Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft
File: ntLhokBcme5158OQPfckDKqr-yU.mft (raw, json)
Hash identifier: iOWhNc07GTZrnc4KBSoOzRw+qAWD4ZoiO9PrZuxkvPE=
Subject key identifier: CC:89:2A:DA:E8:E9:06:73:0F:DB:93:1C:87:E9:15:63:26:18:FC:EF
Authority key identifier: 9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25
Certificate issuer: /CN=A91B98F0/serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25
Certificate serial: 0A71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft
Manifest number: 0A58
Signing time: Mon 19 May 2025 01:25:25 +0000
Manifest this update: Mon 19 May 2025 01:25:24 +0000
Manifest next update: Mon 26 May 2025 01:25:24 +0000
Files and hashes: 1: ntLhokBcme5158OQPfckDKqr-yU.crl (hash: tLICXyceVzDlmeiO4MH4Vj3ap3+YU5xEYU7YO2vtwVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2673 (0xa71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B98F0, serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25
Validity
Not Before: May 19 01:25:24 2025 GMT
Not After : May 26 01:25:24 2025 GMT
Subject: CN=682a8885-dd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:5b:8d:1c:1e:1a:e4:96:36:d1:de:e6:9b:
37:df:aa:e6:01:2a:63:de:06:e5:0b:41:94:40:3c:
40:db:a3:55:13:09:9e:3d:51:2c:75:8c:ae:c7:4f:
57:8c:ad:f9:c8:42:a7:8f:d2:c4:fb:84:5c:8d:25:
93:af:e1:ce:f2:cc:70:57:3a:91:2d:c4:70:8e:82:
bf:4c:95:c2:fe:f7:4d:21:32:84:3a:80:fc:5c:71:
74:e8:db:01:21:87:18:56:55:5b:f0:3f:ed:e0:3c:
bb:7b:4f:33:c8:4d:1d:05:ec:bd:5c:ed:01:c2:f8:
a0:72:3d:36:e9:45:b0:3c:dc:76:7c:5f:8f:d6:36:
ee:3c:d5:81:5d:b7:c1:48:80:a0:22:49:9a:9f:fa:
6b:fd:ca:ad:c5:44:cc:ce:d1:39:d2:87:fc:a9:c3:
35:d3:4e:90:82:65:a4:d4:4b:59:b6:b5:ef:85:fe:
a3:b4:05:4e:6b:1d:d5:e4:44:fc:10:0b:c7:21:17:
bf:db:3e:34:88:a2:27:ca:18:32:cf:bc:47:7d:a4:
a5:c1:c5:a7:f7:73:ba:b3:01:e9:78:44:20:76:1d:
41:23:c1:78:e8:a1:c6:e5:fc:b2:eb:a5:fd:80:c7:
55:7a:09:c6:a0:d3:f9:48:10:16:4b:c5:6c:89:e8:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:2A:DA:E8:E9:06:73:0F:DB:93:1C:87:E9:15:63:26:18:FC:EF
X509v3 Authority Key Identifier:
keyid:9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0a:5b:15:a3:fc:4b:a5:99:d8:7f:43:54:c4:97:95:86:c0:
b9:a8:fa:4d:41:64:6a:ce:df:59:06:2a:99:2d:b7:05:27:10:
87:72:02:70:5e:7e:8a:48:31:8c:c8:b3:09:74:7a:b6:13:70:
9f:0a:bd:aa:54:92:1b:f1:a1:84:40:eb:89:f2:c5:69:eb:67:
56:22:05:a2:cc:26:07:5c:b7:4b:15:c8:2b:34:1b:49:31:09:
3f:1f:42:17:a3:6b:8a:81:70:3f:ec:c2:7f:c8:5c:a9:3f:49:
67:59:9c:6c:54:a7:a5:e2:e0:54:78:88:71:49:4c:ad:7d:34:
2e:9c:07:4a:30:c1:71:e7:0e:b2:2b:ca:5b:ba:13:1c:8d:bd:
3c:99:bf:13:2f:95:12:4d:12:77:a7:64:7e:2c:f6:f2:ff:2a:
fe:14:0b:69:92:c5:f9:e3:37:b1:99:96:07:13:70:29:f2:be:
64:d1:05:49:ed:42:45:78:cc:f9:a4:41:a2:08:54:05:63:c9:
85:bc:fe:fb:55:42:66:d0:1f:e5:eb:d0:9f:c4:a9:f1:52:46:
b1:da:e2:f7:8c:99:32:95:93:12:9c:a6:90:04:e8:c9:47:fd:
d3:9f:b3:03:62:37:8f:a0:93:83:63:db:ea:3a:1d:a1:ed:68:
c9:29:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:01:48 2025 by rpki-client