Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
File: e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft (raw, json)
Hash identifier: SK6x9ZiitF5ypcNqPtIkFatcRFu/CxZ10uLjgG9J1Us=
Subject key identifier: 70:34:16:F8:C1:E8:92:7F:7A:30:85:46:40:C1:47:48:33:FE:E1:63
Authority key identifier: 7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4
Certificate issuer: /CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
Manifest number: 3C
Signing time: Sat 29 Mar 2025 06:53:08 +0000
Manifest this update: Sat 29 Mar 2025 06:53:08 +0000
Manifest next update: Sat 05 Apr 2025 06:53:08 +0000
Files and hashes: 1: e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl (hash: svkWqb9tOkTfmSwFk9wSoiDR1Wt7XB503Lc99XZIftg=)
2: 265BE218B69F11EFB2CFE86CC4F9AE02.roa (hash: vLV5ILypZ5+6/MGlQ4HJDangMObqhJh2n/QaZfHAWOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C83A
Validity
Not Before: Mar 29 06:53:08 2025 GMT
Not After : Apr 5 06:53:08 2025 GMT
Subject: CN=67e798d4-361c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:26:dd:bb:f1:21:1e:e6:4e:1e:c6:f4:08:
db:31:e3:be:18:74:2d:7b:43:12:3f:60:7b:00:bd:
08:8d:50:e2:1e:7e:f5:65:3e:27:fe:1c:2d:e2:b0:
15:fa:58:8e:7c:2a:2a:8c:39:2f:d5:63:57:41:1f:
a6:14:43:e5:14:49:28:36:e7:55:ab:f6:85:bb:2f:
28:b9:41:79:f9:37:1a:6a:da:03:e8:32:6f:4e:2c:
b5:32:7d:df:9b:2a:28:b5:70:aa:af:5d:f1:f3:a4:
11:02:00:44:e0:64:0e:10:ec:2c:54:6d:e1:39:7f:
72:87:db:43:78:0d:5c:01:d2:f2:12:5b:42:7f:9a:
c1:51:7b:bf:42:ec:79:73:8b:4b:eb:0d:fd:d9:2e:
74:4f:6a:ea:15:35:1d:dc:0f:cb:ee:20:c6:fd:95:
b4:06:fe:be:66:d5:fa:09:56:2b:86:2f:c3:da:2d:
3e:57:75:c0:3c:5e:ae:df:8f:88:c0:b6:94:c7:66:
e3:10:ff:53:c7:03:d5:22:0d:ef:b2:0d:60:61:66:
f4:e5:91:bd:f8:af:ec:bf:22:06:69:e9:2e:a7:88:
0b:8f:52:0d:76:27:8c:3b:90:0e:19:b0:c7:38:69:
b7:3c:b7:b9:0c:29:34:01:c8:46:ec:89:68:74:4b:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:34:16:F8:C1:E8:92:7F:7A:30:85:46:40:C1:47:48:33:FE:E1:63
X509v3 Authority Key Identifier:
keyid:7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:86:7f:b8:a3:8f:db:2e:94:c7:7d:79:7a:35:da:ee:ef:b9:
a6:8b:4e:99:e5:50:44:d4:77:c3:da:cb:4e:23:2e:52:5f:12:
fc:ec:ae:4a:d6:e7:ff:b0:c1:d1:d1:a5:7e:e9:7d:8f:e3:7e:
de:59:0c:77:55:42:1b:c8:70:24:c9:a5:77:96:2e:0d:6d:d6:
57:6a:53:0d:8a:d4:03:b1:29:0a:31:ea:19:73:a4:6f:99:7d:
49:5b:95:c5:b1:0c:6b:2a:d0:1a:a6:dc:9c:c0:6a:83:61:a1:
85:5c:ea:61:50:da:48:0d:01:85:b3:65:23:21:9c:f2:95:33:
ca:54:6e:f9:8c:f3:62:2c:87:9a:ee:b5:d8:e6:2c:8e:e5:0c:
a0:bb:7f:a2:bd:cb:bb:2a:80:a2:fe:51:55:a7:bb:8f:77:2e:
57:fe:9c:e5:2f:21:e0:a6:34:29:a1:60:c9:e6:00:36:d2:f8:
89:8f:46:e8:62:5a:ac:00:23:aa:37:10:b5:3f:5f:86:c1:43:
b4:1d:64:36:4e:7a:ec:e4:ad:ce:41:c5:79:40:1b:b6:99:b2:
5a:65:cb:45:a3:38:f3:af:ce:0a:12:a8:ca:f4:2f:8e:32:4c:
14:70:e2:f0:a6:e3:38:26:30:45:11:30:46:20:4d:1a:f2:a3:
6f:62:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:34:57 2025 by rpki-client