Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
File: Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json)
Hash identifier: Va5Dfg28RV6NIrE4ecbERro6stjASKL1NKjcqVWIeLw=
Subject key identifier: DD:23:3B:9F:27:58:16:87:F8:5A:15:8E:37:EE:16:F9:C6:AA:CE:43
Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
Manifest number: 0219
Signing time: Sat 29 Mar 2025 02:13:46 +0000
Manifest this update: Sat 29 Mar 2025 02:13:45 +0000
Manifest next update: Sat 05 Apr 2025 02:13:45 +0000
Files and hashes: 1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: gcfnW56fvz6FhwBVWCwMUxZwR44pGhL2j5tnz5P2i/Q=)
2: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: LQxrSI0KNNYbihu8S9SLx+zDE07D+HfcizadCn96Tg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C97F5
Validity
Not Before: Mar 29 02:13:45 2025 GMT
Not After : Apr 5 02:13:45 2025 GMT
Subject: CN=67e7575a-95bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:1a:ad:b4:3b:ba:ab:be:30:9c:46:0f:9e:
7b:af:5b:4f:34:34:68:81:29:a4:67:ed:e2:22:4b:
94:98:b0:3e:c7:60:e2:5d:b0:96:51:20:5e:62:bb:
82:8d:dd:eb:b1:82:e0:bf:71:58:8e:d3:dd:96:62:
84:cc:6a:4b:b0:27:9b:12:cb:97:7a:96:1e:ee:dc:
db:4a:fd:f9:10:1e:16:54:35:d7:41:7b:42:cc:44:
30:4c:41:bf:1d:b9:4b:13:13:3b:a9:38:66:07:f1:
14:91:69:a2:6e:3c:c9:54:2c:01:66:0b:1a:aa:6c:
6d:0a:85:fb:ee:8e:e9:d3:b4:55:a7:7f:1c:bb:12:
52:43:2a:bb:ba:e6:7c:1c:ee:e3:da:d1:5a:2a:4c:
8d:79:98:54:b3:19:79:77:a4:fd:97:89:fa:d2:9b:
5a:80:f6:cb:4f:d4:f8:b6:fd:c5:4c:9a:86:18:9a:
ed:eb:2f:c1:41:92:4b:4c:83:f3:50:f8:6d:14:6b:
d3:5a:e1:af:14:0f:08:f4:60:b6:31:3f:9d:a9:8d:
6f:4f:a7:eb:ba:63:db:d0:6f:7e:fa:a0:21:5f:d8:
57:1f:51:3f:be:7d:fb:a8:6d:c3:82:80:49:ab:4d:
41:ae:49:5d:9c:3a:a2:2b:db:9c:4e:f7:21:2f:3f:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:23:3B:9F:27:58:16:87:F8:5A:15:8E:37:EE:16:F9:C6:AA:CE:43
X509v3 Authority Key Identifier:
keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:e1:74:93:d4:a3:04:6e:09:e2:a7:4f:31:49:a6:4a:dd:1b:
0d:15:05:44:6f:40:8b:95:03:c6:e9:24:a7:96:8e:52:1a:d3:
6f:08:76:52:c7:fe:bf:de:b9:fd:52:d7:d8:df:f7:9c:ba:25:
bc:cf:71:bb:ec:f0:d7:25:16:b0:da:14:e3:fd:c9:3b:1f:1e:
31:b4:f1:e9:21:90:31:8f:d7:b1:57:f7:a5:3b:28:70:99:0d:
6d:b8:76:14:28:a5:88:22:ee:5b:3c:3b:f2:62:67:f3:34:8c:
02:ef:bc:f8:aa:1c:de:bb:a1:f1:c0:5a:a1:27:e2:a2:fb:5a:
2c:d4:db:4d:fb:4b:ab:a4:1f:42:61:70:9a:2e:97:e4:72:6d:
5d:39:be:06:35:bf:43:35:72:09:88:72:d9:df:78:8c:5b:32:
56:6b:2d:98:6e:8a:96:4b:03:f1:ff:fe:01:41:eb:d9:e4:7c:
1a:23:65:f9:1a:e8:4d:91:03:5d:11:8a:77:5a:8e:9a:08:54:
94:04:d1:09:94:48:9a:bf:9f:25:c5:f6:b1:c1:67:de:4d:68:
5c:cd:b1:32:71:0d:1b:bb:eb:40:36:c3:42:f1:08:9b:9b:50:
79:19:e5:1f:ac:5e:ec:90:08:9b:0e:15:fe:57:e7:c1:3a:49:
3d:b9:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:02:23 2025 by rpki-client