Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft
File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json)
Hash identifier: 4Pd9j1cbIPAA8MaJAttPkNychP4Nu8r9X93otJaKsyU=
Subject key identifier: B5:9E:FE:1C:1E:D5:9B:98:0F:43:41:F4:9E:F9:DE:14:2F:3E:5D:2D
Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD
Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD
Certificate serial: 07D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft
Manifest number: 07B1
Signing time: Fri 28 Mar 2025 21:30:49 +0000
Manifest this update: Fri 28 Mar 2025 21:30:49 +0000
Manifest next update: Fri 04 Apr 2025 21:30:49 +0000
Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: 4yc9ZrlT+WOgFtEtve0Gad4GrkA3WWnrRzGilzezpSI=)
2: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: RVujGjgRtNml2s4B1MbyglZHc1wuuQ8z+GSwbNfvR2o=)
3: 1070E6CA9A8311EF8BE0F826C4F9AE02.roa (hash: 5usMHuwC29/GKSbCm/Fabiikjfpjet0V04t/dPRj3vM=)
4: 38BE1074FC0F11EA8DEF4D28C4F9AE02.roa (hash: iWWPKNMJez26/4BW7/wljyQN/N1JrdnLJYQsd0J35V0=)
5: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: vJqvl3p3GZGjPo1+bFOu/lz3UGNmQtiNtsOQmfP7QoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91397C2
Validity
Not Before: Mar 28 21:30:49 2025 GMT
Not After : Apr 4 21:30:49 2025 GMT
Subject: CN=67e71509-a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:49:53:f0:32:0e:4b:21:52:83:71:29:33:
57:6c:e9:07:b3:97:a2:d8:70:e1:9f:9f:bc:53:d1:
29:20:67:65:72:30:43:af:55:57:c6:cd:67:84:9c:
bd:72:8d:47:da:1e:45:36:1d:0b:d1:03:cc:f5:72:
f1:c2:e2:d9:9f:0e:2e:65:77:9d:09:9d:7d:03:0a:
5f:61:6f:7e:0e:0b:3e:cb:cb:cf:d7:29:c5:3a:1e:
6a:c4:6d:fb:ca:05:8e:7a:83:aa:74:55:56:e4:28:
d4:b6:26:be:68:97:3e:b4:08:43:7c:59:c2:86:99:
3d:b6:17:14:08:4d:22:8f:d4:28:75:05:ff:a8:42:
b3:dd:96:cf:f3:0e:1a:0c:21:b1:1a:24:ff:e1:84:
9c:ec:da:46:42:a3:9c:4a:7e:45:c9:a9:d5:37:d8:
00:0b:cd:f0:73:08:8b:d7:c0:53:90:d7:db:f1:21:
e4:ee:25:4f:dd:96:4e:a4:b2:81:09:0b:7d:20:1c:
5e:77:34:b9:ce:22:7e:7a:5b:33:a8:66:9c:14:5c:
1c:50:8c:45:72:a7:d6:45:2d:36:1a:5f:f2:75:d6:
d1:f1:e5:a7:6a:76:0e:9d:73:cf:08:21:d8:c8:94:
92:9c:bd:cb:6e:90:70:32:1a:6a:51:f9:ff:d6:84:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:FE:1C:1E:D5:9B:98:0F:43:41:F4:9E:F9:DE:14:2F:3E:5D:2D
X509v3 Authority Key Identifier:
keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:e9:ae:3c:a8:b6:48:4e:2f:f3:c4:25:84:85:09:2f:47:b9:
63:3a:1e:64:fc:b6:ad:da:25:44:f8:36:5e:61:ed:fe:d2:74:
e2:02:a3:8d:d7:89:53:3c:c8:3f:97:e8:0b:b0:8f:84:cb:0f:
73:16:3f:90:c7:b5:84:5e:40:98:cf:ac:c0:4f:e1:2b:a6:71:
cf:90:65:0d:62:51:64:5f:30:26:f3:66:b4:8b:b7:21:21:67:
83:91:01:2d:63:70:39:4e:7d:57:ff:06:6a:62:2f:ab:7b:c8:
01:c6:bc:ae:41:30:48:3c:2b:9b:d6:63:6e:83:d0:12:ab:e6:
a9:1a:41:c6:d3:16:3b:9f:24:d1:71:43:e6:ea:79:3e:13:74:
45:b1:86:36:4c:5c:23:18:db:5d:2e:73:bc:78:ad:2d:cb:73:
30:b6:20:93:04:da:07:8b:ba:28:20:9f:50:26:aa:91:5e:f3:
b2:ac:32:3b:a9:7f:3f:47:b0:09:c3:10:95:96:bf:98:1a:d9:
89:b0:c7:15:44:19:bb:ad:2f:99:ed:33:ca:b8:63:2f:28:a8:
e9:91:e3:c5:8d:46:78:9e:e1:a6:90:7e:ef:4f:27:f0:82:5e:
84:a6:c3:5c:7c:e6:30:37:89:1d:65:d2:e5:eb:65:67:b9:43:
46:94:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:23:31 2025 by rpki-client