Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json)
Hash identifier: d5+X+v4ZhVNjL2jnSksolH0fFEM8tBQtk0ldKGBb/Pw=
Subject key identifier: CB:48:51:C6:29:6E:23:23:1D:7B:24:22:C5:03:98:58:02:ED:1C:40
Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45
Certificate serial: 248E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
Manifest number: 2479
Signing time: Fri 28 Mar 2025 15:52:15 +0000
Manifest this update: Fri 28 Mar 2025 15:52:15 +0000
Manifest next update: Fri 04 Apr 2025 15:52:15 +0000
Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: hTkCFHdGAIu+/5gWajtbRIoK8vAm23LzwJoCuy5in7A=)
2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: CE+jGBv1hmvPpnjcj/lZMkYxYBXBElFQLbmvrCZoU3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9358 (0x248e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43F4
Validity
Not Before: Mar 28 15:52:15 2025 GMT
Not After : Apr 4 15:52:15 2025 GMT
Subject: CN=67e6c5af-a2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:72:0b:ad:74:4c:af:c9:af:8f:8d:14:c0:
0d:5b:3b:3c:d5:02:6e:4c:f5:ca:07:84:92:29:11:
a6:8f:9d:6a:da:c2:7f:a9:a7:3b:15:99:6e:ee:52:
58:06:a2:18:77:e1:da:ff:f9:d3:52:6b:2b:62:ca:
0d:be:a2:8e:39:42:40:ca:9e:39:d3:0f:25:a2:91:
16:e9:48:1f:05:e1:45:44:00:ee:62:63:e1:06:c9:
f9:88:80:3f:d5:57:a2:00:d2:94:4d:0e:1a:e1:9a:
05:c0:94:79:56:af:61:3a:c9:da:18:9c:71:a7:95:
a7:cf:08:d3:44:29:d7:24:2d:78:f7:94:74:c1:3d:
4e:b7:b9:38:eb:f8:4c:2a:a2:cf:ad:46:72:a7:b9:
7d:c0:51:b1:26:1a:53:ab:98:b8:50:90:13:9f:79:
37:3e:d8:7e:6c:19:2e:af:ca:df:04:ba:2f:b3:ad:
7b:22:b6:83:fe:47:b1:f9:e5:70:ba:ff:b8:60:1b:
5f:63:d6:3f:06:b0:45:9e:c8:a5:0d:bf:da:09:2b:
0c:57:83:a3:a4:83:22:24:92:2b:2a:d4:c4:91:b3:
3b:ff:b1:5b:a8:1d:7a:e3:e2:2d:34:70:8b:1a:83:
6f:9c:d0:cb:b6:4f:58:4e:ca:0a:ea:bb:9c:19:ed:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:48:51:C6:29:6E:23:23:1D:7B:24:22:C5:03:98:58:02:ED:1C:40
X509v3 Authority Key Identifier:
keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6f:58:33:f6:47:87:86:4a:11:af:4e:6f:02:58:19:a2:fb:
5f:2b:00:71:e1:3b:d0:be:fa:de:9c:8b:5d:b6:2d:ae:e8:ae:
23:42:3b:9d:9a:de:c1:23:a7:8d:14:f6:3b:77:7a:c5:9a:1b:
f0:73:a8:4e:17:17:f6:83:dd:21:d4:f1:1f:1a:b8:0d:d3:04:
45:ce:7d:21:a4:a3:7e:5f:40:49:f6:40:ad:6e:2e:c9:0b:b2:
96:86:8e:2d:6f:cb:00:d2:df:29:b6:69:45:fd:30:61:3a:91:
73:95:7a:c6:98:c5:cb:dc:51:92:e8:f9:d6:da:02:bc:a3:8c:
c2:02:bc:fb:64:a0:65:44:d1:e0:aa:fe:3a:76:84:cb:5e:3f:
0f:a8:57:9a:b6:70:1d:30:77:97:12:41:5c:0a:cf:2c:ea:ba:
b4:3c:f2:cf:9d:ee:88:cd:d6:f1:73:cc:27:03:4b:0c:b6:da:
0c:58:ce:7b:ad:35:1c:85:a8:21:96:e2:df:62:9d:44:ee:40:
05:3d:d5:cd:3d:aa:b1:b4:27:78:84:1a:ab:63:05:14:55:b2:
d4:ce:3e:32:38:34:77:f8:54:af:b2:fd:4d:4d:6d:e0:0e:05:
37:de:3e:f0:1a:b0:90:ab:51:fd:b3:a1:f5:28:58:3d:29:0b:
fc:85:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:19:54 2025 by rpki-client