
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
File: EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft (raw, json)
Hash identifier: 7RxFIESYJjIM5TQT/7z6ItGvkkKw+ICpk45Bn+Ky0K0=
Subject key identifier: 87:4E:74:8F:02:76:EC:4D:A5:2B:C0:2D:8D:EE:A3:73:9D:F9:2B:98
Authority key identifier: 10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B
Certificate issuer: /CN=A918DFCE/serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
Manifest number: 0152
Signing time: Mon 03 Nov 2025 04:17:12 +0000
Manifest this update: Mon 03 Nov 2025 04:17:12 +0000
Manifest next update: Mon 10 Nov 2025 04:17:12 +0000
Files and hashes: 1: EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl (hash: cw99g0t+ZLI3Tr0CbXOU6vy2aqRQ/4EAdMNWn1gNE9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DFCE, serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B
Validity
Not Before: Nov 3 04:17:12 2025 GMT
Not After : Nov 10 04:17:12 2025 GMT
Subject: CN=69082cc8-ea81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:45:4f:13:06:3a:1f:ad:77:60:01:25:8d:
bf:f1:20:2f:a6:0b:b8:08:6a:f3:80:34:bb:e6:9f:
30:a9:07:e6:e4:af:c4:eb:38:6b:fe:88:57:f0:2a:
1a:b2:3d:98:90:d0:5a:fd:bf:cc:59:6d:e8:84:97:
ba:51:9d:fa:0b:95:23:14:33:9c:17:79:63:d8:70:
b2:58:12:43:37:ae:d7:1c:c8:7b:ca:d0:36:18:76:
d5:a8:4a:0a:f0:f6:af:69:9e:44:6d:01:b0:08:7a:
45:13:31:ec:91:3d:43:03:9e:b1:b9:3c:df:3e:fc:
f9:c3:9d:00:2f:5f:27:79:0c:63:e6:ee:73:fd:6f:
d7:3f:58:77:52:df:d1:1d:63:b2:ea:6a:6c:30:45:
4f:6e:cd:7f:2e:fe:86:24:22:b0:df:6e:54:cc:06:
9a:1c:ae:b2:6b:69:29:f8:94:63:23:61:8d:aa:63:
a8:70:98:62:4e:38:c4:27:70:24:87:ba:50:55:0e:
cc:c6:c9:d3:99:47:4e:9b:af:0a:a2:39:26:5f:db:
22:a4:bd:e6:9c:49:64:30:a3:08:e0:42:12:32:ec:
6a:69:c8:3d:a7:0c:e1:84:e5:30:31:38:1d:de:e0:
ff:85:7a:1d:08:29:11:4a:ea:97:17:74:35:56:41:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4E:74:8F:02:76:EC:4D:A5:2B:C0:2D:8D:EE:A3:73:9D:F9:2B:98
X509v3 Authority Key Identifier:
keyid:10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:af:af:d6:c4:ee:25:34:6b:52:c9:c1:dc:08:a5:2d:f1:94:
4c:e7:a3:ca:97:89:bb:d0:d4:f2:64:7f:71:74:10:f1:b4:cc:
75:65:fe:3b:da:c2:61:14:b7:89:68:82:f4:c4:3f:54:cb:ff:
52:d3:04:50:7c:df:02:4e:c7:6b:23:b1:83:15:99:e2:9e:76:
93:05:a1:89:92:97:1b:fd:fc:42:7f:a8:ea:71:8a:d3:3c:1d:
11:f6:96:f5:3c:d6:64:98:75:a6:46:26:35:8c:b9:8a:f1:e2:
9e:c4:cd:c6:68:1d:4a:fb:d1:bd:f6:d8:53:95:37:f0:16:e5:
c2:41:2f:15:e8:f7:75:e2:d9:4f:49:7a:ed:1f:c4:16:86:56:
8c:09:78:6a:68:8c:cf:86:21:b6:b2:36:62:2f:36:d6:78:c9:
5b:0e:56:a0:16:69:70:fb:2b:e9:40:31:39:9d:b2:09:07:ca:
ea:d8:b1:3b:96:80:a7:d2:79:1d:cb:4b:66:b1:51:ba:1e:bd:
2f:11:9d:24:3b:43:21:ae:23:5f:ce:37:69:17:0e:85:43:1c:
af:e4:34:79:55:20:ae:41:b0:21:87:0d:24:17:15:0d:7a:1f:
7b:90:b5:90:d9:7e:c2:75:bb:d8:b3:e1:20:64:5b:63:f9:5b:
70:42:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:06:00 2025 by rpki-client