Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json)
Hash identifier: b3RTf/RJ8vMNfuODflYaiQIZ1pPoQ2sZncK73t55Fdc=
Subject key identifier: 75:10:3B:41:0C:2D:E9:3D:6D:3F:0E:C1:97:71:EB:C5:13:A5:F9:24
Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
Manifest number: 0805
Signing time: Fri 28 Mar 2025 21:07:59 +0000
Manifest this update: Fri 28 Mar 2025 21:07:58 +0000
Manifest next update: Fri 04 Apr 2025 21:07:58 +0000
Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: GVqrJajL6H2WfaQFj6cSMAxxaVNPA2EdrpbWyvmv5RA=)
2: 021C59CCD1D011EAA2763743C4F9AE02.roa (hash: kMnM6tT1AQ+rXlanuefvWJQM92bE9CI8Z0JTFvLVui8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454A8
Validity
Not Before: Mar 28 21:07:58 2025 GMT
Not After : Apr 4 21:07:58 2025 GMT
Subject: CN=67e70faf-2376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:f5:25:16:f3:fb:31:a0:fe:b4:e1:8d:20:
d9:df:24:b0:8c:d2:23:50:e5:62:47:e9:85:5e:2c:
9c:66:bd:51:d8:4b:66:f8:19:bc:f8:e8:d8:13:ef:
dc:3a:ff:62:5a:da:6f:5b:ce:7f:ed:ad:b1:ff:18:
dd:62:64:81:f5:71:0c:79:7f:65:1c:c8:0d:1a:5b:
25:bd:65:a4:52:26:b4:1d:f7:0f:3a:ba:20:40:fb:
48:2b:01:2f:19:f5:28:31:52:7b:28:94:29:b2:18:
90:ba:65:ca:00:de:be:2a:2d:1f:8d:ce:1f:e7:3f:
1c:c5:21:ea:71:4c:36:1a:26:72:1a:ac:f3:bc:ac:
2a:b7:2a:96:59:54:63:62:e3:dd:31:5a:a0:f7:0d:
36:33:58:46:b8:b5:67:be:10:22:6b:26:8b:86:c4:
e5:fb:3d:2c:0b:c5:c6:6c:14:5a:27:fe:c0:e3:12:
88:90:a2:ea:30:1f:a5:a2:9f:3c:27:15:db:57:c3:
b1:9d:d4:c4:b5:f7:92:72:90:5a:0e:d8:1d:76:39:
9f:95:dd:85:a1:9d:e9:87:40:4b:eb:11:49:48:71:
68:de:87:5f:6e:6c:e0:f3:4e:49:41:df:a3:d9:26:
04:06:10:4e:07:bf:b0:ac:18:74:a8:de:d4:d6:ee:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:10:3B:41:0C:2D:E9:3D:6D:3F:0E:C1:97:71:EB:C5:13:A5:F9:24
X509v3 Authority Key Identifier:
keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:ad:c4:a5:98:a3:21:06:bd:ca:9f:d8:a8:db:ad:70:5c:f6:
e7:59:f4:f1:b1:40:29:43:6d:2a:1c:a0:df:0d:d7:c7:31:50:
be:95:77:03:3d:47:db:da:e1:70:f0:14:f6:94:d4:ca:00:0e:
c1:f1:fe:35:ad:2e:4d:93:e1:e8:c3:23:fe:4a:03:ae:7e:56:
5e:28:3c:39:37:88:14:21:a2:37:11:86:4c:64:fa:2c:59:34:
0f:09:3e:81:43:40:9c:b9:36:1f:d6:58:53:88:d3:18:ac:aa:
12:e0:8f:a2:91:bb:1e:cd:17:5b:c0:10:f5:4e:99:de:24:33:
b4:d8:5c:63:5e:48:0e:05:a7:24:3c:72:35:c7:0a:17:d7:7d:
24:50:ce:f5:6b:0f:8b:a7:97:d0:f2:11:24:0a:9a:be:c0:03:
9a:de:a3:03:ee:09:e2:88:4a:05:2a:18:41:fc:8f:3b:f8:1c:
39:44:55:48:73:02:a7:5a:28:cd:24:02:dd:08:13:4c:47:e7:
27:42:5a:a7:6a:82:93:c1:bd:b6:c9:a3:86:b3:5b:d2:ef:68:
a1:be:a9:8f:1a:b2:e0:fb:da:a0:db:4e:9b:68:8b:73:05:fd:
65:7b:df:55:e4:2d:9a:e8:cb:01:fc:3b:8a:3c:05:87:4c:39:
e3:7a:d5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:42 2025 by rpki-client