Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
File: OIes3fccvvSnUh2EUe7LrrJRnv0.mft (raw, json)
Hash identifier: zSWu3lZQ1wC5xBGdlItYhS/tyciZnfRA+VAGNl1zO48=
Subject key identifier: 4E:D0:3A:4E:85:3C:18:D1:D2:4E:FA:01:CB:6D:A3:D2:27:ED:68:3D
Authority key identifier: 38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD
Certificate issuer: /CN=A91778D4/serialNumber=3887ACDDF71CBEF4A7521D8451EECBAEB2519EFD
Certificate serial: 039B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
Manifest number: 0397
Signing time: Sat 29 Mar 2025 01:02:19 +0000
Manifest this update: Sat 29 Mar 2025 01:02:19 +0000
Manifest next update: Sat 05 Apr 2025 01:02:19 +0000
Files and hashes: 1: OIes3fccvvSnUh2EUe7LrrJRnv0.crl (hash: 1mMBKWhF3t+vAzCBh74B64VjMWtrVyhO8rP2jVmr1Tg=)
2: 13F9F650905511EC9A978D19C4F9AE02.roa (hash: CfbtaxsbT8QkNpB+dr8l4I71elKTP/TaO4DWd5BrJjY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923 (0x39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91778D4
Validity
Not Before: Mar 29 01:02:19 2025 GMT
Not After : Apr 5 01:02:19 2025 GMT
Subject: CN=67e7469b-407b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:af:90:ca:10:64:79:b8:02:7e:52:19:3e:a7:
93:de:dc:e3:6a:8e:b6:b9:a1:f5:7d:c1:5e:32:31:
41:37:56:bd:4c:a9:75:c8:6a:d8:49:05:95:eb:21:
e9:29:e4:de:fb:d0:46:9a:2f:5c:ab:91:09:f8:4e:
14:34:21:66:6f:fd:72:4c:01:f9:f7:02:c0:49:52:
2d:5c:65:9c:d5:88:07:0d:73:c1:fb:49:08:56:f9:
02:22:51:1e:dd:16:c2:5f:84:db:1b:ae:3b:45:28:
00:ac:5c:d2:94:e9:75:9f:31:b5:62:13:a3:ef:f6:
59:bc:40:f0:95:83:e7:c2:b1:85:10:0d:8e:db:8f:
03:c4:d8:2c:d2:04:d5:9c:72:a3:04:d2:17:62:3e:
8c:43:f1:63:85:2e:4e:ff:54:11:da:33:17:35:94:
5e:4c:87:d7:2b:04:be:d3:1a:87:cc:15:79:37:4c:
9b:46:0e:fc:89:e3:16:ec:b9:65:2c:73:e5:ee:e9:
b5:40:4a:7d:e0:0b:82:ab:7e:b4:db:5d:05:c7:de:
27:72:62:3d:49:7d:78:f9:8f:14:3e:b5:5e:28:56:
db:b1:d3:4e:92:3f:40:28:ce:4e:c5:c6:52:2e:d3:
d7:f8:62:22:15:3b:cb:90:14:42:5b:75:9b:f9:43:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D0:3A:4E:85:3C:18:D1:D2:4E:FA:01:CB:6D:A3:D2:27:ED:68:3D
X509v3 Authority Key Identifier:
keyid:38:87:AC:DD:F7:1C:BE:F4:A7:52:1D:84:51:EE:CB:AE:B2:51:9E:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIes3fccvvSnUh2EUe7LrrJRnv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778D4/D9D5693A905111ECA3699615C4F9AE02/OIes3fccvvSnUh2EUe7LrrJRnv0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:6b:82:51:93:1d:32:bf:cb:ca:1a:f9:34:7b:ef:f4:ee:83:
f2:e0:f7:37:86:cd:9e:93:e8:16:94:ed:ae:0f:69:47:17:0f:
d4:ee:75:9e:61:0a:7a:62:8b:df:04:ae:ce:d7:b0:94:95:f7:
d7:a2:12:55:b7:70:dd:a3:14:3e:71:bd:70:eb:c4:5e:28:f5:
36:5f:4d:22:7c:76:a3:2e:e0:86:56:1f:66:ef:8f:81:65:17:
b0:19:dc:29:03:d6:22:f0:a3:fa:a9:5e:a6:1b:0f:19:bb:9d:
d3:64:42:f4:12:5c:f7:45:b5:37:b6:7c:8f:9f:e6:4a:6d:f5:
3e:4f:db:e3:31:da:68:5c:b7:42:5b:d0:83:ef:97:12:75:00:
d6:63:49:e4:9d:b2:a8:87:2a:77:6d:1a:eb:2b:56:d5:a8:bc:
62:05:9a:fc:c5:5b:d7:48:eb:8f:a0:46:3c:34:d1:bc:2a:c7:
72:1c:78:ec:de:92:d7:be:a4:ee:76:ed:c5:bb:64:e0:bd:f2:
b0:d1:a2:cb:55:ad:07:70:aa:62:a0:12:c8:b0:ee:cb:1e:df:
6c:aa:91:26:ab:14:94:87:cf:49:ae:1b:79:f0:e0:36:a1:6a:
19:85:e3:f6:6c:96:4d:ed:6f:1b:7f:0a:db:7e:ac:58:94:83:
fd:86:d9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:38:12 2025 by rpki-client