Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
File: ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json)
Hash identifier: VU/Qh5QN0uyNrCEi8YXtFM9tocNS9CplE+NQA5vDg7E=
Subject key identifier: 0A:00:02:57:0D:9E:52:88:DF:89:F7:98:E1:04:F2:5D:10:BD:89:C3
Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
Certificate issuer: /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Certificate serial: 0D12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
Manifest number: 0D04
Signing time: Fri 28 Mar 2025 18:13:46 +0000
Manifest this update: Fri 28 Mar 2025 18:13:46 +0000
Manifest next update: Fri 04 Apr 2025 18:13:46 +0000
Files and hashes: 1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: b2/rw6qFVTHyI2jdU80oW9tSZN4eLFYV2FQWlCFdUEc=)
2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: 8eP4hTFPvkA+DZka7Owe6Pw6H4BJETlKYc1wPRQQyeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3346 (0xd12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1857
Validity
Not Before: Mar 28 18:13:46 2025 GMT
Not After : Apr 4 18:13:46 2025 GMT
Subject: CN=67e6e6da-d505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:bd:df:ff:0e:9f:11:1f:d7:a8:0c:9e:51:
5f:25:35:ba:ad:94:20:e6:fc:19:b3:fd:04:5f:47:
69:b1:95:04:b8:df:a1:9d:27:30:5a:58:3f:d0:52:
16:85:a9:75:fe:13:2e:92:04:29:7e:cd:1a:81:92:
d5:5f:e3:57:6f:ef:d1:f7:57:06:47:59:a5:c7:2f:
f2:d0:6e:0e:95:f9:2c:80:f3:5b:55:ec:a6:bf:ce:
76:5b:bb:d1:d2:91:b3:b4:26:e8:4b:55:fb:c5:9f:
2f:83:41:76:f8:60:14:18:9e:47:09:df:e7:47:e3:
75:77:ee:ca:a5:cb:1e:8b:bb:4d:5b:3b:c7:a3:70:
ca:9b:3a:1c:d9:2c:a1:3f:77:88:5c:40:54:c2:dd:
6f:d4:3c:47:13:a3:a5:31:47:8e:f8:22:c1:e2:cd:
b5:f6:7d:10:df:62:e6:46:96:20:c8:01:cc:72:9e:
5f:4f:12:ca:c6:07:04:7b:f9:8c:47:d7:fd:85:08:
28:a1:43:50:a4:17:61:b4:5e:67:2f:db:da:9f:d4:
5e:8f:fa:5e:06:fa:f6:ad:dc:4b:fd:54:3a:5e:29:
80:b8:c2:d7:41:7f:df:63:f5:33:b0:04:5d:78:58:
da:d2:4f:a1:b8:6a:64:27:4e:33:c5:b5:ee:76:1a:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:00:02:57:0D:9E:52:88:DF:89:F7:98:E1:04:F2:5D:10:BD:89:C3
X509v3 Authority Key Identifier:
keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:b8:2d:02:73:8b:6c:f1:d7:5e:c7:73:e7:13:24:fb:f0:54:
c1:2b:dc:cd:7f:13:eb:e9:39:6f:4c:03:da:28:2b:1b:60:fb:
98:b1:07:9e:2f:db:5b:3e:dc:e5:83:ab:c5:09:d8:eb:8a:4e:
a1:1e:f4:93:5b:a6:49:13:d3:4e:2a:e0:9a:d1:6c:ff:ce:23:
28:0e:aa:bc:3e:f1:38:fd:6f:4a:4e:03:34:de:6e:cf:1b:7d:
7a:1f:be:2a:60:9d:9b:b0:61:a2:5f:e7:b1:28:5f:79:f6:34:
51:45:b2:11:31:36:89:a6:ea:e4:35:a7:be:12:4e:4c:54:67:
eb:4e:55:75:01:70:af:47:aa:8f:53:a3:ba:96:59:7c:5a:5d:
dd:2b:5d:6a:bc:c3:a6:6c:9d:23:4d:06:61:66:94:86:99:f3:
f9:3d:b8:b1:b5:f2:15:0f:bf:12:e2:a8:f5:62:d7:0d:a6:ee:
90:3a:ac:8b:df:54:9e:9a:4e:1f:46:5c:72:c9:a3:7a:1c:a2:
e0:46:03:61:13:1b:88:ea:9a:4b:20:f3:06:1d:57:c8:ed:bd:
ba:29:9d:05:c5:91:5f:3f:b9:2e:5e:88:de:5e:3e:c7:d4:1c:
56:71:6c:e7:d2:e1:9f:17:43:f0:c6:d7:ec:00:53:a6:27:30:
9d:8a:ae:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:18:17 2025 by rpki-client