:a1:5f:d7:a6:66:
0d:90:43:01:6e:08:ac:0c:84:d2:67:c9:f2:58:23:
bf:19:42:3e:e8:4a:61:21:6c:5c:05:1e:73:db:ca:
82:1b:a8:87:3c:eb:08:f5:a5:78:01:d6:96:ce:bd:
64:c4:1e:06:6f:1f:06:3d:20:4a:a2:83:60:f5:5f:
bc:64:d2:c7:ad:76:bd:eb:c5:19:22:b7:a8:00:5e:
75:cc:7c:e7:29:35:1a:9c:f4:ab:4a:38:b0:e3:c4:
e7:d0:59:78:cd:c1:4c:ba:05:49:3f:6b:58:44:ea:
4f:38:b9:55:e4:9f:12:1b:fd:3b:78:22:e2:de:0b:
c7:50:a0:de:49:ca:d9:f0:f6:e3:fb:d1:37:50:0f:
90:f7:36:0a:da:7a:e0:05:15:d1:8c:79:64:8c:78:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FA:31:5E:0C:9E:AD:A8:34:E3:94:36:F7:D6:35:B0:C5:1A:47:6C
X509v3 Authority Key Identifier:
keyid:EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b8:81:df:ec:8e:89:57:46:21:aa:55:f7:d1:88:11:c2:d9:
a0:e3:e8:02:22:b1:46:26:96:ac:ec:84:c1:d3:48:6f:d7:a8:
45:c7:53:2a:5c:aa:46:ab:00:21:db:6b:2b:3c:06:71:9f:4a:
ab:bb:df:6f:28:a6:5a:b8:e3:29:53:77:7d:8c:31:74:01:06:
ea:f6:18:d5:6c:eb:b2:80:73:64:64:88:6a:8a:10:67:b3:6a:
0d:d8:8c:8a:1b:a4:b5:64:24:9c:b2:f1:61:d6:a1:4b:e2:be:
2d:94:8d:2b:c9:50:ac:e8:61:fa:eb:63:a1:7c:58:6d:6c:70:
12:b8:13:d9:a2:67:38:f7:21:6b:2d:ae:eb:83:a1:f1:f8:9d:
c6:5b:20:64:83:af:76:8c:1d:37:87:a0:56:56:b5:70:55:fe:
52:b7:95:c3:13:00:61:dc:e4:7c:88:93:0e:65:4b:33:f4:a9:
ee:66:72:84:28:26:af:33:f3:5c:92:97:c0:93:71:05:f4:9f:
64:5a:19:20:cb:d5:5a:f3:92:a5:02:d2:f9:b0:d0:65:cd:89:
c1:e0:21:ff:8d:95:47:54:24:48:f7:e3:2b:05:34:60:68:37:
14:00:db:80:fc:4d:3e:db:04:f4:d4:34:23:7f:da:9c:a1:b0:
08:e2:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:08:44 2025 by rpki-client