Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
File: D2tHILCjVyLYXzRG79R0C9NBg04.mft (raw, json)
Hash identifier: ly8gAyjNnhwsAhJtsIPiCUIkrNNj0A+5VaMN7FAs7ZM=
Subject key identifier: 4E:9B:A4:7C:97:24:64:BF:01:39:DA:9C:10:B3:C3:97:A4:1D:04:89
Authority key identifier: 0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E
Certificate issuer: /CN=A91850AD/serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
Manifest number: 6F
Signing time: Sat 29 Mar 2025 06:10:52 +0000
Manifest this update: Sat 29 Mar 2025 06:10:52 +0000
Manifest next update: Sat 05 Apr 2025 06:10:52 +0000
Files and hashes: 1: D2tHILCjVyLYXzRG79R0C9NBg04.crl (hash: QLTzTkmUxLLA/sg0yABvxTgaZb3gbCOY5srSVnXUOxE=)
2: CD1FB5C2643611EFA2C41948C4F9AE02.roa (hash: 2LzL+Qzx3p8kIBRv0QRWzi2huUwOzt6OF9O+pNxeoDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91850AD
Validity
Not Before: Mar 29 06:10:52 2025 GMT
Not After : Apr 5 06:10:52 2025 GMT
Subject: CN=67e78eec-16e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:3e:2e:f4:e8:24:30:d6:71:21:a6:a6:7c:
c2:01:f1:6d:c6:18:7f:bc:3a:ed:1a:e0:a9:68:14:
9a:55:79:b5:18:82:0d:fc:bb:c7:6e:91:aa:90:6c:
aa:5a:a1:82:23:3d:37:f7:99:0e:13:c4:43:5a:01:
7e:c9:6d:2f:71:5e:8f:af:77:fe:84:34:37:ba:97:
ae:ec:cc:7d:3f:fc:17:c9:ce:1f:1e:73:ea:67:10:
dd:92:3b:bd:d8:2a:09:10:74:43:57:7a:f6:93:00:
cc:7d:c9:6c:c1:84:2b:32:7a:27:1a:76:31:14:2d:
61:88:2d:a2:ee:d7:04:40:78:6b:db:fc:f6:51:c8:
d5:00:8b:74:88:06:74:0b:30:bf:3d:b0:cf:e0:f0:
fa:ef:03:fc:a7:80:80:52:b1:e8:e0:9b:9d:90:9e:
8a:7f:5c:ad:1e:d7:c9:87:29:d1:4a:50:aa:48:88:
16:2f:d2:fe:84:d1:96:c2:da:bb:83:9a:60:6c:43:
50:1c:aa:e8:e8:5c:12:a5:78:ed:ea:e8:7e:6f:19:
5a:ef:ae:94:a3:f9:94:c6:dc:86:ee:d1:31:76:e8:
f0:bb:8b:dc:be:e9:bc:00:a5:9a:95:ea:5e:26:a1:
27:69:8d:29:0d:44:33:43:73:e7:9b:e5:23:48:8c:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9B:A4:7C:97:24:64:BF:01:39:DA:9C:10:B3:C3:97:A4:1D:04:89
X509v3 Authority Key Identifier:
keyid:0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:df:a1:b6:c8:a3:d5:8b:85:82:6f:6b:9c:a1:53:db:c1:
cd:d2:2e:c8:4a:a9:8f:1d:37:18:8f:f5:ed:60:bb:1a:ad:d2:
20:84:a0:ba:4a:db:a9:e3:1a:a7:8a:f7:9f:31:b6:95:bd:1f:
32:73:fe:10:3f:8b:06:37:3f:3b:7a:26:c1:4d:9a:51:9a:1f:
f3:8d:3c:4d:83:ec:cd:b7:5a:4d:16:4d:f3:f9:5a:4b:73:cc:
17:86:78:56:28:03:e8:89:38:a5:85:8f:3a:fa:b1:85:86:05:
ac:bd:2e:93:c7:75:9e:c6:7a:94:5e:e0:8f:5c:0a:65:b7:b4:
59:73:e6:43:8e:6d:79:fc:ff:9f:ad:36:b0:dc:4f:43:40:44:
3d:c3:6c:a1:89:6a:2a:b5:db:dc:88:2f:df:83:ac:2e:de:93:
81:cd:32:dd:98:b4:64:21:78:e7:37:08:dc:ad:18:5f:2f:be:
e8:37:8c:65:bf:7e:95:cb:d7:eb:63:ff:25:ae:7c:7b:69:fd:
61:2d:af:3a:30:ce:6a:f0:97:99:1b:a8:30:7a:1c:ac:bf:19:
e0:d9:ab:82:06:2b:24:54:52:9a:e1:2b:59:8a:04:09:6f:54:
67:03:45:aa:f3:85:50:ee:5b:c8:c8:21:81:de:b0:ec:f1:48:
d2:cc:01:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:48:42 2025 by rpki-client