Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
File: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json)
Hash identifier: MJ1D9h+VlgMu0Lw+5EihjW4GXFic5N/6c+5MIA+wF3A=
Subject key identifier: EE:13:D1:B9:80:92:7C:91:0A:22:F3:97:96:3B:0D:CC:10:EB:A8:F2
Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79
Certificate issuer: /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
Certificate serial: 067D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
Manifest number: 066C
Signing time: Fri 28 Mar 2025 22:38:56 +0000
Manifest this update: Fri 28 Mar 2025 22:38:55 +0000
Manifest next update: Fri 04 Apr 2025 22:38:55 +0000
Files and hashes: 1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: NMwJu94YUoXjXZ3zs7Kut7zqB1AbOiaKtCQCRb/O3cA=)
2: 56A937F2360411EF8AA77687C4F9AE02.roa (hash: jBtUWO90hOewkZT/IOz6vgpi/ww1P3BMTXwB63qoFnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1661 (0x67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0277
Validity
Not Before: Mar 28 22:38:55 2025 GMT
Not After : Apr 4 22:38:55 2025 GMT
Subject: CN=67e724ff-10ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:6c:73:7b:b2:ec:62:a2:0d:69:f0:91:81:
5e:98:bf:4b:a5:e0:d9:88:2a:6c:45:7a:08:c7:5a:
07:41:41:11:f8:3c:50:b1:32:e1:96:39:72:6b:52:
d4:62:58:34:8a:32:46:cb:b6:84:54:51:3e:32:31:
f0:fa:f1:c2:a9:b1:1f:c6:41:ff:82:46:7c:2b:06:
58:e1:91:73:e5:4f:a4:87:ec:00:31:8e:9e:bf:1b:
d3:b1:39:c6:44:21:e9:df:6c:64:42:ce:15:a0:d2:
f7:2a:54:85:f5:fe:9a:9c:b5:1f:c3:3c:9b:34:84:
ff:d0:b9:4e:5f:4f:b5:b0:8b:80:55:57:1e:1e:26:
2d:7f:ab:37:ac:25:ba:e6:0f:22:58:88:9d:e6:62:
f0:ed:13:25:5b:21:2c:25:83:1d:ae:a4:97:5b:9b:
14:e1:f3:93:b8:6e:21:28:0f:73:1e:f1:11:cc:43:
01:de:d7:b1:76:79:28:c4:89:18:65:17:d5:81:88:
24:66:07:c4:65:47:c9:af:18:f6:6b:2e:4e:07:9c:
ef:b1:67:33:cd:6e:70:72:2b:93:31:aa:e3:c7:c9:
84:ee:0e:0f:44:6a:fe:1b:38:ee:44:c0:be:cc:65:
74:4e:fe:77:ff:c6:94:ea:5c:ec:31:77:79:11:04:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:13:D1:B9:80:92:7C:91:0A:22:F3:97:96:3B:0D:CC:10:EB:A8:F2
X509v3 Authority Key Identifier:
keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:9b:87:8b:d4:49:43:c9:bb:61:28:81:cd:bd:30:8f:1b:3e:
e3:fb:a7:4e:8f:25:96:90:b3:43:fc:79:24:40:cb:7e:72:cb:
03:c0:0d:73:b5:c6:30:1b:78:69:c4:d5:98:9a:c2:bf:3c:d6:
1c:57:e3:8f:47:cd:6a:9c:ae:b2:a6:b6:15:d5:18:c6:2e:91:
22:78:29:36:c0:cb:21:25:aa:1b:dc:81:81:0d:e1:30:67:a0:
48:97:f4:f2:c3:cd:e1:f7:bd:2a:20:01:3a:a9:c0:b6:c2:05:
97:0e:32:e6:44:df:01:b1:22:8c:02:87:c3:e4:64:07:40:8a:
d7:e9:c2:00:a9:f2:f3:26:8f:f5:7d:bd:cd:42:e5:01:d4:9a:
83:aa:14:15:e0:4a:4c:cf:f5:a4:ba:7e:f7:c4:a1:29:7f:28:
14:78:6e:d0:35:8f:dd:64:96:35:67:0f:8f:bb:48:bc:32:bd:
2c:84:82:fb:98:83:eb:69:00:5a:2e:04:bc:36:bf:20:d1:49:
96:57:0b:dd:76:d8:7e:62:e5:1b:62:6d:1a:72:a1:78:60:d6:
b5:b1:be:fb:31:10:41:e2:b5:6c:8c:ee:8c:a6:ab:2a:06:b2:
15:98:53:e2:5c:f8:df:31:d0:0e:8a:99:01:97:10:ba:fc:84:
00:1b:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:28:53 2025 by rpki-client