Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
File: yWKh77HWheqfDoW0F2aCj2oT7-U.mft (raw, json)
Hash identifier: /Hc44w6Gg66lOo8B2Z0EMKOgEKIde6HC6LKJfKhOPlg=
Subject key identifier: F5:46:66:6C:DB:F4:64:F9:2D:24:2A:88:99:FE:56:93:00:79:23:BD
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial: 0448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
Manifest number: 0444
Signing time: Sat 29 Mar 2025 00:29:57 +0000
Manifest this update: Sat 29 Mar 2025 00:29:56 +0000
Manifest next update: Sat 05 Apr 2025 00:29:56 +0000
Files and hashes: 1: yWKh77HWheqfDoW0F2aCj2oT7-U.crl (hash: ws3T33ob06iiwHL3zZKWZoejBIE1ZNqQ3/7wylU4jnc=)
2: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (hash: 0K3q0dVCvDExh+rAvv97+F6NfiAcFtJOv8chW1CF1z4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188F4
Validity
Not Before: Mar 29 00:29:56 2025 GMT
Not After : Apr 5 00:29:56 2025 GMT
Subject: CN=67e73f05-539c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:25:23:db:a5:75:00:be:d4:95:7c:41:8e:
6c:df:0f:5d:33:09:3d:d0:19:c3:18:3f:87:57:97:
66:a5:db:c3:1a:e5:1a:a1:99:8c:d8:8a:a5:7a:b3:
7d:3c:04:2c:f5:69:71:77:b8:5a:66:5e:97:3a:bb:
95:99:1f:0d:a2:79:e5:6a:f9:d9:a5:11:ad:79:aa:
28:44:73:46:cd:d9:bb:32:28:88:05:85:69:bc:4c:
cf:f1:3d:e4:dc:8b:17:87:08:94:fe:06:e0:ab:88:
4d:8d:37:cd:97:25:fd:1c:18:46:09:29:82:ec:14:
66:2a:94:8f:ac:00:67:dd:67:7e:65:c1:fd:fd:0b:
4d:54:14:48:80:1e:da:2e:d1:87:d1:6d:2d:b4:45:
ed:e6:4b:fa:1d:eb:c3:12:aa:4f:eb:23:cd:08:83:
ad:47:31:39:71:f1:98:e7:dc:2f:15:e5:8f:49:33:
b1:2f:65:f1:19:c5:b1:b4:f8:06:be:b1:60:fb:6d:
f2:f0:68:b0:a2:41:af:3b:ef:fc:fa:3d:cd:bc:30:
32:3a:27:93:0c:2f:0a:04:06:6b:f4:2d:ac:f8:59:
4c:75:e4:f8:50:51:33:0c:40:e5:88:94:76:c0:fc:
7d:2c:14:49:52:ad:0d:a5:1b:bb:fb:02:7b:1f:e2:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:66:6C:DB:F4:64:F9:2D:24:2A:88:99:FE:56:93:00:79:23:BD
X509v3 Authority Key Identifier:
keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:70:c6:e8:5b:00:1c:e8:59:23:15:68:01:80:b0:d4:a8:
5a:de:69:ef:4b:6e:d2:ac:e9:cd:94:02:70:e2:37:85:11:56:
8d:ef:2d:f3:f8:7e:ea:bf:28:de:9f:4e:54:12:77:32:9f:09:
df:d5:aa:a8:9b:e5:7d:c9:f9:b2:9c:58:a7:97:0f:ea:c8:3e:
cd:db:11:35:ff:f9:b6:41:60:eb:38:9a:b0:ee:0d:30:0e:94:
d4:30:b8:19:0c:74:99:1d:2d:64:52:1c:33:19:93:95:40:35:
62:9a:3f:c8:e1:83:c2:64:81:e4:d4:93:03:19:df:7f:1e:08:
e0:f4:a2:1a:8d:c9:24:59:1a:fe:21:89:78:e2:7c:33:71:8b:
46:5e:e4:38:1e:f0:5d:d1:33:6e:16:d5:9f:8f:b5:8c:b3:dc:
5c:53:e4:c9:93:20:7f:7f:0b:45:e9:56:26:a4:03:19:cc:3c:
17:31:64:f5:5a:8e:f0:54:56:d8:9a:35:32:a2:bc:61:18:da:
b2:bf:ba:74:fa:22:b0:0a:33:9c:5d:75:16:40:c5:a3:6f:a9:
a4:b7:9a:81:cd:19:f7:b3:d2:81:42:71:15:f8:22:51:7f:da:
16:8e:92:67:15:a3:eb:57:e0:05:6d:68:51:ba:87:ea:17:63:
3d:58:84:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:16:52 2025 by rpki-client