Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
File: n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json)
Hash identifier: 752Drzn080yJZDXi6Em2sCMc69SSB9VqZiJxpqCpH3A=
Subject key identifier: 1B:97:96:B8:19:13:8C:05:8E:23:50:36:20:02:F7:70:86:D1:FD:75
Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
Certificate issuer: /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
Manifest number: 01F9
Signing time: Sat 29 Mar 2025 02:17:43 +0000
Manifest this update: Sat 29 Mar 2025 02:17:43 +0000
Manifest next update: Sat 05 Apr 2025 02:17:43 +0000
Files and hashes: 1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: RFp/7ezH4UKJ//YtNe+YBvz9iUPPgZEffDwqNl313L0=)
2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: xPxOBcWiHSTAw3zQ7FKJslNCxgd0Xv3rmMHCdbL8JBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B393
Validity
Not Before: Mar 29 02:17:43 2025 GMT
Not After : Apr 5 02:17:43 2025 GMT
Subject: CN=67e75847-364c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:85:a3:1a:8d:4a:bd:85:fc:6a:6c:b8:85:
c6:e5:3d:cf:34:c9:30:c3:2c:18:ed:bc:1a:0e:ae:
9e:31:c9:3e:d0:b4:c9:09:04:e3:6b:61:1d:a4:5b:
50:3e:fa:56:89:06:8b:ff:d6:6a:0f:8e:a5:67:8d:
37:83:ee:a6:1e:86:d1:9d:a0:20:52:d6:3e:ea:ee:
a0:b6:97:e2:51:cf:86:6e:99:8a:45:79:e3:63:e6:
19:cf:75:d0:96:b6:3f:03:ba:7a:4e:2f:99:04:bc:
ae:44:72:6a:39:49:e4:cd:e7:0f:2d:83:81:e2:81:
f1:bd:cd:a6:e6:bd:58:8e:c7:40:c3:ff:3d:eb:06:
c5:ac:d0:f1:ef:34:c7:98:b0:8b:ce:0c:e7:04:c8:
56:9e:26:d8:e0:51:ff:59:d0:15:3a:3d:b3:94:78:
db:ad:e0:da:3f:0b:f9:ef:ed:e2:27:c4:ee:cd:63:
cb:c6:a4:94:34:be:18:89:0e:09:8b:b9:38:f0:18:
71:c9:c1:1e:41:1a:6c:be:3b:8f:2b:2a:2a:22:45:
7c:42:5d:f5:66:68:7e:d9:3a:d2:63:6e:74:eb:46:
72:aa:de:ee:e3:90:19:f7:73:49:e5:7d:88:99:0c:
16:24:42:36:64:0a:41:34:51:98:04:ff:34:45:f8:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:97:96:B8:19:13:8C:05:8E:23:50:36:20:02:F7:70:86:D1:FD:75
X509v3 Authority Key Identifier:
keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:2a:f6:6d:4f:d9:45:88:01:fd:d3:57:2f:5e:9d:20:7b:8e:
20:63:e1:f3:9b:97:59:c8:e2:50:ec:6d:37:2d:24:2a:5b:50:
e5:c8:2a:66:6a:ea:4c:ba:1c:aa:c8:ac:18:e7:bd:21:b0:77:
f5:e7:2a:86:5e:e3:d8:a5:f2:e7:b9:8e:ff:06:5a:62:20:f7:
2c:af:3a:51:d0:30:f8:33:4f:0d:98:0b:a6:f0:31:42:a3:82:
87:02:cd:f1:2c:9f:93:7a:c8:49:d7:9e:10:6e:5c:64:19:64:
13:3b:6c:b1:83:82:bc:94:a1:2e:c1:a1:c8:c3:84:c0:50:b3:
a6:7b:5b:c4:be:50:e6:dd:d4:10:dc:20:8d:98:0b:1d:4c:76:
26:46:3b:c1:be:9c:45:e8:81:cb:81:18:59:6f:c9:be:41:d3:
4b:e9:96:7d:84:99:6c:57:04:4f:cc:b7:b7:3a:09:9f:57:e4:
c0:3a:97:a4:7e:83:b4:63:da:ba:90:0e:bc:37:3c:b9:3a:72:
83:eb:8d:06:47:b9:4a:99:75:0c:79:29:3f:fa:57:10:f8:f5:
6f:8f:2d:71:aa:9f:d6:00:ff:dd:36:ec:4a:e4:72:73:5f:e4:
9f:80:85:b4:aa:a8:b5:4b:70:20:a1:f2:50:7a:4a:a4:7c:f2:
12:62:67:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:28 2025 by rpki-client