Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
File: 7a8emnnZ_ssQeIOv03V_qPcKMtc.mft (raw, json)
Hash identifier: bKWFx/Oo1Wf2ZXkghfuJZXObsmwAoPOacvHs52FwF5M=
Subject key identifier: 61:50:0B:BD:89:58:76:4F:C6:10:38:28:AA:71:8E:7B:C3:B5:CC:15
Authority key identifier: ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7
Certificate issuer: /CN=A91A2F6C/serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7
Certificate serial: 097A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
Manifest number: 0974
Signing time: Fri 28 Mar 2025 20:25:08 +0000
Manifest this update: Fri 28 Mar 2025 20:25:08 +0000
Manifest next update: Fri 04 Apr 2025 20:25:08 +0000
Files and hashes: 1: 7a8emnnZ_ssQeIOv03V_qPcKMtc.crl (hash: 6Ho7hHS4U5inIb+x0lCUD2pWus8YxBeeQtjn9j4n4vk=)
2: FA7CB46C8AB411EA89D83541C4F9AE02.roa (hash: yD0pXJuzsIcwlQVDxXtH8gNE+deycvgoI/IITsyuLRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2426 (0x97a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2F6C
Validity
Not Before: Mar 28 20:25:08 2025 GMT
Not After : Apr 4 20:25:08 2025 GMT
Subject: CN=67e705a4-788f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:46:f6:2a:d4:0a:f8:87:33:78:e6:64:ca:
e8:34:b2:df:31:44:df:39:4a:5f:eb:32:8e:f4:42:
a9:81:59:22:9c:98:7e:a9:dc:cb:29:7f:82:92:3b:
a9:41:24:89:ee:0d:4f:8f:db:c8:bd:5f:4e:87:8c:
2a:8f:99:5f:ae:34:9a:a5:5a:ff:30:40:f5:50:8d:
8a:52:d7:33:b7:75:46:72:07:17:31:3b:0b:c7:57:
69:34:a7:03:c6:84:f4:e3:54:2f:1d:64:b6:ef:1f:
7c:76:79:6d:0d:4a:15:11:7e:2e:ad:e2:5c:af:29:
ed:ea:1a:be:50:27:da:07:68:6e:4c:c6:36:6f:e4:
86:2e:1f:bd:99:1f:45:ac:94:27:94:c6:eb:39:0b:
1e:46:df:2f:2e:94:18:2e:06:b7:5e:a9:99:7a:b1:
72:e9:bb:8d:d4:73:42:49:15:4b:bd:aa:e3:8a:0b:
65:0b:e1:1a:96:ae:84:38:3e:bf:7b:dd:81:12:e9:
64:73:9e:fe:a5:8a:7a:0e:77:0d:e1:dd:92:8d:6e:
63:ff:46:13:a7:3f:21:cc:4b:5d:6b:c1:0f:02:ff:
57:aa:2a:28:49:0e:1e:b7:c7:bf:89:a7:e7:55:44:
24:e9:f8:43:34:f0:b9:7c:28:d8:75:82:0c:df:42:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:50:0B:BD:89:58:76:4F:C6:10:38:28:AA:71:8E:7B:C3:B5:CC:15
X509v3 Authority Key Identifier:
keyid:ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:57:61:b0:ed:ac:53:2e:34:1d:b6:cc:d0:31:89:3c:8a:88:
f3:6a:eb:e5:53:d3:56:d5:d4:92:9e:4b:84:39:38:f5:17:46:
52:86:74:1e:4e:bc:1c:8b:b2:7d:43:8e:86:b7:e4:e5:24:cd:
ea:03:cd:ae:87:63:34:d9:32:a6:98:da:b3:52:ae:ea:bb:99:
b1:1f:27:80:3a:a5:00:52:85:05:d5:90:ea:3f:dc:91:5c:93:
12:08:02:94:c0:c3:46:d5:4f:cb:fb:6b:9b:05:4e:af:1d:e2:
af:84:17:eb:77:67:f3:16:4d:67:4b:00:be:46:81:83:42:80:
9b:69:e5:fb:81:22:09:e2:de:db:ce:07:98:96:c8:bf:ce:99:
73:e0:6e:7f:7b:23:b3:8c:4d:7c:4c:ee:35:2b:03:6d:f6:5d:
07:82:35:1e:4f:83:27:43:a9:b6:44:4e:7c:17:ae:d1:1c:e4:
c4:df:48:5b:c0:a4:c1:51:03:4f:f2:be:a6:3b:69:bd:d1:fd:
ae:b0:53:c1:b1:82:5d:7b:ce:02:29:51:72:74:53:57:50:bb:
74:f0:29:d5:71:1c:41:6c:5d:98:16:4a:a2:27:5d:28:04:c2:
09:ba:7a:a2:74:c5:e7:7a:7a:53:e4:87:15:83:e6:5a:1d:4f:
e5:e0:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:23:18 2025 by rpki-client