Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json)
Hash identifier: kAPcxKKL9fLV87so7lUpPOgRVLjJyOA7UL3YMeKHrp0=
Subject key identifier: 43:75:05:9C:43:A6:3D:CA:62:1F:BB:C4:84:85:2E:91:44:87:52:3B
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial: 07C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
Manifest number: 5FBA
Signing time: Fri 28 Mar 2025 14:15:24 +0000
Manifest this update: Fri 28 Mar 2025 14:15:24 +0000
Manifest next update: Fri 04 Apr 2025 14:15:24 +0000
Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: C2G5r3cS62A5f/UN6vBVOT9p64d4L6l9ov7wCDwmOnA=)
2: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: FqFiDIcegnSEYf0rjDFvLA1E5hLrfJwjUSudPY/6PhE=)
3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: SCnihDYbmc4GiaIEvX2j7M8vuw8f64Zz9GgFXob0XUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984 (0x7c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA
Validity
Not Before: Mar 28 14:15:24 2025 GMT
Not After : Apr 4 14:15:24 2025 GMT
Subject: CN=67e6aefc-2beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:73:91:f2:ad:f2:0d:2a:2f:5d:2c:be:61:
2c:6e:40:6e:d0:ce:57:b6:9b:58:ef:c6:6b:5f:47:
15:1d:e5:9d:1d:42:99:ad:a2:3c:71:61:a2:37:b3:
6f:4e:0e:98:c4:cd:3d:eb:8f:00:23:76:1b:1d:23:
fe:48:df:14:9f:c8:06:97:d0:22:ce:9b:10:1a:7d:
fd:4c:e6:4e:7f:b9:98:32:d3:42:b7:39:92:cd:f4:
31:e0:4e:00:c9:f4:4e:23:ad:b0:a6:40:ea:45:7e:
f4:95:1c:6e:80:5b:cf:5d:e1:94:fd:8d:94:17:85:
07:5b:29:70:92:15:1e:b6:1c:fd:1c:b8:4a:1d:fd:
d2:56:84:ce:15:4e:08:20:b0:35:0c:3d:11:1c:39:
25:1e:d2:10:1b:6f:cf:67:43:68:58:6b:c1:ba:54:
f4:ec:29:2c:0a:e2:c3:c3:db:1a:a2:bc:6a:47:5f:
01:ae:46:0c:ef:66:dd:94:9e:e7:ea:c2:5c:fe:8a:
7e:ce:1b:32:29:8d:5d:6a:09:df:54:12:59:18:42:
b4:79:b9:86:55:78:2e:05:ae:69:e7:24:64:a2:a3:
8f:11:34:28:95:1f:5e:3a:ee:45:fc:b2:2c:7b:f9:
97:af:bf:1b:73:66:8b:fd:9f:34:4a:e7:55:dd:7f:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:75:05:9C:43:A6:3D:CA:62:1F:BB:C4:84:85:2E:91:44:87:52:3B
X509v3 Authority Key Identifier:
keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6a:0a:f2:40:73:4e:d2:2e:05:32:32:f5:d6:b3:6a:14:ea:
23:48:70:e2:9b:69:d9:9c:1c:20:3e:80:04:d7:a4:b2:c1:17:
51:4b:8e:a1:a5:7d:34:6a:6c:7d:e4:3f:ca:3a:a7:93:c9:8a:
aa:5d:b0:a4:9b:de:98:48:45:88:f1:c4:56:e9:fc:01:41:20:
73:5c:74:78:99:2b:21:4b:b0:fa:2a:51:eb:7b:6a:f9:48:d9:
e7:53:b7:42:bd:67:c7:2f:95:4c:f7:e1:8c:fd:38:23:48:a1:
6f:eb:9d:b5:66:d0:9b:32:61:7d:07:6c:bc:fd:71:c3:8e:44:
02:a2:bd:0e:32:a6:4a:8c:9a:ee:07:01:3e:7f:88:89:01:e9:
3e:9e:89:db:90:03:cb:98:c1:e0:3f:92:80:fb:31:0d:47:23:
e3:ed:c5:70:e0:8d:7b:b5:c3:84:3c:b2:03:2e:f6:0a:60:64:
2b:d2:87:db:b5:65:eb:75:c8:a4:11:bf:30:81:aa:b0:e6:d3:
d8:23:d1:5e:56:a5:f9:66:88:b1:2a:49:d6:65:6c:3d:71:dc:
4d:ea:c6:04:7b:28:ff:12:50:28:f9:fd:3d:dd:72:01:84:a7:
d2:bf:4a:d8:45:b6:71:40:1f:8b:03:01:f6:ea:ec:55:ad:13:
b8:21:8f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:47 2025 by rpki-client