Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier: WqVk7Fjrm5OHhPO/tP2e06Zq71qWQLVipzXYXhcPtOk=
Subject key identifier: 52:02:F7:FF:B2:E5:79:4C:F5:78:59:0F:25:3A:E8:F3:D1:CC:C9:A9
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number: 2E
Signing time: Sat 29 Mar 2025 07:01:01 +0000
Manifest this update: Sat 29 Mar 2025 07:01:01 +0000
Manifest next update: Sat 05 Apr 2025 07:01:01 +0000
Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: ERzbk+NLFlY+sOVMCeVlTQvXcY0LnMdHikyYXn/c+nI=)
2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: KQyWlLwg95xKEA7eXDtYxt189xq6hS1CzXkzk6a37uA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC238
Validity
Not Before: Mar 29 07:01:01 2025 GMT
Not After : Apr 5 07:01:01 2025 GMT
Subject: CN=67e79aad-5cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:17:c8:c9:54:d5:b1:b2:6a:f8:1a:f9:64:
18:05:56:17:3e:aa:a7:d2:bb:27:92:b5:34:94:1d:
86:32:6c:ad:62:59:e8:a2:03:73:3d:5b:9d:22:43:
3b:4c:f9:d2:40:ce:81:b4:15:c8:d2:47:3d:55:3b:
64:96:0c:76:d4:37:d1:e0:8d:2f:cf:a8:7e:4c:e9:
15:99:e9:d9:71:e0:05:fb:3d:f1:cc:6e:95:27:3a:
69:f6:d6:30:4f:06:93:3b:ec:4b:d0:e6:35:b9:86:
66:4c:b7:dc:03:2a:59:ef:c5:e8:3a:cb:05:c5:24:
0d:95:76:f3:e3:7a:df:63:5b:81:60:cb:1d:af:9e:
6a:c5:4a:27:86:71:dd:ca:fc:29:dd:57:67:c0:76:
5b:a3:21:6e:1a:5b:58:df:5d:bd:9c:a3:5d:1b:d7:
7b:71:77:36:0c:2e:29:b0:1e:23:ac:1d:32:b7:9b:
4a:b2:52:c4:47:4c:0d:e3:18:be:7f:37:23:37:08:
5c:f3:68:2a:40:16:e8:78:ea:0e:8f:9d:c3:5d:1d:
85:5a:da:fd:9c:57:b8:24:f7:13:fe:78:9a:33:a3:
20:79:15:7d:1a:ed:5a:13:1f:6c:b9:4b:9b:d0:4c:
15:b8:0b:1f:0a:22:ad:ee:67:4b:1b:84:89:9b:8d:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:02:F7:FF:B2:E5:79:4C:F5:78:59:0F:25:3A:E8:F3:D1:CC:C9:A9
X509v3 Authority Key Identifier:
keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:f8:9e:70:21:fc:67:ee:26:32:99:b5:fd:35:93:54:d7:ba:
e2:e7:41:8c:dd:dd:00:0f:3e:59:3f:8e:54:d2:51:83:2f:ac:
e6:fa:3a:41:eb:94:a5:07:4a:08:74:7f:27:cb:ff:f0:19:0b:
0c:d1:9e:c0:8b:bc:3b:81:1a:f0:99:18:72:c5:72:de:a1:25:
a5:e4:b4:0b:11:8b:b1:05:a5:75:4b:cb:dc:2f:8a:aa:b5:8e:
59:77:f4:4b:94:1d:5a:80:08:0d:10:a9:b7:1d:81:ba:17:1b:
bc:38:08:0a:a7:41:46:e4:43:4b:71:e6:b3:10:ca:1b:6b:1e:
e7:2c:23:6e:0b:fc:d8:fe:d3:8f:b7:e8:52:9c:20:4e:70:27:
69:4f:f3:d9:d7:ca:d6:da:c1:ac:40:54:5d:99:9c:06:e2:ce:
65:fd:19:64:a2:d1:b2:10:cf:74:ad:29:20:64:e2:97:34:bd:
24:16:7b:06:0f:ca:93:be:16:c5:a1:ca:d5:0c:1a:2a:c7:40:
7a:47:cd:b1:b8:f8:45:a6:4f:f1:61:25:fe:96:8f:fa:4c:c8:
d5:3f:b2:fd:e0:75:f8:66:e9:5f:62:db:70:52:07:95:ee:c8:
7d:82:f2:28:75:ee:53:fc:87:eb:2f:d5:0f:5c:82:ad:fd:cf:
35:43:c0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:42:17 2025 by rpki-client