Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json)
Hash identifier: pK9Yn3YAFCY21f9D+93qPCLBl2uVpdpTK2ZPFxYQZ90=
Subject key identifier: FA:07:66:85:55:DB:40:99:AE:C3:AC:61:37:16:CC:52:2B:CF:8D:15
Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Certificate serial: 02E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
Manifest number: 02DE
Signing time: Sat 29 Mar 2025 01:37:06 +0000
Manifest this update: Sat 29 Mar 2025 01:37:05 +0000
Manifest next update: Sat 05 Apr 2025 01:37:05 +0000
Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: kJsizCfMOUqnGg/hvM6FybJCXa9S3xNfn6ohhUyn6o4=)
2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: eVqCt6jrx+C1JB/X7OKow2VBehCM/YMsmg/5OjY9iwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738 (0x2e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199AFB
Validity
Not Before: Mar 29 01:37:05 2025 GMT
Not After : Apr 5 01:37:05 2025 GMT
Subject: CN=67e74ec1-95dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:4e:67:6c:71:f0:58:13:64:77:4c:45:82:
be:db:f4:f2:ab:fd:30:13:b2:4e:6d:34:ba:da:94:
84:be:10:78:f3:bc:d8:4a:b5:f5:21:9e:53:73:5f:
76:55:26:e6:ed:f9:b5:3d:51:79:6a:8f:d3:92:a1:
4f:c1:1d:ea:d5:a6:be:9e:84:25:25:fb:95:a1:35:
70:76:fe:6c:dc:7c:36:9f:b6:a2:63:fe:4d:38:e1:
9f:6e:81:60:de:73:c7:1a:ff:92:fb:73:14:50:ad:
77:e9:d4:3d:75:6b:0d:5d:d0:05:ca:45:1e:56:cf:
77:c7:58:a7:59:73:78:5e:bb:97:7b:26:1a:03:6a:
35:d6:27:8c:c1:16:52:4e:6b:b8:10:d6:c1:73:6e:
6c:2c:96:cb:ca:49:df:6b:02:b3:aa:ec:ac:3f:ac:
9c:f7:71:1e:6b:61:88:d3:82:40:6c:16:e8:b5:2e:
aa:10:2a:83:0d:b9:b9:3f:c1:56:75:15:be:3e:ca:
92:52:18:6a:f7:ca:a1:4e:e0:c3:4d:02:aa:3c:ae:
fe:a8:6f:b5:7c:01:8c:9d:7b:c3:9e:55:b9:f4:6e:
fc:ca:b3:8e:12:c7:5d:f2:28:6d:7e:af:d5:4d:d9:
94:31:ca:01:bc:d7:9d:40:c8:2d:d3:27:5d:5f:49:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:07:66:85:55:DB:40:99:AE:C3:AC:61:37:16:CC:52:2B:CF:8D:15
X509v3 Authority Key Identifier:
keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9a:2b:b6:fe:52:76:ad:c5:de:4a:39:9c:92:3c:3e:98:9c:
8f:83:a9:f5:11:e9:1d:aa:00:ea:1d:d4:c4:29:10:a0:1c:1b:
5e:b5:86:9c:e8:ec:68:c5:b3:f4:42:01:65:48:b3:81:40:a6:
44:87:2e:95:a4:92:56:03:47:01:71:86:97:df:c3:1e:ec:24:
d8:1b:f3:d7:d5:22:0c:34:a2:d5:ab:ab:14:53:82:f2:76:27:
5c:c8:58:0b:7b:6d:a8:2a:0f:db:10:0f:6f:20:14:e2:75:d9:
cc:e1:f1:86:db:f1:36:e8:0f:3b:d4:08:1a:d3:ac:01:c2:9c:
07:f7:ff:d4:59:79:37:81:37:59:d8:cf:28:6b:0e:74:6e:b5:
9e:47:ff:4e:89:6b:be:03:16:b5:c5:c0:38:95:0a:dc:3c:4c:
1a:2d:59:84:df:d4:b2:35:21:bb:46:56:d1:73:bf:d1:7f:2e:
8f:c7:ff:ce:ab:37:72:85:65:7f:32:76:87:a6:a2:13:ef:4a:
cc:c4:ac:22:fc:d5:67:d7:dc:1f:59:30:26:1a:ad:ba:12:0b:
d7:61:fd:da:e7:19:44:09:b5:e9:69:42:2f:27:9f:ea:61:53:
72:9f:cc:45:15:a3:63:5c:d2:36:1f:94:1f:42:a0:37:b8:5c:
c9:a6:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:33:27 2025 by rpki-client