Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
File: C6xCmG6avbfO4s37Kp_o1tAqq1w.mft (raw, json)
Hash identifier: NqfFXTqtPmSc1imfsBV575Olnsw8HCDIqLH1iPRt474=
Subject key identifier: 32:27:4C:C5:3D:23:65:42:CF:76:86:76:D0:D1:C5:A8:B5:AC:2C:73
Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Certificate serial: 036D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
Manifest number: 035D
Signing time: Sat 29 Mar 2025 01:16:53 +0000
Manifest this update: Sat 29 Mar 2025 01:16:53 +0000
Manifest next update: Sat 05 Apr 2025 01:16:53 +0000
Files and hashes: 1: C6xCmG6avbfO4s37Kp_o1tAqq1w.crl (hash: 2h5dAB5eUbABKO6ssmwZ8uua7m60G4dOvNVSQ94hC2I=)
2: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (hash: 6/4Wi7NNWL18DEfbDuCr0VcAnjHlRgOew4WUdCphh0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975CC
Validity
Not Before: Mar 29 01:16:53 2025 GMT
Not After : Apr 5 01:16:53 2025 GMT
Subject: CN=67e74a05-dcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:e4:f1:06:ed:70:bf:2a:ba:c6:3d:77:a5:
b6:3e:88:b5:c2:94:26:44:46:a7:d9:be:d3:a7:8f:
2f:f5:46:45:2a:5a:ae:1d:b3:c0:30:64:06:0e:09:
8e:3c:ad:81:73:57:47:48:d7:58:b7:3d:b5:28:61:
6e:ee:54:e9:53:32:55:19:2b:76:62:ab:45:40:25:
c3:3c:76:44:4b:71:8e:27:49:ae:57:48:ae:88:d8:
92:fa:35:5f:45:0a:d3:aa:4b:37:13:2c:7b:2f:46:
22:a7:69:22:7b:68:35:6f:b8:96:22:c9:09:ad:cf:
af:a5:f2:19:f5:d9:95:ae:5b:92:0e:2a:a6:c1:b2:
62:60:98:48:b7:dd:84:9c:db:59:01:29:18:66:c3:
dc:79:d5:e2:e4:09:da:4c:e5:f6:34:9b:74:e2:62:
81:fb:4d:bd:c8:8d:38:7a:b8:3a:ea:5e:5e:58:1f:
f1:11:16:81:67:20:e1:c9:47:3c:2f:99:5a:b1:99:
40:17:94:e6:7c:4f:b1:9f:33:26:5e:f8:81:63:f4:
c5:bb:c5:1a:a5:3b:61:2f:48:f8:0b:63:b7:03:f1:
02:49:6b:c8:26:78:79:90:79:ad:6e:e6:e0:5b:7e:
2c:cd:90:cc:f0:93:88:38:e6:18:a2:a5:3b:d3:d4:
c3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:27:4C:C5:3D:23:65:42:CF:76:86:76:D0:D1:C5:A8:B5:AC:2C:73
X509v3 Authority Key Identifier:
keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:7c:71:e4:f0:86:9a:e0:c4:63:d2:33:dd:2b:ae:04:82:2d:
9c:2a:36:99:e1:33:58:e0:be:b4:9b:8c:31:a6:6c:90:76:46:
4c:75:9c:65:84:cd:2e:0a:d5:77:4f:c0:22:68:53:58:dc:99:
9d:5a:1f:16:6c:b5:bf:cc:d4:73:c7:77:7d:b2:64:e7:d4:e5:
af:9d:32:fa:ae:54:10:65:7b:38:2b:7a:03:92:0f:09:bf:19:
e4:43:9d:a6:c6:6f:3d:da:2c:72:4f:bb:71:cd:9a:5b:cf:14:
e5:b4:49:d3:37:17:63:8f:f8:95:77:0d:6a:45:92:0a:44:64:
5c:94:b4:c7:59:96:7b:ae:0a:55:4c:46:0b:b5:3e:86:b4:0a:
03:6f:38:24:f3:85:56:e1:ee:f6:6d:fd:39:4d:a5:e9:23:58:
63:31:90:7d:3c:de:67:a3:93:02:22:be:31:1b:64:fd:fc:95:
8f:57:82:8a:da:86:cf:72:70:31:0a:32:89:94:f8:5f:3b:31:
47:c3:ec:d5:c9:d3:d4:f7:bf:60:3d:3e:39:ce:bc:fa:03:99:
1d:68:79:25:f0:06:d7:16:3b:7d:5b:9f:a4:8b:6f:53:26:e4:
21:68:40:3d:7e:02:e4:14:a1:80:36:9b:be:e9:fa:a2:e8:fe:
a4:d4:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:27:25 2025 by rpki-client