Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json)
Hash identifier: AWnWu2w7W0l5uOXkxtBV9qjIBxtoEtrZ6f/jWNKRXME=
Subject key identifier: D0:43:2B:3C:E8:A9:36:B5:EE:EE:DE:FE:13:78:69:41:75:9C:A8:22
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 14EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
Manifest number: 14A9
Signing time: Fri 28 Mar 2025 17:00:22 +0000
Manifest this update: Fri 28 Mar 2025 17:00:22 +0000
Manifest next update: Fri 04 Apr 2025 17:00:22 +0000
Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: q9jvaMhIYG7ZFKUz/rI2BZT9dpQFaR44HGO3Q8y3RkM=)
2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: +T2v6WhZdH2sLvXuddpzzbP1mbQkpp/cDFsDzaIq7rg=)
3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: k3UD6r21BHgLGyrPcMdI5dYPjWw/zRkTV4wjHfogWXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5359 (0x14ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5
Validity
Not Before: Mar 28 17:00:22 2025 GMT
Not After : Apr 4 17:00:22 2025 GMT
Subject: CN=67e6d5a6-c81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:34:81:c1:27:c0:6c:a9:a9:a0:fd:13:54:
a5:7b:82:09:ff:5e:23:6f:17:29:a7:5f:56:95:3b:
d0:cc:86:b4:4a:10:a3:e3:ad:95:bf:c2:dd:6a:e3:
c2:07:00:1e:7c:2d:59:a0:79:0f:63:9f:da:fe:23:
08:3d:8e:b8:14:e7:58:fd:d0:0e:9c:a2:79:20:cd:
cc:f8:02:1b:81:1f:cb:d5:89:f8:ce:38:18:45:81:
ef:45:2e:71:7b:9e:39:cd:56:0e:52:1a:4a:b2:a4:
8c:1f:b0:94:89:2f:48:14:b5:3a:d1:b9:d6:a1:40:
2c:1e:19:ef:b8:0f:9f:18:1f:bb:b0:0b:40:1a:49:
5c:37:ea:0e:72:55:a5:32:c8:80:76:ef:e7:b3:7c:
1f:09:d5:c1:f2:da:fd:4c:e9:26:bd:b0:b6:b8:9e:
99:d0:6e:81:f4:5a:b9:dc:de:49:77:ec:5c:3a:dc:
a2:4d:2c:6c:f7:35:23:e7:a9:4e:e6:24:44:9b:9e:
20:b0:52:c9:67:cc:ef:bd:08:2b:39:ff:f1:78:06:
6e:a2:2c:de:e3:80:2c:36:28:76:74:96:24:ea:4f:
17:6a:66:05:5a:af:b6:1d:e0:3d:4b:f0:8a:f0:fe:
1e:63:28:f0:bb:b0:7f:2d:fd:09:52:f0:6c:5a:25:
38:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:43:2B:3C:E8:A9:36:B5:EE:EE:DE:FE:13:78:69:41:75:9C:A8:22
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:39:5b:53:dd:6c:ed:1d:05:b0:cd:38:82:f4:7f:6e:23:9b:
a4:86:3e:26:c6:a4:3c:1d:0c:3e:15:70:65:09:06:d1:98:d1:
87:04:63:e5:23:16:6d:81:e1:3e:09:24:2b:43:6c:5b:ff:fd:
97:18:f0:c3:79:bc:e1:74:62:39:20:9c:59:ed:8c:5d:d3:71:
6e:e4:99:d9:39:6c:de:b8:6a:2d:81:7e:56:1b:9e:3d:68:e9:
fb:76:88:2c:a8:75:4c:15:18:f6:79:99:41:a5:e7:42:78:2f:
0e:06:dd:4c:d4:e2:9d:65:b7:23:72:ee:b0:32:9f:52:ba:05:
20:9b:11:47:f4:d4:3c:ba:07:c8:a8:5f:dd:71:cd:16:73:1a:
b3:91:93:6e:75:88:b7:04:68:7a:50:b0:8f:e6:61:f1:ab:55:
33:7c:a2:6a:c9:c6:80:6e:49:9d:a8:da:b7:99:1a:96:be:6a:
34:29:6b:7f:27:81:90:39:96:1d:06:99:31:00:9c:a6:71:57:
00:9c:35:f1:0f:0b:53:2b:d4:03:71:85:b6:65:2b:ce:52:d6:
a3:ee:f5:9d:f8:da:57:e3:fa:54:51:41:cd:6d:93:05:09:b9:
5f:ef:b5:51:ba:c4:fc:f9:78:89:60:63:2e:8d:a8:d4:ef:20:
14:ba:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:25:04 2025 by rpki-client