Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json)
Hash identifier: B9ZMsj1B1bUhr5GMLsPdFan3cSCOnfsiYR2XnToC1P0=
Subject key identifier: 9F:CC:0C:B0:B8:1C:94:F3:87:F7:03:76:8C:B5:42:1E:FD:A5:6E:29
Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7
Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
Manifest number: 016C
Signing time: Sat 29 Mar 2025 01:32:42 +0000
Manifest this update: Sat 29 Mar 2025 01:32:42 +0000
Manifest next update: Sat 05 Apr 2025 01:32:41 +0000
Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: bLcL8BLMj2/n13QulqyDUmJQwcfMRZCIqDJyMV/4WVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9324
Validity
Not Before: Mar 29 01:32:42 2025 GMT
Not After : Apr 5 01:32:41 2025 GMT
Subject: CN=67e74dba-9287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:41:4c:3e:ff:1b:93:d6:41:2a:4c:fe:ac:
5d:d8:9e:6a:28:74:89:33:85:b3:70:97:bb:27:97:
cc:dd:c8:87:98:c8:65:44:f9:f5:94:fa:3f:70:fe:
74:ef:3b:49:be:51:e5:e8:c3:ce:31:e1:59:7e:c2:
49:e8:e2:1b:ff:6c:98:25:da:6d:c6:f8:ff:94:2b:
a6:c5:a8:26:f6:f8:92:e1:d3:c2:8c:b7:52:f6:a0:
ea:25:df:e4:b0:3b:55:d1:16:2b:72:75:f3:0a:d8:
21:ee:a7:84:c1:e9:29:3a:7e:35:35:40:7f:2d:96:
2b:18:e1:76:ce:2e:19:48:37:09:03:df:82:bd:da:
c8:79:83:88:20:a8:03:8a:67:47:fd:52:4d:68:db:
f6:78:ea:67:a1:16:96:44:9d:b2:39:8e:22:11:eb:
00:e1:d6:67:05:f1:07:6c:a6:86:57:64:61:d1:14:
86:7f:58:9a:35:f0:c0:16:21:46:34:48:c4:51:c2:
14:2e:b7:90:ae:bf:44:c7:f0:55:d9:c6:3b:92:be:
b5:53:b7:68:1e:5a:b9:c7:b2:97:81:ae:fc:2f:bc:
fa:88:37:1e:32:8d:e1:22:d7:b8:22:3f:22:4a:be:
a4:74:cd:71:01:0e:2f:f7:c8:c5:10:2d:07:54:1d:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CC:0C:B0:B8:1C:94:F3:87:F7:03:76:8C:B5:42:1E:FD:A5:6E:29
X509v3 Authority Key Identifier:
keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:d5:2c:ba:f6:6e:5d:88:58:dc:0c:7a:b1:7c:c9:79:e3:e3:
9f:a9:ae:8f:fb:9c:ab:53:9c:17:59:70:26:cb:93:11:04:d3:
44:f2:64:31:c8:9f:05:50:c4:29:a4:58:c9:c3:99:8a:54:af:
bb:40:4d:c8:84:e8:fb:bb:6f:0c:e7:a8:ea:78:68:ac:96:ce:
0c:60:c0:f2:de:73:07:f5:44:9b:57:1e:ac:d8:7c:3d:73:2d:
2f:8a:74:6d:b0:8d:12:1a:81:a5:ca:c0:8f:33:ea:7f:d5:36:
7b:6f:f8:4a:35:4d:83:97:a1:fc:3a:85:eb:cb:99:d0:ba:a6:
58:54:53:ad:f1:f8:fc:d6:8c:8c:b4:c6:63:1c:0a:66:1e:61:
86:95:21:01:53:18:87:da:10:c5:3d:d4:56:1e:37:4b:e6:d0:
0b:8c:50:a0:c0:b5:d3:ba:19:5c:6e:fa:a0:26:09:45:a5:89:
df:b9:14:b8:86:0a:6c:eb:f3:68:60:f5:37:58:a9:8a:58:eb:
0d:e2:e6:ec:e5:4a:6e:50:16:f8:64:6e:99:fe:ad:c4:9a:75:
d6:73:cf:82:34:e4:b7:09:aa:bb:32:49:a8:31:52:86:19:55:
92:e0:24:e9:62:54:f8:82:5a:9a:64:6a:2b:f0:dd:d4:92:a3:
74:c6:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:57:47 2025 by rpki-client