Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
File: 556bUhJjfjPKXcthdpCc4ZYhumQ.mft (raw, json)
Hash identifier: JhwPImwRASPmlS9e7ldyx3KV8LihsbdC+lcNzMYwPO8=
Subject key identifier: F9:9E:E7:9F:EE:9D:39:AC:F3:31:39:65:93:94:6D:E8:0C:2F:BB:6F
Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
Certificate issuer: /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Certificate serial: 0436
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
Manifest number: 0430
Signing time: Fri 28 Mar 2025 17:10:33 +0000
Manifest this update: Fri 28 Mar 2025 17:10:33 +0000
Manifest next update: Fri 04 Apr 2025 17:10:33 +0000
Files and hashes: 1: 556bUhJjfjPKXcthdpCc4ZYhumQ.crl (hash: Ra5uNlHkx+FjabocaBTlUmvI+i7nKegnmp9UGRWqt6Y=)
2: B7E86B40595311EC9ECF510BC4F9AE02.roa (hash: I3AqCAvryjVR50FDwOB2eOkU4GLBFJs3HZ3gb9KEimo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078 (0x436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E
Validity
Not Before: Mar 28 17:10:33 2025 GMT
Not After : Apr 4 17:10:33 2025 GMT
Subject: CN=67e6d809-18b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:5a:8a:e2:ad:b1:ef:e1:04:5a:64:49:ac:
e0:c9:50:a1:cc:5c:db:c7:c7:37:29:ec:20:a5:dc:
e7:4c:1e:89:33:1e:12:c5:42:3d:70:3d:da:2c:8d:
9d:eb:bf:d8:0e:a8:c2:62:09:07:f4:90:64:d8:1c:
4c:3e:b7:aa:96:d0:52:d9:12:18:ad:07:c7:99:18:
18:96:89:3d:69:8a:9c:68:97:a0:3a:53:09:be:48:
3f:6e:d7:41:84:bc:a6:46:8f:55:9b:cb:a7:5d:aa:
c5:c1:81:a0:4f:71:98:5a:68:14:ec:99:c3:70:ac:
f6:ef:0d:44:c2:45:7c:73:d2:3c:94:a6:57:71:d3:
41:10:74:53:8b:0f:42:55:d2:ce:5d:50:7f:09:ab:
ea:67:7f:72:37:b7:80:61:51:e3:83:20:d7:61:33:
19:58:b2:48:01:21:b2:b9:86:bd:82:0d:41:bd:bd:
fd:e1:04:6e:d8:95:a5:e6:bf:46:bf:02:ab:27:53:
28:bf:d5:db:f4:a4:28:51:b1:4c:cf:f1:45:6c:d7:
08:79:be:53:55:f3:64:e7:b4:fe:4c:5a:bf:b2:d0:
8a:03:f4:0c:90:82:e2:ab:26:a6:91:28:f4:db:c6:
e2:3c:db:da:1a:8a:ca:5a:34:40:57:b0:f3:be:76:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9E:E7:9F:EE:9D:39:AC:F3:31:39:65:93:94:6D:E8:0C:2F:BB:6F
X509v3 Authority Key Identifier:
keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:dc:10:e4:81:8f:76:d9:0b:08:83:79:16:41:25:ad:dc:fb:
8c:4d:cb:f4:9c:51:e1:64:6b:7b:1f:8b:55:39:60:67:38:3f:
07:6a:44:b1:17:0d:5e:f8:15:38:53:07:91:d5:2b:09:3a:53:
f2:4d:2d:63:2c:37:af:3f:6c:a1:9e:29:75:72:51:6e:71:45:
66:5d:22:40:26:e8:b0:e6:99:3f:42:44:04:5a:f4:5c:19:4f:
49:f0:5f:f8:29:18:7d:f9:93:75:57:d0:30:20:f5:5e:eb:bd:
c3:a9:85:40:36:d9:e5:de:71:9a:c9:d3:e1:6a:dc:09:28:28:
f0:1f:4a:39:66:49:dc:6a:e7:f6:08:36:8e:8f:95:ea:a8:2d:
00:e4:c7:9c:98:85:52:eb:37:3a:03:2a:37:9e:4d:54:60:b9:
da:89:88:1b:c6:2a:25:75:6e:81:c4:1f:62:50:c4:54:52:48:
9e:83:b1:2d:eb:1a:96:cc:df:3a:e1:02:21:6a:ce:e9:38:d1:
71:f1:74:f8:05:76:45:79:bf:78:71:ef:88:1f:6a:16:ea:45:
f4:d0:3d:7d:66:8e:2d:0a:e8:50:98:4f:05:0d:d0:14:d7:d8:
a3:ad:08:f6:17:30:5d:d3:39:71:46:5b:98:05:23:e3:28:7e:
6c:07:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:09 2025 by rpki-client