Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json)
Hash identifier: jMudVzznQm+GnpAa/lvHJg0UwKRzNJeofDo0My3jT/E=
Subject key identifier: A6:5B:1B:75:05:9F:00:BE:5D:36:DB:F0:8A:55:9D:60:3F:9C:0C:31
Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33
Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133
Certificate serial: 0DA8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
Manifest number: 0D9E
Signing time: Fri 28 Mar 2025 18:04:35 +0000
Manifest this update: Fri 28 Mar 2025 18:04:34 +0000
Manifest next update: Fri 04 Apr 2025 18:04:34 +0000
Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: UA4ez5+HUnMgfwgVIQfsyYzhxyFkNDAOpCgIIZ2BSNY=)
2: B75F392ABBAC11E9A8355F6DC4F9AE02.roa (hash: nQHZt5It8SSChaUZjXVPwYBj8P2XFpk/UxoBS65SjME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3496 (0xda8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB095
Validity
Not Before: Mar 28 18:04:34 2025 GMT
Not After : Apr 4 18:04:34 2025 GMT
Subject: CN=67e6e4b3-c0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:d6:1f:7b:9c:92:c8:69:1b:7a:33:19:4a:
eb:fc:62:73:32:65:f8:5c:4e:44:02:57:55:92:6a:
d6:37:c0:8d:7e:ea:b4:8e:ee:73:11:01:ab:0c:27:
e3:48:ff:48:58:57:bc:2c:9a:a5:f2:30:1a:71:d7:
33:9b:d4:c2:1f:3a:b8:a6:f2:36:12:47:70:d8:1c:
17:ef:38:70:0f:57:a1:75:56:39:2d:0e:b4:3b:00:
8f:9f:11:1e:d9:3e:eb:94:26:94:e5:32:d9:47:24:
93:b6:92:bd:38:8d:ee:ed:ac:5b:9b:7b:8b:37:20:
27:26:10:45:3d:50:56:12:3a:16:fe:03:40:ab:31:
a7:1a:af:3b:74:f8:a0:c2:b6:79:b4:03:e4:af:46:
7f:2e:98:cf:08:87:b5:63:46:6e:59:0e:c7:64:03:
a4:5f:55:c9:eb:9e:0f:06:10:8f:48:d7:f7:75:f9:
e3:d8:c5:ad:ca:56:93:54:c5:ec:c9:f0:c4:2f:c7:
19:3d:05:cf:76:f4:b9:a7:aa:8c:2e:d1:cf:df:2d:
1a:0a:33:ab:86:d3:0a:1e:7f:b3:64:38:eb:09:99:
a6:f0:55:de:50:1c:8b:c0:1c:5d:00:0e:a9:82:fa:
68:a4:86:0b:1f:95:11:3c:33:25:2f:63:be:8a:39:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5B:1B:75:05:9F:00:BE:5D:36:DB:F0:8A:55:9D:60:3F:9C:0C:31
X509v3 Authority Key Identifier:
keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:b1:be:5e:57:2d:d4:4c:5e:55:e3:bd:17:ce:b9:6b:86:e7:
a3:48:16:9c:4f:23:3c:66:40:8c:c3:53:eb:69:45:e6:fd:9d:
3a:1c:4b:29:09:fc:b6:79:c4:88:5e:23:4f:8f:71:e1:24:b5:
5f:3d:e0:57:f1:78:a9:35:fd:6e:e1:ef:1e:d9:97:77:e9:77:
40:c2:6d:9f:55:f1:e1:75:9d:1a:be:2c:34:8a:d5:0e:1f:2c:
04:df:c1:f7:42:b4:cc:37:e2:44:fb:59:4f:80:72:e1:5b:f6:
74:ca:23:0c:b1:f8:14:81:eb:8f:80:65:51:e8:70:5e:ee:d8:
97:4b:9f:a6:05:52:a6:27:c6:53:52:0b:5d:18:2b:e4:4b:07:
4b:3d:52:4f:2a:ac:25:d2:0e:f5:0d:14:3e:b6:ff:39:98:fe:
c2:2b:8a:b6:d6:b0:61:6c:56:9c:13:2b:5e:79:79:1f:c3:a9:
7a:99:a7:b7:fb:55:ec:17:c0:c4:ba:60:77:9a:af:32:96:a1:
e1:26:5f:a0:3e:59:b8:7e:ea:eb:88:ae:38:88:59:2b:b4:66:
3c:0a:e4:c2:71:41:4f:de:9a:c9:3c:a6:d6:93:00:af:f4:14:
46:b1:bb:8f:da:7b:47:ee:03:73:db:69:15:e2:99:2e:75:74:
5c:f9:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:34 2025 by rpki-client