Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft
File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json)
Hash identifier: NgG7SLrzZY2jLWKeHU9gKGDeqY+oo2RcPvt12XRlYbQ=
Subject key identifier: 58:25:DC:ED:AA:36:9F:29:EC:A3:C6:16:74:89:49:03:38:43:33:A6
Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37
Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537
Certificate serial: 1D8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft
Manifest number: 1D78
Signing time: Fri 28 Mar 2025 16:14:09 +0000
Manifest this update: Fri 28 Mar 2025 16:14:08 +0000
Manifest next update: Fri 04 Apr 2025 16:14:08 +0000
Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: fANlJWF1tzi3XuYTdPSyEaxfK3zQY+odSWYhRE4ig6s=)
2: 4865DD00A13B11E687921078C4F9AE02.roa (hash: MaFWYkY2HcnSI16cq7zrf3Xg1TMrKe+K2OOU5n2vPcU=)
3: 1D57FF40A01311E684546521C4F9AE02.roa (hash: 8kLRR6g7/NXM5uPCUqU+X4Qb9woBVi0kDN/Wkxs+ARo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7565 (0x1d8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91561B7
Validity
Not Before: Mar 28 16:14:08 2025 GMT
Not After : Apr 4 16:14:08 2025 GMT
Subject: CN=67e6cad0-6f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:12:e6:dd:21:d4:ad:01:2b:55:36:04:3f:
5c:8e:f1:0b:30:18:0b:4e:06:16:cd:58:39:16:99:
9f:06:57:d0:af:d8:39:d5:61:e0:d0:17:c6:39:f7:
26:24:2f:a6:55:37:83:79:2e:9a:b9:a1:7f:ac:d3:
47:6e:b3:27:2c:e8:b9:98:18:ea:ee:c2:96:23:0f:
b1:7d:0e:89:0f:3a:2e:e7:da:59:62:c6:14:4c:7d:
4b:1e:e6:1a:2c:35:9d:5b:38:4a:9b:60:5c:10:dd:
85:01:64:a5:bd:c8:ad:70:93:33:e6:c0:97:f4:c9:
00:56:10:10:70:20:aa:00:12:52:e4:30:62:aa:1d:
95:06:57:38:50:75:07:d2:47:75:0e:e5:0f:5f:97:
0e:38:9e:94:62:6b:6b:38:d2:7d:79:f6:0a:ce:e6:
21:b4:0a:e1:06:0b:44:70:8e:b8:32:43:68:95:6e:
c7:27:2f:ee:13:6d:09:ea:c9:d8:51:52:b7:4b:c0:
a8:4a:d5:6f:c6:f9:8d:86:b7:d6:62:da:47:c8:cf:
af:ff:0f:f3:1d:47:4c:d3:14:ba:c5:10:0b:7e:72:
3a:15:32:a9:42:b6:2e:88:0d:8c:47:2a:80:8c:77:
f2:7b:0b:0c:25:ac:a0:54:d1:1d:d0:82:4a:90:f1:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:25:DC:ED:AA:36:9F:29:EC:A3:C6:16:74:89:49:03:38:43:33:A6
X509v3 Authority Key Identifier:
keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0d:d4:61:5a:39:de:f9:1f:ca:a6:55:11:cc:8f:ea:3e:0d:
f3:34:09:b8:0a:59:45:58:51:c7:15:ba:d6:b2:93:c8:5e:f3:
f0:49:15:78:45:1f:e7:7f:ed:fe:80:02:6e:22:7d:60:16:e7:
f6:ae:8d:38:8d:87:a2:24:15:09:21:a0:9e:8a:60:82:e5:0a:
6a:c0:d3:1a:2f:4a:7a:b3:89:ef:bc:9d:02:72:3b:07:a0:68:
25:ae:d6:b6:3b:a4:cf:85:c3:9a:0b:6f:20:6e:a0:da:ad:c3:
26:10:e5:82:7e:68:87:0c:c9:35:ce:3c:fa:e8:cd:b5:4c:14:
b7:62:72:0d:79:13:27:2b:5f:45:10:c7:04:f5:9c:b4:db:80:
50:5a:8d:b7:bd:a4:d4:0a:db:9f:e7:25:68:42:ff:1e:59:de:
df:67:e1:74:2e:18:97:18:71:09:43:23:f9:55:c0:c8:0c:69:
74:c2:0c:09:ce:51:c5:27:f8:e0:0b:c0:70:6f:85:cf:b4:33:
93:c0:55:c8:1a:7e:26:d3:68:ba:d8:18:1c:77:cd:9a:96:29:
08:99:7b:d6:4a:60:b5:9e:86:7b:cb:a4:6b:04:96:1e:d0:34:
e5:a8:cd:a9:12:5d:8b:45:35:f0:f6:b4:1f:13:b7:49:76:d0:
6b:c1:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:28:55 2025 by rpki-client