Manifest
$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
File: 1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft (raw, json)
Hash identifier: g2fdOj8VMqj9LIKBE/A08PCc0bEMAfaeldSSmhrOLXw=
Subject key identifier: DD:DA:5C:31:50:17:85:22:B0:47:D7:28:D3:8D:81:84:2B:67:75:C2
Authority key identifier: 1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3
Certificate issuer: /CN=A918C2870000/serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
Certificate serial: 41F529901AA585C73F594686EBAF72FEA04450BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
Manifest number: 10
Signing time: Thu 22 Jun 2023 17:34:03 +0000
Manifest this update: Thu 22 Jun 2023 17:29:03 +0000
Manifest next update: Fri 23 Jun 2023 21:27:03 +0000
Files and hashes: 1: 1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.crl (hash: 2WUjftJ2QLnhRKW+cC8i88jv0jdzj4xWMQ0DpiT1LX8=)
2: 323430313a343630303a3a2f33322d3332203d3e203634343936.roa (hash: YA7OveE0RNikCGfwOZej1VNBrlBWWxGG35Qh7W6ZLgw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f5:29:90:1a:a5:85:c7:3f:59:46:86:eb:af:72:fe:a0:44:50:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2870000, serialNumber=1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3
Validity
Not Before: Jun 22 17:29:03 2023 GMT
Not After : Jun 23 21:27:03 2023 GMT
Subject: CN=DDDA5C3150178522B047D728D38D81842B6775C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:a5:d6:9f:9e:60:6e:99:bf:d1:8e:85:11:
ed:ff:82:75:23:cc:33:4e:b5:bf:fe:3d:70:aa:a0:
6e:95:0e:da:c5:bd:a5:f0:6f:08:e0:0e:ba:41:c1:
da:8d:3f:b8:b2:4d:b2:60:c0:7d:f1:7c:20:06:32:
ef:a4:d1:04:0a:06:8c:98:c9:93:c0:e5:5a:7f:9a:
cf:bd:a4:3e:a2:e0:51:63:18:e3:8f:e6:11:62:85:
72:bd:29:ce:f6:c7:ac:75:9c:bf:01:7d:8c:20:f3:
8c:73:54:83:55:d4:ba:fe:c8:0f:e9:fc:b2:20:9a:
60:9b:40:1f:cf:68:35:eb:38:a7:4e:ab:6b:96:d2:
46:82:18:60:c3:e1:ae:f7:83:6b:bd:31:59:d2:52:
01:73:87:3a:62:db:a3:6c:6a:25:2f:d2:2e:a8:0d:
09:75:9a:70:7e:62:cc:52:42:0a:b9:80:6d:b5:a6:
a4:b7:a2:9c:10:f8:e9:6d:4d:b7:5d:00:14:be:2f:
bd:35:23:69:09:f7:46:18:f3:19:87:52:28:dc:30:
6b:ed:92:30:d8:53:43:75:29:de:28:eb:58:c8:6d:
f1:84:48:fa:70:a0:29:5f:ff:4d:dc:ed:fb:95:44:
93:5a:02:66:ad:0c:e9:7b:51:7a:68:7b:51:2a:22:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DA:5C:31:50:17:85:22:B0:47:D7:28:D3:8D:81:84:2B:67:75:C2
X509v3 Authority Key Identifier:
keyid:1F:FF:7A:9D:D6:68:F0:B8:F7:A6:C1:98:7C:42:34:BD:9D:40:46:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_96ndZo8Lj3psGYfEI0vZ1ARvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/1FFF7A9DD668F0B8F7A6C1987C4234BD9D4046F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b6:9d:f2:13:b9:eb:c8:e1:6a:ff:37:39:16:a7:34:5d:d6:
06:d6:8e:f2:4e:b0:07:87:65:f0:7d:50:a7:a8:d9:d0:13:57:
cc:46:4e:e3:23:b0:b4:3c:bc:24:84:e3:f3:49:6c:02:9a:e1:
cd:f4:79:1e:a9:a2:fe:52:0b:84:41:2e:01:be:71:3d:c1:4e:
8d:21:f9:53:32:da:48:d4:6b:52:f4:51:d3:16:46:19:fc:27:
28:02:c0:cb:a1:cb:ed:d3:e9:5e:7e:bd:5f:cc:73:02:66:cc:
10:de:55:a6:ae:89:0f:1a:33:fe:8d:84:3e:76:c4:28:81:3d:
67:9f:d1:4c:b5:cb:6d:75:92:25:b6:d4:41:62:06:27:7a:73:
27:7d:d1:48:b2:14:d4:25:ff:62:24:be:d1:3e:21:c8:16:a5:
d9:a9:a4:a5:3c:b2:e8:7f:e1:96:c2:f4:4e:7f:53:62:33:81:
2d:1f:c0:01:11:f7:cc:7d:50:8a:91:8f:5b:db:2f:05:31:75:
f2:d3:78:1d:27:af:fd:56:c2:5e:58:94:eb:ce:e2:17:61:45:
ce:d7:3e:b2:f0:2f:27:cb:52:5c:c3:2f:6e:60:f1:5c:d5:cf:
a4:eb:67:24:e5:38:fe:1a:c1:5d:63:63:90:6e:ca:39:b1:ee:
f4:d3:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:35:55 2025 by rpki-client