Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json)
Hash identifier: 1ODLahp8pUTxBJvCJhwEPvFF5UfQbzI9iCXh9FKOZ4A=
Subject key identifier: E3:33:DC:F5:2D:30:CC:AB:CC:7F:F9:79:13:70:F2:50:40:A9:62:BF
Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
Manifest number: 0220
Signing time: Sat 29 Mar 2025 02:13:12 +0000
Manifest this update: Sat 29 Mar 2025 02:13:11 +0000
Manifest next update: Sat 05 Apr 2025 02:13:11 +0000
Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: rn2ME/e0gagF1g+ae5jdhEaLOGJz3s1iyOrCM5cw4EM=)
2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: DDdOGJKEKYKXbDa5vtjLSsnRV8BgpNNS0rM4LZRyfrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91777A6
Validity
Not Before: Mar 29 02:13:11 2025 GMT
Not After : Apr 5 02:13:11 2025 GMT
Subject: CN=67e75737-f06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:5b:47:b7:84:28:8d:26:bd:ba:d2:52:6f:
28:05:7a:ad:ae:cc:91:79:3d:80:87:43:7b:87:ff:
1c:36:7d:00:88:1e:cc:54:e4:39:4b:ce:60:38:c9:
89:59:66:45:f6:49:71:57:c7:fc:f8:f3:a4:91:31:
d6:13:ab:c1:51:8b:21:bf:c3:77:bb:50:4e:08:c0:
1f:a6:68:67:35:33:c1:f5:81:eb:c9:73:0f:47:81:
2a:cb:5e:01:c0:47:4f:77:29:07:da:ea:2a:42:b9:
fd:77:a7:8c:96:9f:89:91:4d:17:9f:95:75:e1:a7:
d7:37:cf:9d:f0:ca:6f:e3:59:fb:94:86:c8:a4:ab:
6c:23:aa:89:de:91:cc:55:8e:ce:1a:d1:a3:c5:c2:
5f:2a:07:39:62:0f:76:cc:aa:36:e0:cd:b1:fa:b0:
20:05:25:af:fc:d8:11:47:90:90:eb:63:52:b8:fa:
e4:22:20:2c:2b:38:e4:1a:b7:c2:f1:fb:72:80:06:
44:d1:36:f0:f5:03:82:69:5e:f4:44:e7:13:d1:8b:
94:56:fd:a7:47:9b:75:1d:75:b7:13:c5:23:9e:bc:
a2:ae:2a:9e:84:b9:ea:15:99:63:77:1f:a8:68:a7:
8d:b4:63:d4:fd:a6:3e:be:bb:ca:6d:d2:e1:17:b8:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:33:DC:F5:2D:30:CC:AB:CC:7F:F9:79:13:70:F2:50:40:A9:62:BF
X509v3 Authority Key Identifier:
keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:33:79:4f:34:e1:f6:ba:2a:9a:36:4f:ff:19:5d:a2:82:14:
41:0a:df:99:32:6c:52:84:ec:e4:e3:89:1b:40:6d:4e:7e:a0:
ae:e4:22:7f:69:66:c4:56:e0:75:b1:f5:0e:8c:9d:40:75:95:
5f:12:62:32:4f:05:81:a4:d1:a4:2b:6c:4e:50:0a:00:46:2c:
c8:8e:55:f1:ed:36:85:0c:d8:ac:9e:70:bc:36:41:85:71:ba:
8c:cb:c5:17:48:a6:70:f8:f7:bc:9c:03:1a:c4:b4:fe:58:8a:
ea:e0:2d:50:dd:45:21:18:dc:af:f1:8b:49:26:6c:37:6d:79:
4b:9c:7c:90:3e:03:c2:79:2d:86:e7:bb:90:0e:f2:ac:51:c1:
bf:c2:06:11:20:c0:99:c9:f2:d2:17:d6:63:30:08:df:ee:4a:
41:e2:9d:27:07:16:54:c5:48:6a:13:53:06:4e:91:d5:37:e4:
5e:6a:04:e2:5d:59:82:26:6b:0e:cc:8f:9d:8d:4f:9d:7f:06:
10:c0:6b:53:3f:f7:60:43:38:70:34:b1:85:2b:62:35:5c:c0:
ab:ca:38:08:ca:1a:80:80:ea:36:10:30:c5:30:d3:a1:fb:f7:
ad:29:50:4f:ca:cd:9c:72:3e:b1:2b:42:ee:00:d0:16:de:09:
f5:a6:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:22:06 2025 by rpki-client