Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
File: UyhhbneUVH65zpK0qPBF5LLMwPw.mft (raw, json)
Hash identifier: qgYwMOgBlYGzqfdn+i3PW/Vj77ORY7Q6PQRFTyDk34E=
Subject key identifier: 25:EB:D5:60:54:BC:F0:50:85:09:5F:1E:A9:7B:92:79:8F:7D:FC:16
Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC
Certificate issuer: /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC
Certificate serial: 1CEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
Manifest number: 1CE3
Signing time: Fri 28 Mar 2025 16:16:36 +0000
Manifest this update: Fri 28 Mar 2025 16:16:35 +0000
Manifest next update: Fri 04 Apr 2025 16:16:35 +0000
Files and hashes: 1: UyhhbneUVH65zpK0qPBF5LLMwPw.crl (hash: 6vvXyCJk9OUn6xMY7Hgie5xg4/DEX2Epc7P+WVlepVQ=)
2: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (hash: 0pFtdAh/nKnP5eoxsGxODsFcMEqhXHUTJ4P3f5IMFhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7407 (0x1cef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A0
Validity
Not Before: Mar 28 16:16:35 2025 GMT
Not After : Apr 4 16:16:35 2025 GMT
Subject: CN=67e6cb63-d184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:e2:8b:03:77:76:32:d0:9f:29:64:37:f6:
81:31:16:00:39:88:39:04:d8:fe:8d:f8:ce:d9:e7:
62:2e:5c:e7:f2:ce:29:3b:3d:61:67:19:2a:3e:6e:
eb:10:48:72:96:f8:2b:87:27:2d:d0:6f:05:b9:0d:
a9:ed:37:76:b8:97:74:cc:bd:be:8e:31:79:0b:17:
e1:40:f7:21:cf:ba:da:ee:d5:90:e3:df:26:d9:bc:
ae:13:3f:97:f8:74:c8:4a:2d:88:64:7b:46:49:9b:
28:59:0d:ba:3f:06:14:84:aa:52:4c:f6:37:68:77:
04:94:41:3a:31:08:5f:39:f2:5a:6a:29:f9:43:9c:
2e:31:15:6c:bf:7e:03:c3:90:08:7b:ce:37:d8:85:
d3:ab:43:ff:32:5a:1a:42:38:0b:7a:92:1f:4f:54:
9f:f1:42:e6:21:2c:a7:b4:c3:6b:0d:6d:3e:85:e3:
0f:38:1d:62:30:61:ff:4d:01:96:43:27:83:ff:3b:
c7:b7:df:da:1e:b1:67:c3:83:08:ac:e1:04:a8:33:
ee:82:ff:d6:d8:36:b2:c4:35:3b:c5:6f:3a:e5:a9:
b2:04:b5:cf:84:75:5f:98:92:de:de:53:4b:77:85:
77:3f:9f:b6:2c:89:b2:60:53:e7:97:bd:41:2d:72:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EB:D5:60:54:BC:F0:50:85:09:5F:1E:A9:7B:92:79:8F:7D:FC:16
X509v3 Authority Key Identifier:
keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:2d:94:55:01:67:af:78:e0:07:0c:83:55:1b:ff:54:80:24:
46:b1:0c:22:65:bb:be:51:32:b0:01:b6:f5:b9:5f:03:f8:e5:
c4:4a:b3:94:d8:e4:ee:6c:64:b9:ac:9d:22:f3:94:c6:6a:2b:
31:37:cd:d1:8b:9d:68:8a:99:90:be:bc:7c:6f:2c:e2:24:36:
92:1b:fd:64:ab:45:04:8b:7e:06:26:a0:67:62:24:42:cb:1c:
f4:52:d0:db:43:ed:2f:5a:03:36:fe:d0:41:c8:55:a4:f1:9f:
6c:e5:2c:94:a5:12:12:f9:ed:61:68:64:4a:53:c1:41:5c:a9:
2e:ed:86:c8:12:6b:01:b8:b4:2e:6c:92:0e:29:1c:17:21:d5:
94:61:68:18:9e:0e:69:67:05:92:d3:1b:52:83:0f:94:c4:29:
c1:43:ce:a4:50:bb:a7:37:ae:cc:0f:a7:8b:2c:37:f7:ce:ab:
eb:72:36:46:30:02:b8:db:84:e5:49:96:6f:f0:96:90:ec:bf:
32:fc:81:3f:23:1f:71:dc:31:3b:1f:70:27:ee:7e:86:4e:40:
15:b2:ec:47:f3:b1:8b:0a:8d:12:6b:96:21:56:6e:8e:cb:3c:
16:ad:8d:08:d2:b7:e3:46:03:d1:28:d1:89:4f:fb:44:35:ca:
e9:22:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:44:56 2025 by rpki-client