Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
File: nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json)
Hash identifier: 2ElSUo7mhnOyigbXvSzDPuL33boHMx/0ieibSfyhWso=
Subject key identifier: 87:9C:31:54:07:03:53:B1:CC:3C:F7:BE:4F:D6:79:CA:D2:E9:EF:EA
Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
Certificate issuer: /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E
Certificate serial: 0A91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
Manifest number: 12D7
Signing time: Fri 28 Mar 2025 19:44:47 +0000
Manifest this update: Fri 28 Mar 2025 19:44:47 +0000
Manifest next update: Fri 04 Apr 2025 19:44:47 +0000
Files and hashes: 1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: 6/X9KbQTmM1GNGpSrKqHZ2o7z7z7qBsniqtmrTSRfqQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2705 (0xa91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6D8
Validity
Not Before: Mar 28 19:44:47 2025 GMT
Not After : Apr 4 19:44:47 2025 GMT
Subject: CN=67e6fc2f-81be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:72:cf:7b:70:ec:09:91:dc:b5:28:ee:97:
6e:76:e2:0c:f5:dd:4a:e7:7b:7e:44:aa:af:02:39:
fa:c2:07:3c:31:0c:5c:c5:30:3f:86:bf:9d:ee:01:
43:4f:a5:27:52:6f:c4:fd:51:f5:4e:08:af:92:6e:
e8:f8:45:53:85:bd:fe:9e:fa:f1:aa:03:10:66:18:
25:85:79:08:3f:3a:a9:d2:56:01:e1:1a:aa:9f:1b:
c7:c3:eb:51:57:6b:98:73:9a:d3:65:9a:50:e8:33:
d0:d2:43:86:c3:c3:64:52:d2:db:8f:e6:ca:46:4b:
12:88:ea:4c:38:bf:b2:ec:ab:41:fd:f0:03:a7:b9:
43:24:c0:13:04:17:64:e7:c4:27:05:38:89:f3:8c:
e5:17:08:81:e4:c7:33:df:65:4f:d6:2a:69:bf:84:
9a:60:c8:24:a1:2b:2e:f1:22:18:e3:1f:30:2d:9e:
2e:c6:d2:6a:8b:6d:20:1e:9e:9e:cc:32:c1:03:19:
66:7d:92:99:c7:ac:25:05:03:eb:55:23:e2:7b:cb:
15:b9:42:7c:20:a0:b9:12:4e:56:d4:59:76:2c:20:
bd:d2:98:2e:5a:c2:ae:c7:6b:f4:93:ed:d7:65:8c:
53:8c:3a:36:7c:98:52:ae:7b:38:c7:ba:c4:03:38:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9C:31:54:07:03:53:B1:CC:3C:F7:BE:4F:D6:79:CA:D2:E9:EF:EA
X509v3 Authority Key Identifier:
keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:30:f9:2f:3f:4c:8e:76:83:38:56:f9:d2:33:76:dd:f4:4b:
7e:2f:65:21:bd:c1:5f:f1:09:eb:bd:21:bc:c1:4c:ad:89:42:
d0:b4:4a:25:dd:d2:b9:d9:7c:bc:21:74:8b:6e:96:14:21:08:
6c:09:7d:04:e0:f0:f7:5b:b1:80:fa:71:95:b5:c1:14:70:71:
28:50:05:88:e2:0f:d5:2a:ee:dc:ba:5a:c3:07:c9:32:e2:b0:
4f:77:a5:a0:91:f1:33:ad:9b:b4:56:09:04:88:8a:b0:08:6e:
fb:49:22:e9:7c:ae:4a:49:84:8c:60:96:52:05:13:f4:c5:0f:
33:6d:bc:a0:84:a1:c0:2d:52:5b:e6:58:ad:6f:f4:d9:93:d9:
ef:94:b3:1b:8f:bd:ba:7f:68:24:59:d0:fb:cd:ca:8b:f3:d5:
72:5a:e5:a5:ba:12:e7:ee:55:77:6d:ba:be:70:3d:2a:2d:12:
6d:6b:9d:b8:2d:07:42:c5:33:2b:37:ea:b8:c4:c4:68:96:81:
af:fa:02:36:dc:3e:3c:4c:63:bb:79:0f:8a:18:48:97:17:9d:
26:32:60:94:61:4d:9b:ec:5c:15:c9:d7:d9:23:1c:70:8b:0c:
95:62:6b:c0:89:7c:55:dc:34:be:43:e4:f3:af:91:83:80:19:
17:d2:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:52:17 2025 by rpki-client