Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
File: rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json)
Hash identifier: ePgq31w1R8Gms6CvrHKmy3lzGarErn7o0VB1gGbkYj8=
Subject key identifier: 67:E5:2B:02:AC:68:DE:57:00:D2:16:87:78:AC:6B:55:F9:CE:DC:2D
Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49
Certificate issuer: /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
Manifest number: 01A6
Signing time: Sat 29 Mar 2025 02:52:58 +0000
Manifest this update: Sat 29 Mar 2025 02:52:57 +0000
Manifest next update: Sat 05 Apr 2025 02:52:57 +0000
Files and hashes: 1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: ePudrv6Icf+htaEof4YZ18rcqLdKwpw4dX39M9PZ4Pk=)
2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: 2J/4S4P7iHBoNIa8ALxa/H8YBNXVUqoF1W5QLX0G6vs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91689C8
Validity
Not Before: Mar 29 02:52:57 2025 GMT
Not After : Apr 5 02:52:57 2025 GMT
Subject: CN=67e76089-c274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:3c:5f:b7:75:c3:a8:6a:a9:49:ec:d7:fd:
35:fe:6f:72:a8:d1:7f:03:1d:88:ab:db:eb:26:6f:
c8:8b:61:8e:fe:ff:f6:f7:f6:76:92:7e:27:e1:dc:
01:d4:93:98:07:2b:be:dc:9e:12:54:7a:53:34:9c:
d8:d6:21:4c:97:b8:cb:b2:f2:c8:1d:ac:c5:6d:88:
df:d7:df:8a:88:bd:1a:f2:e6:9e:cc:ac:c6:fa:46:
9f:26:b2:e3:02:c4:e3:e6:e5:87:b3:f8:56:6c:dc:
1d:e9:73:8a:32:cd:7f:dd:81:46:fb:55:02:9d:02:
4c:54:1b:7b:a7:12:bd:54:12:a6:4b:04:b7:21:4a:
44:51:80:4f:36:78:c7:04:95:c6:58:f1:1f:51:79:
27:32:8e:e9:c1:44:d5:43:b7:b4:b9:f6:c0:d9:14:
c2:83:35:19:22:13:50:9d:24:1b:2d:34:64:a4:5b:
81:f0:a4:e5:8c:3c:89:fb:87:4e:9a:78:04:51:15:
5d:3e:d5:b1:50:f2:06:80:cc:a9:3c:37:6e:53:9e:
9f:64:95:92:d6:77:1e:7a:e1:55:53:00:64:6c:54:
f8:71:6e:8d:86:a2:66:67:51:09:79:48:a1:4f:99:
3e:97:2a:0c:8f:6b:8c:b4:9c:80:44:a4:53:a8:02:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E5:2B:02:AC:68:DE:57:00:D2:16:87:78:AC:6B:55:F9:CE:DC:2D
X509v3 Authority Key Identifier:
keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:dd:a6:33:99:bb:f8:f6:ad:da:e1:77:df:ac:82:de:69:76:
87:af:69:1e:96:05:41:8e:7a:47:ec:78:c0:3c:ee:8e:81:28:
9d:23:01:2d:e4:4a:54:ac:fe:cf:7c:4a:cc:fe:2c:7b:92:f6:
f4:79:c8:e0:05:97:96:63:29:93:7e:41:0e:5b:ca:21:38:bb:
bf:27:c3:72:c4:32:02:e4:a1:78:e0:93:15:b4:0b:13:6d:f9:
c2:b9:80:d7:20:3e:55:f6:9a:be:0d:84:96:4e:6d:64:b9:f4:
58:60:a6:e0:6d:e3:98:ac:3d:60:d6:bd:18:c8:d7:c3:df:58:
ad:7e:f4:7b:ad:49:21:85:0a:4d:06:6e:f7:3d:a2:26:02:35:
85:ec:30:ff:b5:dc:bb:ad:2e:1f:95:00:ba:7e:e2:9b:2c:d2:
33:03:a6:2c:92:f1:a0:43:93:da:99:85:6f:0e:19:19:77:5d:
a0:e1:76:81:42:27:e2:8a:d8:ca:ad:22:bf:0f:da:5d:97:88:
32:5e:14:cc:cf:61:d4:ee:e7:70:d4:c3:e9:02:90:b2:5f:6b:
59:94:bd:f4:15:ad:ab:65:0a:01:7b:85:20:55:93:98:9e:15:
1f:2c:4e:ab:80:22:1d:25:31:f5:0c:db:d5:6b:10:ae:68:bf:
99:58:64:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:36 2025 by rpki-client