Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier: FWRUu7GnsXC+V0u/J1SRbksRtAnCTjWLcjd/2W41j5w=
Subject key identifier: 50:6A:42:C0:D8:2E:22:C6:A6:D3:EE:97:04:C4:99:87:08:11:88:C3
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number: 01D6
Signing time: Fri 28 Mar 2025 22:49:05 +0000
Manifest this update: Fri 28 Mar 2025 22:49:05 +0000
Manifest next update: Fri 04 Apr 2025 22:49:05 +0000
Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: nszUkFwq8TeuYOPVEA2uJhgcdwNw3fIkWGLB9zrdxt8=)
2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: Ocok0YaJANXTvMflX7rHaTlDxzxA5eYlN+U42YstUOc=)
3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: NlZGw5kxdJBiCylDN3iP3l9B8OoHi1F1b4+2lDwSRDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC
Validity
Not Before: Mar 28 22:49:05 2025 GMT
Not After : Apr 4 22:49:05 2025 GMT
Subject: CN=67e72761-f079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:81:a1:9b:9e:ed:77:13:f5:f6:b6:1b:1f:
c4:b3:9d:a8:77:06:a6:8b:5d:e3:3e:b0:9c:c1:f1:
7d:d1:35:a2:4a:cd:5f:58:bb:b4:3d:d8:4e:bb:40:
15:06:fe:d9:fc:96:51:63:46:ae:b5:d9:89:ca:5f:
09:b0:73:13:5b:4b:ec:24:9d:41:10:c8:6b:ac:8c:
06:41:8a:f0:d1:ec:94:41:f5:d0:fb:81:47:62:37:
d6:e2:6c:b1:14:d9:a4:34:28:aa:bf:fe:0e:b5:21:
c9:76:9e:37:d3:11:f1:5c:53:54:00:2f:a5:79:b3:
1c:78:12:70:a7:76:ff:4a:a8:5e:89:68:f0:1f:5a:
4d:d2:af:57:43:33:88:ae:ad:30:45:4d:7c:a7:45:
5b:72:4f:a0:fc:16:a1:92:bb:e1:06:e5:75:cd:b1:
8d:24:a5:db:cf:c1:ee:08:48:b9:28:01:f6:2e:13:
1b:f4:92:fe:e8:a2:20:6b:b6:fa:33:e0:66:a2:c6:
d4:84:46:60:d7:9e:90:84:d0:88:a3:86:da:fb:30:
e5:42:f9:55:d0:ec:ef:fc:72:e4:2d:cf:88:9b:4a:
f4:8c:1c:1b:9a:6d:1e:81:54:01:5c:1a:02:d0:01:
29:f5:63:ef:16:92:b4:a9:0d:53:46:79:db:4c:50:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6A:42:C0:D8:2E:22:C6:A6:D3:EE:97:04:C4:99:87:08:11:88:C3
X509v3 Authority Key Identifier:
keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:35:6a:02:c6:24:10:18:32:e0:5f:40:77:7d:aa:fd:4c:a5:
13:60:c5:4b:e7:94:a9:6c:9e:09:ac:4e:7e:7c:33:b5:30:03:
a6:79:38:2e:17:d8:08:af:38:8f:73:91:e2:b2:06:35:6f:66:
c9:4f:8b:b4:f5:d4:59:a8:58:56:c3:19:0c:0e:cf:c4:1c:ed:
52:c7:28:d9:50:81:d2:2a:e8:57:6c:1a:03:ce:f6:a6:cd:5b:
fb:df:26:30:d8:7e:16:74:b4:6e:e8:fe:7a:9d:a6:1b:7e:7f:
b9:16:3b:2e:13:fb:24:91:fc:02:4a:f4:57:e0:64:62:c7:ae:
09:6d:7c:5d:de:6a:8a:bd:1e:7c:eb:e9:c8:f0:aa:71:23:be:
88:29:4b:1b:bf:b8:96:3f:bf:11:57:cd:e9:9c:55:73:4e:23:
3f:bd:68:95:5e:51:c7:1d:c8:5f:5b:78:6f:f2:76:fd:eb:8f:
5b:3e:30:5e:f1:26:40:55:9c:57:bd:a1:05:ad:18:09:46:35:
62:0f:92:d8:6d:e6:12:4e:da:af:cf:61:ae:3a:34:5c:54:2a:
13:39:c1:07:81:3a:38:45:03:55:12:04:de:0b:56:1a:f9:79:
89:08:f9:86:00:f0:7d:56:3a:b2:d4:63:50:b6:9b:10:ce:84:
c8:3b:4e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:55:43 2025 by rpki-client