Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json)
Hash identifier: bFOSfs6WPyOycDkFq94nkT/2pLbNR1sn+fbOWu67yzQ=
Subject key identifier: 5A:CC:80:DE:7F:12:FE:0C:0D:27:D9:93:18:78:8B:45:6B:16:F4:8F
Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
Manifest number: 25
Signing time: Sat 29 Mar 2025 07:08:33 +0000
Manifest this update: Sat 29 Mar 2025 07:08:32 +0000
Manifest next update: Sat 05 Apr 2025 07:08:32 +0000
Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: pRQl8lzVoThVn912vj1j1/zWjVvytNqtJWjJW8QFTkk=)
2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: IV+yFZlpYAcj8P+yyk8bYHAo0MmcigDE6SILVv3+Jug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CFF
Validity
Not Before: Mar 29 07:08:32 2025 GMT
Not After : Apr 5 07:08:32 2025 GMT
Subject: CN=67e79c71-16c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:8c:57:a1:c2:a9:33:96:0b:04:ef:7a:73:
b2:1b:f3:b4:7a:1f:14:16:3a:10:b1:a3:9b:0f:f8:
2c:c6:2b:a9:26:ea:e1:48:74:4f:b1:aa:b9:e2:2f:
78:d4:fe:ca:e1:f2:3f:6c:99:f3:b2:d6:40:14:c6:
2a:0c:5c:e0:8e:83:bf:ad:6e:54:4b:a5:47:0f:94:
bd:2a:06:71:2c:35:56:a8:3a:13:cd:38:aa:40:45:
35:5a:49:c6:35:bf:c4:91:a7:dc:6b:74:7e:54:e1:
21:0f:9e:66:e5:0b:54:07:9e:14:9f:cc:31:4f:70:
61:86:18:88:a0:10:c8:ac:e3:db:b0:00:89:7a:de:
af:7d:97:60:7e:18:0b:8b:c6:f6:00:ac:69:55:fb:
f3:b4:e2:f5:d6:b8:d6:83:f4:24:fd:61:ca:52:29:
0f:6e:51:90:aa:5f:03:46:42:a1:af:52:28:86:61:
93:8f:de:3e:66:8c:ba:87:ae:df:e7:7d:8d:e8:da:
8c:5f:f3:83:36:74:7f:bf:5c:c5:56:af:60:1c:20:
2a:a1:6e:8b:43:c1:c0:de:1d:47:07:f5:74:1f:75:
c5:80:54:b7:dd:02:4e:3f:a6:0a:36:3c:aa:ac:12:
07:55:33:7b:28:81:5e:79:8f:b2:25:82:6c:78:7a:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CC:80:DE:7F:12:FE:0C:0D:27:D9:93:18:78:8B:45:6B:16:F4:8F
X509v3 Authority Key Identifier:
keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:92:73:d0:b6:a0:cb:fb:a2:75:66:d5:92:33:8a:80:ba:a4:
5c:e8:14:b6:11:ba:fe:f5:b9:3a:f5:56:4d:a3:cd:2b:e2:97:
ab:e0:e7:16:d1:40:f7:da:2d:f7:2a:e6:8b:b0:b9:d8:75:10:
84:da:ba:3a:ab:a2:7e:49:34:46:27:1b:e3:54:5a:1c:49:0f:
30:8e:9a:23:94:6e:a3:fe:c3:60:af:63:77:b8:a9:60:1d:ae:
ab:5f:04:77:48:34:80:5e:03:9c:54:6d:ce:87:e2:73:3a:10:
79:65:10:cd:f8:49:b7:8d:a3:bd:a2:42:56:ac:1e:b7:2e:3a:
f2:8e:0c:ac:c6:4b:a1:8e:44:56:47:d3:9a:e5:2a:9b:37:46:
f7:2c:44:91:bb:78:7c:92:4e:06:c3:39:54:61:b9:2f:cb:53:
84:2a:8e:13:ff:ce:8e:30:64:05:db:14:cb:d6:92:f2:91:e2:
35:ed:4c:0d:f7:56:57:57:52:24:6e:34:c8:af:1c:77:b3:0d:
21:56:c8:6d:90:a3:92:f9:6c:50:91:46:03:57:0b:6f:81:4d:
91:e5:ae:30:c8:88:b6:b9:4c:45:b8:36:ae:e0:d6:09:bf:c1:
c3:9b:ad:12:ee:b8:dd:49:c6:4a:03:d6:ca:b9:91:d1:9b:9c:
fc:56:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:21:51 2025 by rpki-client