Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
File: RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json)
Hash identifier: euboCvcBUOL7BRfxHRJYVRHCpgTCL5mX2VKazM8pYE0=
Subject key identifier: 73:BB:F7:2B:F9:6E:8F:7A:48:46:72:07:EB:85:2C:0C:37:00:22:BD
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial: 1274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
Manifest number: 126D
Signing time: Fri 28 Mar 2025 17:13:41 +0000
Manifest this update: Fri 28 Mar 2025 17:13:41 +0000
Manifest next update: Fri 04 Apr 2025 17:13:41 +0000
Files and hashes: 1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: 6DopDjRa9ZURxBxMHlDu8Yf+yJSXwy8Go/Hz5WtrWj0=)
2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: 4z3M5HiueuxSghgC74Ahy0/LyTUAqKseWIGsOSeClyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4724 (0x1274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C5FE
Validity
Not Before: Mar 28 17:13:41 2025 GMT
Not After : Apr 4 17:13:41 2025 GMT
Subject: CN=67e6d8c5-f100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b1:67:f4:a8:6e:21:62:95:07:8f:56:6c:7e:
54:26:d5:b4:6b:d0:ce:84:0b:04:ba:c7:d1:93:7b:
16:93:0a:e4:5f:ca:0d:ca:00:3e:fe:05:77:11:82:
30:c3:33:d6:8d:da:5d:2b:db:07:22:70:a3:64:39:
69:64:d6:f9:73:73:9f:8d:68:08:1c:8e:d2:59:36:
e1:0d:e9:90:9a:73:f4:4e:41:f0:39:a3:4c:40:60:
54:07:e0:89:34:16:6a:e6:5d:72:02:8e:98:87:a6:
fa:db:b9:f9:18:63:15:8f:ee:db:a6:36:4a:4a:40:
70:4c:75:a5:c1:2b:91:69:f0:e4:ae:44:76:00:b4:
91:91:c2:ef:61:cd:6e:de:73:f2:fc:48:e6:05:8e:
01:e1:62:74:ed:02:21:38:84:e8:7f:37:9c:15:ff:
82:6b:25:d2:11:df:48:45:bd:a7:47:83:86:31:2c:
81:25:fe:ed:64:e2:2a:0f:ff:e4:aa:75:81:66:35:
88:ed:23:6c:58:bd:6d:00:98:15:85:2b:ce:0f:83:
7b:c3:8c:5e:bf:41:73:b9:a1:fe:85:61:44:00:d7:
58:10:dd:55:d0:b4:07:d0:6a:ed:89:7c:d1:8b:c8:
e8:1f:3a:29:ae:e6:c8:18:d6:77:c5:0a:49:c0:93:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BB:F7:2B:F9:6E:8F:7A:48:46:72:07:EB:85:2C:0C:37:00:22:BD
X509v3 Authority Key Identifier:
keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:36:eb:8d:c9:4d:67:48:6d:be:31:24:62:f6:92:3f:05:e6:
47:b3:4e:1b:c9:d4:c7:d7:30:49:96:84:52:b3:b0:c3:73:24:
3d:25:f3:ce:e8:14:01:a6:e7:e0:7f:e4:99:c4:26:62:46:6b:
13:a4:9a:93:76:78:c1:26:c7:47:88:97:88:65:f0:7e:cb:2e:
21:ad:ed:4f:06:84:54:ca:dd:98:19:49:6c:d1:11:c8:4f:ab:
1d:db:4f:1a:a7:46:f2:35:8a:bf:e0:f5:84:1a:32:cb:72:f3:
f4:e9:96:20:91:25:eb:8c:1d:28:0c:d7:7d:c1:03:8d:b6:c8:
d2:fa:bb:b4:dc:2b:74:70:6a:f9:2b:03:60:e0:f2:28:a4:51:
f6:48:15:7a:9c:c9:96:a2:5d:5d:9c:ec:05:8e:a1:bf:5d:99:
9e:8e:b8:ea:ac:78:45:17:5c:0d:09:c0:e8:5d:0e:d7:2f:0b:
c1:e1:bb:3f:de:b9:a4:ea:fc:5a:38:3e:50:bb:d7:a3:ca:82:
ee:f6:56:80:18:17:e7:5f:92:b0:1a:d0:3b:4e:83:cb:f7:29:
1a:ac:89:ad:18:8e:fa:1e:49:55:3d:e2:29:2f:fb:57:0f:b8:
eb:62:40:46:98:8c:2f:5e:6f:2b:f3:f5:9a:c0:97:fa:87:95:
c1:dc:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:42:39 2025 by rpki-client