Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json)
Hash identifier: fuSuTc3spjA0WzpCgyw4K8izWB0xGvv0+8iSsf6hFzI=
Subject key identifier: 76:11:ED:D9:5D:D8:13:E6:D3:40:FA:6B:C6:8B:AC:58:60:EE:F9:45
Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Certificate serial: 063E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
Manifest number: 0633
Signing time: Fri 28 Mar 2025 22:56:15 +0000
Manifest this update: Fri 28 Mar 2025 22:56:15 +0000
Manifest next update: Fri 04 Apr 2025 22:56:15 +0000
Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: HvQ7F2uU5fdnXJlm9BoDMZdyauX/QkxQE+IKiWMRQ70=)
2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: fSfAPi/bUi9k15IOKds7b6yXEktxoZjFwfG44RAp5IM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1598 (0x63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91293E9
Validity
Not Before: Mar 28 22:56:15 2025 GMT
Not After : Apr 4 22:56:15 2025 GMT
Subject: CN=67e7290f-300e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:21:29:f7:2d:b5:19:19:10:08:16:1e:3a:
8e:35:b7:81:64:1b:4f:a4:b1:30:17:0e:a9:a1:15:
fe:63:5a:fb:5a:8e:5c:f0:49:15:93:99:29:53:a7:
32:76:24:a7:e1:cf:4d:c5:b1:f4:99:67:a2:32:83:
a7:e2:1d:28:7c:59:50:be:0d:98:38:d3:4d:a7:f3:
21:27:80:04:54:9d:0e:6e:9b:4a:70:e6:9b:22:3d:
cc:62:7a:f8:a5:35:6c:76:5f:58:4d:4b:57:f5:df:
93:8b:46:cb:df:3d:40:3c:fd:3c:7c:7c:0d:38:cf:
fe:b8:21:45:f7:0e:23:4b:de:40:ad:ad:cf:20:aa:
61:35:c3:3e:8d:5e:80:a9:de:1b:d5:6e:67:2a:ae:
8b:88:63:58:66:42:0a:97:ed:3b:8c:d6:51:e0:3f:
f9:8f:10:67:e4:50:83:8c:4f:56:8d:7b:63:8b:7f:
c9:0f:71:75:da:4a:77:84:bb:a1:65:37:19:c6:82:
3f:2d:5f:23:ff:fd:05:85:74:d9:30:fd:3b:89:76:
70:a0:e5:b7:5a:16:04:d6:11:ea:0a:9b:0c:c5:db:
76:d1:ce:2f:9f:03:fc:be:5f:97:ae:f6:6a:f5:5d:
4f:52:58:5b:ea:02:85:1c:78:96:b0:ca:9e:46:c7:
07:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:11:ED:D9:5D:D8:13:E6:D3:40:FA:6B:C6:8B:AC:58:60:EE:F9:45
X509v3 Authority Key Identifier:
keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:35:50:d4:e7:e4:df:33:d4:4a:25:26:2d:59:17:bc:54:ba:
6d:a7:a5:36:3b:1d:b7:8a:23:8d:8f:c9:76:14:b5:6e:90:ab:
d9:48:7d:a1:99:84:fc:d0:f3:0a:c4:b3:1e:f5:42:57:e1:eb:
06:72:0c:76:87:8f:23:a8:b2:de:4b:25:d3:41:ee:0b:9d:76:
6a:20:61:18:eb:3c:d4:62:50:18:c8:29:ca:96:d6:15:7f:c1:
e8:89:28:b6:a8:3f:27:14:83:f7:e2:da:2f:bd:5c:95:02:72:
e2:59:f8:92:52:b1:1d:a2:8b:f6:39:27:80:f6:b8:bd:63:67:
aa:c0:4a:51:93:c4:83:38:f1:d7:75:40:93:76:00:a6:30:4f:
3e:e7:5c:d6:67:7d:4a:63:a7:28:6b:83:1a:16:c4:6c:2b:12:
df:9a:6f:18:10:8a:79:53:e4:a2:52:ea:13:7f:3c:0a:03:ce:
ab:8d:02:96:40:a1:e1:03:9b:41:20:5a:00:6d:c1:4d:50:83:
84:f3:6d:b3:5a:b7:ce:d5:be:ba:b9:de:10:8a:f6:86:95:4e:
f6:48:17:10:0d:14:0c:c0:de:1d:a7:bd:ff:fe:8f:cd:ac:3e:
12:0c:64:06:2b:9b:97:1b:20:27:e8:f2:43:50:a1:4a:29:44:
c8:8c:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:23:15 2025 by rpki-client