Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json)
Hash identifier: SzGIPy+7ZcmL4XuajPR7IlvQ8J0mWR0eeVtgppV9LU4=
Subject key identifier: 5E:BE:C0:FF:19:AF:43:AE:EF:68:45:1F:7B:AB:E6:6F:D4:B8:36:36
Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0
Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
Certificate serial: 049D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
Manifest number: 0495
Signing time: Sat 29 Mar 2025 00:18:21 +0000
Manifest this update: Sat 29 Mar 2025 00:18:21 +0000
Manifest next update: Sat 05 Apr 2025 00:18:21 +0000
Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: pxXguunD8+ygpCwglXsRyaAuNZMJ99hjU1sLjtp9E1I=)
2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: 1V7aP/VrpDWRfbx48ExD+guKYQgGjkaPqkclj0jq9EU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923E1
Validity
Not Before: Mar 29 00:18:21 2025 GMT
Not After : Apr 5 00:18:21 2025 GMT
Subject: CN=67e73c4d-e51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:11:d9:91:5a:1a:0e:04:29:0b:b9:fa:23:
72:25:7a:7a:1f:5c:48:65:cf:a7:ce:40:61:dc:1f:
75:10:35:26:b6:ef:1b:f1:b9:3e:86:79:26:24:d0:
a2:b8:a4:d8:48:ff:81:a0:94:06:71:d6:f1:e2:ae:
da:dd:19:4f:a7:1e:ad:4a:05:64:96:79:80:77:b5:
55:d9:e9:77:a8:31:62:a8:b7:03:19:dd:46:0c:09:
4e:83:c1:2f:d8:5c:56:f9:1e:14:7b:5e:a1:79:81:
12:55:88:6a:76:cf:7a:d2:37:a5:e5:4b:ac:cf:0e:
46:26:99:cc:a0:3a:ea:cc:ea:52:2f:77:9c:a9:70:
da:d0:c8:ce:16:40:66:a3:ca:51:09:bc:28:a4:54:
f6:16:28:1b:26:42:fd:d8:89:5d:b6:85:14:de:cb:
ff:06:8a:3f:9a:7f:c9:97:55:b9:d0:e3:9e:a6:8a:
af:5a:d3:75:2f:32:c2:af:d0:97:94:3a:b0:1e:47:
50:ad:18:0e:be:d0:9d:b1:8f:c3:7c:7b:a2:ca:06:
71:c1:c0:cc:d2:c8:4c:f8:b0:2f:b7:5c:df:19:a6:
f0:83:3c:bb:89:f5:c7:dd:1e:db:ef:e0:86:d9:50:
9c:24:01:d7:89:40:75:5a:53:d1:77:b0:1d:cb:21:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BE:C0:FF:19:AF:43:AE:EF:68:45:1F:7B:AB:E6:6F:D4:B8:36:36
X509v3 Authority Key Identifier:
keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dd:a9:9f:b3:18:33:3d:c5:01:e0:70:fa:f6:e0:b3:ae:22:
d3:b0:e4:ef:73:af:66:f4:48:83:52:7e:aa:4b:b2:c2:9a:98:
ce:34:72:74:61:86:34:fa:88:66:cd:66:e9:6c:4e:02:64:3c:
2d:aa:b6:a1:bd:f9:f2:92:9a:e7:b4:d5:c2:b4:51:1a:d6:19:
b5:7a:e7:2a:7e:c6:1c:e5:f2:d5:c8:4c:43:1d:cb:9c:04:3c:
6b:60:ef:cd:b3:6c:75:58:15:69:99:13:12:e4:ec:5b:88:38:
c6:98:2b:c9:61:ad:de:ff:5f:0e:9f:ba:f4:dd:08:81:d6:c6:
91:a3:37:85:75:33:00:44:6f:79:de:ea:06:7e:55:de:74:36:
0d:24:a4:53:c2:7b:46:1f:b9:01:c0:15:da:87:fc:18:83:0c:
3f:1b:b1:81:86:b5:87:8d:89:ae:78:f1:b6:52:fa:5d:a4:6b:
24:1a:4d:fb:7c:04:87:aa:04:36:57:3d:94:04:30:0b:f0:03:
e5:2e:5e:9d:45:19:d7:b6:05:99:ef:5e:d2:d0:e5:85:22:e1:
8b:37:59:0c:fd:51:8d:73:05:b8:38:18:8f:08:61:66:55:9d:
32:93:53:55:f8:d1:5c:8c:77:1a:39:50:12:7c:c8:df:2c:13:
32:cc:35:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:38 2025 by rpki-client