Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
File: n2T-UJklN_sLQOUvnPrDEMonGRg.mft (raw, json)
Hash identifier: TdkiIFCej914jbNfUJ52deyPRwzaKfTI79TnNLaYeMo=
Subject key identifier: B2:B4:3A:E2:9F:F0:3A:F0:07:62:0F:E8:23:33:25:15:BD:68:12:CE
Authority key identifier: 9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18
Certificate issuer: /CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
Manifest number: 01AB
Signing time: Sat 29 Mar 2025 03:28:55 +0000
Manifest this update: Sat 29 Mar 2025 03:28:55 +0000
Manifest next update: Sat 05 Apr 2025 03:28:55 +0000
Files and hashes: 1: n2T-UJklN_sLQOUvnPrDEMonGRg.crl (hash: Fdjo9Ii70gT9Hs1K3NRIMAeUU1KHPwnnc4CCmjfe/l0=)
2: A508D320BBC711ED8DF23C40C4F9AE02.roa (hash: +L1qHY5R3sGaecxS0ZsJwCFSa4qv+kQF5VrxKLTYgCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A57F8
Validity
Not Before: Mar 29 03:28:55 2025 GMT
Not After : Apr 5 03:28:55 2025 GMT
Subject: CN=67e768f7-13d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:3e:9e:9f:7f:68:3d:89:4b:bf:18:a2:53:
54:2c:f6:35:3e:71:49:6d:69:3f:88:78:76:bc:82:
45:fb:60:4a:f8:f4:d6:f5:71:e9:fa:53:89:80:11:
78:fe:af:83:ba:77:f3:70:d7:b4:f0:54:75:47:5a:
c3:47:65:f4:87:a4:8d:cb:44:66:70:bd:2f:15:c9:
1f:a3:8f:27:8f:b5:41:94:3a:20:da:f7:de:3c:1d:
c4:90:a7:20:c9:bd:a0:84:c9:9f:1d:75:0f:5d:66:
f4:4c:a7:2c:f2:52:e1:42:ca:0e:f0:b7:95:d4:78:
f6:af:c2:ab:03:7e:1b:22:17:a5:04:8f:8e:03:a4:
bc:85:96:9b:50:30:8f:3a:d2:56:1f:fc:0d:37:2c:
ac:93:a3:d5:42:31:1a:da:a0:ef:53:43:0b:1e:39:
81:21:f8:94:0a:3e:d9:dc:06:83:82:fa:ea:3f:3e:
9e:c0:d4:ab:e7:21:25:91:20:db:a2:cb:11:ad:5a:
2b:5d:60:b8:d4:35:ce:19:6c:79:a6:2f:c2:a2:9e:
ac:b5:54:16:46:c9:a2:70:e2:d5:26:4a:7c:a3:3f:
2e:2b:53:1f:20:47:eb:e2:7a:73:37:31:54:84:74:
8a:f9:84:9d:47:49:e4:96:8c:b1:b6:ca:ec:1f:9f:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:3A:E2:9F:F0:3A:F0:07:62:0F:E8:23:33:25:15:BD:68:12:CE
X509v3 Authority Key Identifier:
keyid:9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f2:3c:3f:2c:a3:af:5a:85:cd:bb:eb:84:e9:4b:43:c5:fc:
d8:a5:62:d5:86:d0:ef:67:a0:6c:d0:6b:6c:dc:62:d9:aa:93:
e9:f4:c1:6d:2b:89:09:6c:98:56:10:ca:34:2d:f6:d7:52:1d:
dc:fe:28:c8:6e:ff:38:67:f2:8b:da:0f:20:dd:aa:96:2f:18:
0c:44:d6:31:6c:36:b9:89:86:72:98:81:c2:42:09:fc:b7:a1:
69:55:0c:9e:ac:92:b6:8c:1e:19:08:c9:be:88:7b:31:ba:f6:
42:f3:3e:7c:e4:46:99:17:54:0b:4b:5a:22:0a:5f:23:04:fb:
02:32:a7:fd:52:db:0a:fd:f2:61:03:fe:d7:9d:af:c6:1c:25:
01:51:1c:cc:31:67:1e:74:ec:31:2c:47:de:33:55:bc:51:1b:
39:be:8c:1e:84:27:ac:ac:ba:ec:b9:8b:70:39:b7:a0:21:e7:
5a:bc:9b:5a:f8:73:7d:2c:39:71:f8:2d:df:c0:a5:6d:c8:6e:
33:33:4a:9e:28:98:68:18:15:e1:1f:1e:58:b3:e0:6f:3d:21:
45:49:ca:98:83:5c:cc:da:0f:b4:51:84:0d:c1:6b:06:a9:58:
80:35:50:5a:95:90:c5:9a:e8:5e:50:1c:a5:2d:64:b5:58:83:
79:1c:70:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:42:51 2025 by rpki-client