Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
File: e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json)
Hash identifier: hjUKL4JkmWZU2HEwpXblbN+gbT7zxCnhFxDoEv7utEo=
Subject key identifier: A2:3D:72:D6:34:49:58:3D:A0:A0:40:79:DF:B8:95:5C:53:73:2C:01
Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2
Certificate issuer: /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
Manifest number: 014C
Signing time: Sat 29 Mar 2025 03:39:45 +0000
Manifest this update: Sat 29 Mar 2025 03:39:45 +0000
Manifest next update: Sat 05 Apr 2025 03:39:45 +0000
Files and hashes: 1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: ljmbN09bSP3VDwl+s6toWwFCf24KVBypuKKwLAW0Euc=)
2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: 1DTHOwSIeyOlP/85nvDSKsIu+CBj2ErQg5LShUWz4KA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C35C9
Validity
Not Before: Mar 29 03:39:45 2025 GMT
Not After : Apr 5 03:39:45 2025 GMT
Subject: CN=67e76b81-0cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:05:18:1e:d0:92:e0:91:7e:1a:90:97:f7:
88:43:4a:02:0c:87:50:4a:41:e7:2a:b5:cb:6c:37:
db:23:35:2f:37:18:ce:8d:0a:1a:c5:49:da:9a:a5:
3e:59:3e:ba:ce:aa:11:89:70:05:d0:d9:9a:d8:0f:
8b:64:11:e7:2f:6e:d9:67:38:4f:f9:6d:bf:c0:8e:
b7:62:1b:16:0f:df:e2:a1:07:c2:a4:47:38:26:a3:
fe:dc:29:2d:e7:3f:f5:c1:8d:cb:51:f2:47:69:7e:
5a:7b:d5:ad:56:af:bc:d6:6c:0a:73:68:ec:c2:71:
d9:27:48:da:63:54:7f:32:d0:db:d5:be:25:05:5f:
8d:f8:7c:e7:5b:a9:61:f6:5c:1b:85:b4:a0:2b:04:
11:3f:75:c7:c2:44:b2:3e:cc:ea:f2:c5:f3:5b:02:
c8:d4:d4:5c:78:43:5d:a8:cf:6f:da:11:11:41:ac:
ce:68:f5:ef:ff:b6:68:d6:f8:7e:c6:30:4d:dd:4e:
b4:72:19:0f:a8:eb:50:b0:e3:b6:8b:8f:7f:e3:a2:
f1:65:61:ad:b9:2d:04:a8:33:8d:c3:1e:ce:ab:0d:
48:2f:d5:36:66:9d:48:08:a3:99:31:08:56:94:fc:
75:de:2f:be:da:e8:0c:df:a3:da:2e:45:83:53:4d:
0f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3D:72:D6:34:49:58:3D:A0:A0:40:79:DF:B8:95:5C:53:73:2C:01
X509v3 Authority Key Identifier:
keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:5f:6b:ac:88:48:3e:4c:f0:80:b9:62:9f:63:6d:06:32:9b:
7b:10:89:d4:f9:01:3d:09:c2:91:ee:ed:cb:c6:1e:71:fc:22:
46:a4:fe:ba:01:a6:b7:b7:44:42:c2:5e:95:59:c8:9b:55:e5:
31:b8:58:67:11:28:cb:26:9b:2d:6e:7d:a1:40:45:7b:75:c0:
21:2c:51:00:9e:40:66:f1:5a:4b:24:c8:6f:73:0f:ed:7d:af:
10:d1:d7:6c:57:bc:72:39:8c:d4:65:6d:45:e6:0e:4e:34:ff:
58:1e:23:ca:38:80:44:45:f2:1b:69:7c:c9:6d:50:9b:ea:5e:
38:1c:23:fc:8d:cd:87:c2:e2:4c:c2:0e:07:59:b8:cc:59:45:
4b:70:55:02:90:9a:6d:27:6b:ba:6c:fd:7d:92:e0:18:1e:6a:
88:23:4b:d2:8f:a0:ae:29:c0:b5:e2:a6:ea:b9:c2:09:63:0d:
92:37:c6:84:6d:83:64:2d:09:6e:c7:01:1d:df:0e:5c:71:69:
21:8c:88:28:aa:b5:e6:36:45:90:90:73:8a:fb:e7:53:dc:08:
af:29:b9:31:31:09:fc:b2:e4:60:69:f4:b6:22:39:82:08:e5:
c9:33:b3:08:05:d0:64:77:15:fe:81:61:8c:86:93:25:03:e5:
ed:76:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:59:48 2025 by rpki-client