
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft
File: 7FdAxHbX__RLph-FeRWh8XmTGko.mft (raw, json)
Hash identifier: 1kgsBL/y27WI4uWPlT+8wSkLsmNGJOByKvAsoxi820c=
Subject key identifier: F8:8A:35:5E:0E:5F:41:DB:65:35:F9:C4:6A:D4:B6:FD:D4:0D:EB:E7
Authority key identifier: EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A
Certificate issuer: /CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
Certificate serial: 0395
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft
Manifest number: 038D
Signing time: Mon 28 Apr 2025 04:37:51 +0000
Manifest this update: Mon 28 Apr 2025 04:37:49 +0000
Manifest next update: Mon 05 May 2025 04:37:49 +0000
Files and hashes: 1: 7FdAxHbX__RLph-FeRWh8XmTGko.crl (hash: JV5xD0GEvm9OgDLYpjV5A7cr8qAJHp93Z9DwiFnwZjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160F2D, serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
Validity
Not Before: Apr 28 04:37:49 2025 GMT
Not After : May 5 04:37:49 2025 GMT
Subject: CN=680f061e-2854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:4a:8b:71:a9:f8:73:44:62:4a:6d:a3:c8:
14:e9:5d:11:fd:f7:df:7c:c4:5d:1b:16:26:a8:40:
11:52:6c:eb:ee:b4:bc:7a:2a:a7:3e:6c:1b:71:b3:
01:05:58:9c:b5:44:46:ba:c1:d3:6b:eb:96:df:7a:
9c:ae:7e:42:fd:7a:d3:0f:f0:84:63:74:bb:a2:21:
9e:46:4b:f1:d8:1a:2a:e2:ec:6d:d6:22:6d:5d:1c:
3b:96:18:29:af:bb:ab:45:31:56:e0:28:a5:b5:43:
4e:cc:63:3d:49:c5:0a:da:7d:0d:ea:70:ff:0b:b0:
ea:46:71:e7:ae:6d:eb:f2:d8:59:00:79:31:2d:76:
27:17:f3:3b:b5:2a:bc:23:ca:6d:cd:92:e9:63:6c:
64:46:d5:86:40:76:ba:91:1d:e5:b6:2a:69:c1:4a:
40:1a:a4:d6:04:d5:db:11:f5:e7:29:c0:d9:b7:d4:
4e:f7:c5:86:d9:4d:c0:27:05:43:e2:31:e7:a9:85:
e2:0b:cc:e6:5b:35:e9:6d:48:ed:7e:07:57:f9:40:
ac:95:bd:0c:7e:74:3e:73:2a:df:b7:33:45:e4:7c:
18:09:1d:e9:55:68:15:41:b8:e7:87:87:d6:fb:07:
0c:cd:fb:94:e8:14:ab:a4:ab:c5:cd:eb:3a:d0:f5:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8A:35:5E:0E:5F:41:DB:65:35:F9:C4:6A:D4:B6:FD:D4:0D:EB:E7
X509v3 Authority Key Identifier:
keyid:EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c5:4c:01:d7:0c:31:89:a1:dc:21:55:cc:fc:6b:2d:61:dd:
4a:9b:99:a7:95:f9:c6:23:9a:e2:8f:37:e2:45:ac:1b:43:aa:
a3:aa:ef:fe:ca:82:00:f4:e3:b3:5b:a3:e9:63:0c:5e:36:a8:
e8:9e:21:c6:62:16:7f:1c:ba:cb:1a:19:e3:50:ac:2f:25:08:
f8:02:37:e3:1a:89:89:5c:ac:fe:9c:2e:05:a0:0a:24:b8:6c:
ba:15:42:cb:0d:91:8a:d5:14:6a:34:64:70:8b:78:c4:e8:1f:
c6:9a:c9:38:7a:2f:f9:44:10:09:d2:00:b3:45:c9:ce:af:81:
22:17:ff:22:f6:d1:66:bc:4c:ef:9b:cd:16:c3:da:f8:b5:d3:
13:c1:62:6e:23:77:fa:12:00:16:01:7a:e0:d1:4d:16:0b:b8:
2a:58:23:36:70:6b:71:d2:fd:3b:e8:b5:52:90:61:0c:c6:db:
ca:d0:37:d6:6d:0b:ef:49:22:13:46:eb:11:4c:12:ca:c2:64:
ef:96:47:de:d6:6d:79:50:2d:0f:fd:5d:4f:d5:37:63:5e:60:
14:ce:84:70:ce:8d:c0:17:af:cd:22:e1:de:61:67:cd:28:ae:
05:11:31:3d:1c:db:40:de:5b:de:ec:1b:76:73:4c:54:9e:2d:
54:2e:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:09:45 2025 by rpki-client on console.sobornost.net