
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
File: 5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json)
Hash identifier: +2sVPhGaL3LkMMWlelcN7i1QYJduJDSfFVyd8lGjjyI=
Subject key identifier: 5D:AC:CB:08:D1:0C:FC:94:07:F1:8B:36:FA:DD:EE:9B:39:59:09:9A
Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
Certificate issuer: /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
Manifest number: BF
Signing time: Sat 29 Mar 2025 05:15:44 +0000
Manifest this update: Sat 29 Mar 2025 05:15:44 +0000
Manifest next update: Sat 05 Apr 2025 05:15:44 +0000
Files and hashes: 1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: +xEHTye7qIWOyvlXhMGzortNsl8h6g0nYvNaqnjnr+w=)
2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: JMqNNeHY27Hx5eJ7SJKoh8TY1qwKjQvReEB44gwMvpE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B5C7
Validity
Not Before: Mar 29 05:15:44 2025 GMT
Not After : Apr 5 05:15:44 2025 GMT
Subject: CN=67e78200-e537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:5c:64:53:24:c9:a8:41:11:6f:08:b2:a2:
80:e1:93:7a:62:72:79:45:39:24:cb:9f:c9:e3:a0:
29:00:16:97:2c:27:c5:aa:5d:fe:05:9c:fc:54:c1:
b0:55:ac:1b:46:de:2f:b0:47:bf:a1:01:f1:f6:53:
75:e1:92:88:85:94:f9:14:c4:b0:e1:1a:6b:73:11:
33:dd:a5:58:40:09:dc:03:8f:2a:9e:90:fc:ad:bd:
a6:b9:39:10:15:68:0f:2b:19:f6:fe:52:35:eb:50:
24:c3:c3:c4:d2:7a:d0:c3:8b:a3:ce:a1:f4:2d:c5:
ff:92:aa:3b:0d:b9:8e:fe:4d:03:c8:86:c5:98:e7:
b6:42:a6:46:2d:2c:c3:88:98:7e:ef:df:d0:23:e6:
a1:42:6c:1d:57:d0:71:c0:bd:33:1f:42:dc:c6:26:
ea:88:ed:cb:16:d6:0a:f9:50:54:1f:4e:0c:d0:cd:
01:9b:5e:32:86:2f:be:2b:6e:f1:0d:0f:83:6e:6e:
3c:08:c2:e7:35:6a:5c:41:ca:9d:1d:c1:b4:07:13:
46:88:0e:34:3c:50:e8:e8:13:3a:64:2d:55:e0:0e:
8f:2d:e9:f0:54:60:b4:73:a8:09:58:e3:a5:1d:c7:
7f:47:92:9b:cb:f3:53:05:65:3a:c1:3c:ab:f4:71:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AC:CB:08:D1:0C:FC:94:07:F1:8B:36:FA:DD:EE:9B:39:59:09:9A
X509v3 Authority Key Identifier:
keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:be:94:33:57:c4:80:62:c6:13:9f:3d:4b:2d:83:58:8c:18:
1d:14:0a:65:d0:f3:08:25:c9:0a:b5:b5:9f:2a:49:0e:93:d7:
a1:09:bf:02:62:a8:cf:c2:cb:ad:3f:2a:97:05:68:12:c2:d1:
44:f5:9c:27:2f:fa:5c:5d:0b:49:d7:7e:0f:bb:87:28:41:79:
b6:17:7b:d0:b0:c7:6a:43:78:29:89:40:a9:ff:67:f5:a4:e5:
01:bd:73:89:91:d6:ad:be:4f:f6:ff:7c:5d:00:9c:18:e6:bc:
8a:f9:c6:88:a1:c2:47:36:79:2a:a2:cb:8f:63:37:03:98:d4:
79:d5:a9:81:08:a3:dd:c5:c4:e0:f7:87:4d:5e:97:95:77:ff:
70:23:97:93:f4:d0:44:bf:8c:67:27:e1:e2:4a:4e:5c:81:93:
ac:2c:e3:fa:e8:e7:e9:34:a6:be:74:fb:b0:2e:5c:65:2c:34:
04:5d:27:30:37:b1:80:40:1d:cb:48:00:71:47:47:39:0c:6f:
8e:25:bf:dc:f6:fb:87:8a:74:a3:ff:eb:5a:a0:79:5f:c7:8a:
56:c2:b4:c6:b9:ff:11:d4:97:9b:ae:81:ff:f9:28:82:33:aa:
c0:0d:72:e7:1f:56:5a:46:d3:30:06:f0:cc:ca:2f:83:91:32:
4f:9c:6a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:41:55 2025 by rpki-client