Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json)
Hash identifier: Ncerhhs2vkuxF9oYKt52rB6AwRMqn0P8MxRnzOXBU8s=
Subject key identifier: 8F:40:D0:8A:C6:53:6D:51:48:EF:19:C5:94:A3:5A:FE:38:F2:D2:AD
Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
Certificate serial: 043F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
Manifest number: 043A
Signing time: Sat 29 Mar 2025 00:32:36 +0000
Manifest this update: Sat 29 Mar 2025 00:32:36 +0000
Manifest next update: Sat 05 Apr 2025 00:32:36 +0000
Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: QABhbiUfZWdm9DlHjc6Lpudq2inYo0t82hQyivewk08=)
2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: HeEMxWbEp596Nl2YyjBu7WmXC2Fx4dfVT+MEH+2m8Ic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087 (0x43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91456E2
Validity
Not Before: Mar 29 00:32:36 2025 GMT
Not After : Apr 5 00:32:36 2025 GMT
Subject: CN=67e73fa4-1692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:c6:c4:e8:64:0b:b8:0b:d1:64:96:13:80:
4d:d0:24:79:9d:5e:4e:31:51:5d:81:11:a8:2f:62:
12:ba:d5:39:72:db:46:87:45:81:a9:28:8d:e7:0d:
80:b9:07:84:1e:43:fd:0a:a6:ad:62:55:61:7b:0e:
e9:52:d5:32:e8:2f:f6:4d:b0:c7:ed:9a:13:85:f6:
b9:f7:0d:78:dd:d2:ec:08:00:94:44:7f:99:61:6d:
27:c4:61:a9:74:0b:44:08:ce:92:bc:64:7e:a7:63:
96:ae:19:b4:b0:3f:87:e2:84:bd:f2:dc:ee:5b:ca:
62:b8:84:aa:46:df:3d:01:db:39:a4:93:a2:0e:c6:
f5:34:c6:57:f0:68:ec:f4:4f:75:b8:35:6e:b5:e2:
a9:a3:7c:52:c1:97:2b:30:8c:49:8e:8d:47:25:c3:
23:ab:1a:ad:41:79:9a:39:b9:64:cc:6b:34:c6:b3:
ef:b5:19:02:0e:74:33:1f:01:5c:e5:1c:97:61:60:
16:ea:07:5e:eb:57:40:74:69:ae:a6:4f:61:81:e4:
32:32:84:88:16:af:b9:0e:65:80:ac:b7:42:ff:15:
63:5e:cf:e9:27:64:95:5a:a7:fb:d0:78:4d:40:7c:
b3:22:0f:00:db:fc:7f:49:2f:88:24:40:a6:d2:46:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:40:D0:8A:C6:53:6D:51:48:EF:19:C5:94:A3:5A:FE:38:F2:D2:AD
X509v3 Authority Key Identifier:
keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:26:04:9c:a0:ac:ea:09:88:10:57:1b:ec:d4:2b:6f:af:93:
54:0c:ce:9b:d9:cc:ec:68:dd:00:c7:99:c4:b7:e4:0a:9b:39:
fa:b8:f4:43:0f:4d:28:ad:39:77:be:9f:61:a2:17:c0:63:23:
74:5d:17:68:e1:78:07:94:80:b4:ae:3f:b6:44:83:90:1c:b4:
5e:ec:13:e2:45:81:fa:25:4f:97:bb:de:80:af:c4:de:72:32:
58:fa:88:2a:9c:69:2d:b7:a1:b3:e6:25:e3:c4:2a:4f:ff:ab:
fc:9c:c9:60:08:a4:10:7f:9f:05:c0:35:94:2c:dd:c0:12:f8:
82:cd:02:54:0a:e8:c1:9a:89:4a:50:13:02:a8:2b:15:e3:8e:
ef:3c:d7:d2:ec:50:2a:7c:f8:f5:c6:83:b2:2b:f7:9d:ef:bd:
fa:a8:d2:76:bb:93:39:71:6e:7c:d3:59:20:4c:08:e1:2b:f9:
9e:47:b3:de:f9:db:b3:a1:ee:a6:de:6e:fc:94:8e:d7:18:1a:
76:bb:f5:b1:60:90:b8:cc:92:19:4e:75:e9:6d:59:47:79:29:
26:77:f3:47:c2:3f:9e:c7:42:0e:ad:15:a5:66:de:f5:d6:d3:
9d:ec:af:b7:b1:9d:7f:e3:0a:91:77:7b:d0:50:f8:73:4e:54:
9b:0a:10:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:43:49 2025 by rpki-client