Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft
File: 1RCJONILodf7ySo7qZ8tafyPSog.mft (raw, json)
Hash identifier: W3zb7f8W2R2hQSc68qDd37IiGdTYqSvPPinM1OTJobE=
Subject key identifier: 8A:55:81:36:F0:4F:13:B8:D4:5F:30:2C:76:39:CC:78:21:A0:C6:AD
Authority key identifier: D5:10:89:38:D2:0B:A1:D7:FB:C9:2A:3B:A9:9F:2D:69:FC:8F:4A:88
Certificate issuer: /CN=A91836D8/serialNumber=D5108938D20BA1D7FBC92A3BA99F2D69FC8F4A88
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RCJONILodf7ySo7qZ8tafyPSog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft
Manifest number: 07
Signing time: Sat 29 Mar 2025 07:31:18 +0000
Manifest this update: Sat 29 Mar 2025 07:31:17 +0000
Manifest next update: Sat 05 Apr 2025 07:31:17 +0000
Files and hashes: 1: 1RCJONILodf7ySo7qZ8tafyPSog.crl (hash: e8u0uCSnTi+CjrcBCrwDZRL6Aslnt9ehwLg1rXcdiEA=)
2: 2A0F594C07B911F0B93D3034C4F9AE02.roa (hash: r5ruoCtRcYnEcHexWC9aJqjiLOW/BTPK5UGFj2P9wTI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91836D8
Validity
Not Before: Mar 29 07:31:17 2025 GMT
Not After : Apr 5 07:31:17 2025 GMT
Subject: CN=67e7a1c6-ce1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:11:77:1a:f6:fe:da:17:73:d1:71:0a:c2:
6b:6b:05:aa:3a:8c:ee:1a:7a:f2:11:e7:48:d2:5d:
57:09:5c:94:50:42:c0:c0:78:73:3c:fb:c7:1e:c6:
b1:cf:e9:0a:3c:bd:9a:e0:5c:e6:59:34:01:87:60:
2a:19:55:8e:89:f6:d8:96:61:48:f2:f9:cc:f7:4f:
fe:16:4b:96:56:2f:72:40:f6:48:a5:46:0b:dc:16:
93:8e:b4:63:26:3c:0b:09:f7:5b:64:01:53:8d:a0:
d6:d3:5e:f6:ff:d8:f7:f2:ba:0c:9e:c0:aa:0d:45:
6e:39:91:84:4b:8c:ff:54:c2:8b:d6:7b:49:c0:ba:
e6:39:d1:e4:f6:9d:bd:49:31:97:c5:2a:45:07:cd:
e8:e7:c9:bf:b5:2e:63:9e:36:4e:eb:f9:3f:a0:b1:
ba:e1:57:49:c8:ff:55:df:5e:ee:47:ad:1a:ed:be:
b7:4b:0f:d4:d0:a4:45:99:c1:45:1f:f1:67:f1:c3:
b2:59:a8:c7:b6:e7:b2:48:5e:48:bf:d0:b3:e5:7b:
0e:d3:cd:b0:75:c0:68:40:2f:a0:52:a6:e3:bc:e0:
8c:28:7b:b7:20:83:07:66:05:38:19:00:57:00:5b:
d6:6b:f2:87:03:25:e4:22:f3:30:89:0e:b4:73:77:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:81:36:F0:4F:13:B8:D4:5F:30:2C:76:39:CC:78:21:A0:C6:AD
X509v3 Authority Key Identifier:
keyid:D5:10:89:38:D2:0B:A1:D7:FB:C9:2A:3B:A9:9F:2D:69:FC:8F:4A:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RCJONILodf7ySo7qZ8tafyPSog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836D8/32DAB29207AF11F09606E534C4F9AE02/1RCJONILodf7ySo7qZ8tafyPSog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:55:14:44:40:4a:1f:6e:70:bd:4a:98:28:f4:f4:32:ff:8e:
32:d5:ab:71:da:8a:6f:8c:1e:08:b3:1f:2d:e2:7b:72:d8:93:
86:48:4d:00:93:d6:af:99:39:56:08:45:e3:fe:50:47:a6:da:
12:b5:9b:8c:52:1f:b5:5c:d5:16:8b:7e:26:0f:24:1c:ac:c7:
fd:62:d2:91:d0:8f:d6:f1:3e:23:3b:32:91:8f:a7:c3:23:9e:
7c:e3:70:c0:52:35:2d:c3:03:78:0b:cf:00:d2:27:13:80:ab:
51:11:ec:29:80:f9:db:8e:c4:bb:f2:05:b6:2c:2f:2e:a8:72:
a1:8b:c9:bf:75:06:95:f8:45:e1:1d:f2:49:e4:2e:0c:3a:38:
b5:ca:00:e7:c8:fb:64:68:a9:d6:12:59:a8:43:f2:8d:93:ad:
62:95:8e:f1:1f:18:87:f5:3e:0b:ba:b9:45:e6:c6:24:be:a5:
2a:9a:41:21:f5:7c:d2:94:26:5a:ea:8a:de:55:78:8a:5e:27:
2f:f1:a7:b6:9d:ab:85:37:98:4f:f9:59:c4:d6:c7:31:83:a4:
ca:20:c7:63:91:6b:dd:31:b3:ed:d2:7f:a0:13:93:e4:30:e1:
a2:32:75:47:cd:18:33:02:77:20:b9:0e:23:9e:de:c3:3a:c8:
42:37:bb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:27:58 2025 by rpki-client