Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
File: 1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft (raw, json)
Hash identifier: fJOkYsdY8FKday3k2fcPQbzFSRWe66B1AgwoTNYLXgA=
Subject key identifier: E3:93:03:BE:E4:5A:4F:39:CF:4A:8C:1C:10:F4:5C:A7:B9:C6:52:A2
Authority key identifier: 1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3
Certificate issuer: /CN=A918C2870000/serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
Certificate serial: 4748564D915C4FDBE8D428B67BD2698F0CFB0CC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
Manifest number: 12
Signing time: Sat 24 Jun 2023 09:30:25 +0000
Manifest this update: Sat 24 Jun 2023 09:25:25 +0000
Manifest next update: Sun 25 Jun 2023 12:42:25 +0000
Files and hashes: 1: 323430313a343630303a3a2f33322d3332203d3e203634343936.roa (hash: YA7OveE0RNikCGfwOZej1VNBrlBWWxGG35Qh7W6ZLgw=)
2: 1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.crl (hash: O483KhLFB07Q8gCpRAe61YAtBMfxj9mb8QBLsX7EMCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:48:56:4d:91:5c:4f:db:e8:d4:28:b6:7b:d2:69:8f:0c:fb:0c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2870000, serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
Validity
Not Before: Jun 24 09:25:25 2023 GMT
Not After : Jun 25 12:42:25 2023 GMT
Subject: CN=E39303BEE45A4F39CF4A8C1C10F45CA7B9C652A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:af:6d:8b:48:48:54:ed:e1:14:5f:bb:d3:4f:
66:56:2c:d5:9b:82:d4:34:09:2a:70:8c:02:bd:1a:
ce:b0:41:cb:bd:ec:7d:3a:f3:ad:80:67:91:1f:3a:
6b:b8:88:ce:2f:75:86:85:ea:24:51:c1:47:25:8c:
cf:d0:9a:58:af:68:1c:38:33:72:41:f8:a7:58:1f:
ac:61:b9:70:0d:86:d4:03:97:08:7b:72:70:12:37:
aa:35:f6:c9:75:49:34:16:85:25:d7:ce:46:e5:16:
2f:27:ed:e0:8c:f8:a7:12:5f:ce:ff:44:00:c5:d4:
43:f4:0a:19:a3:41:6b:c6:5a:40:cc:09:96:32:22:
86:aa:3a:93:e5:37:9f:df:95:bc:8b:40:a5:2f:b9:
86:0c:0d:29:81:23:64:27:9a:10:e0:83:76:f8:a1:
1a:f6:76:30:e8:e3:69:f8:cb:41:2a:2a:28:90:b0:
a6:44:eb:36:d8:d4:60:10:7d:18:43:8d:62:2d:6e:
c7:04:4b:86:0f:a1:c6:f4:5a:c3:ba:ba:e1:e9:82:
32:5f:86:68:72:04:49:05:01:81:49:c5:f6:e3:a2:
30:95:9e:5e:e9:4c:6c:35:35:32:6a:cc:53:c2:4a:
3f:cf:1e:7c:13:d4:54:a3:e1:7e:db:36:9d:42:b9:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:03:BE:E4:5A:4F:39:CF:4A:8C:1C:10:F4:5C:A7:B9:C6:52:A2
X509v3 Authority Key Identifier:
keyid:1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a1:24:24:71:62:0d:a8:0a:6b:06:e4:25:fc:ae:e3:39:ae:
b5:3f:bf:99:1d:c3:f1:0c:b5:05:1f:3e:6e:18:33:9c:d3:e1:
78:4f:b3:33:32:10:13:e3:9c:bb:81:ff:31:60:f2:71:c2:8a:
fa:f5:55:0d:7c:5e:a5:90:56:70:89:02:23:d5:24:bf:d9:53:
22:b5:cc:d8:03:6a:c9:12:38:3e:5f:84:17:b8:8b:36:ce:4e:
9b:64:5f:f3:61:47:f3:87:f4:ed:df:41:6d:03:f6:84:4a:c6:
e7:de:c4:55:3e:99:d8:1b:47:e3:36:1e:60:fd:dc:61:96:f9:
f0:bd:d8:4f:11:80:90:82:f9:31:2d:a7:9f:d2:8e:9f:be:16:
bc:f8:34:e4:6d:97:8a:c6:2c:d0:5c:5c:e5:77:1c:4d:46:ae:
43:a0:80:4b:f7:d6:48:dc:5f:06:f4:c1:ed:10:7f:6c:e0:13:
77:92:bc:63:43:27:5d:52:8b:d8:39:eb:ae:5b:86:05:3c:3e:
de:02:ef:75:9c:d3:93:d8:6f:c6:2a:a4:29:db:f4:e5:d9:75:
53:d1:29:cf:1d:7c:59:da:d0:66:42:bf:be:d3:02:7a:04:aa:
51:9e:a0:e9:73:97:f1:59:99:b3:8d:35:d8:a2:2b:56:35:59:
98:1d:6e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:29:10 2025 by rpki-client