Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
File: KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft (raw, json)
Hash identifier: CoeRIlzsc8Rdkdriw1gHiryzHJlyyha+rYcHw35FQsM=
Subject key identifier: 6F:22:85:E1:E1:A6:A2:2C:0D:0C:9C:0B:8F:75:5C:DC:D2:E5:25:2B
Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
Certificate issuer: /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Certificate serial: 0AF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
Manifest number: 0AEB
Signing time: Fri 28 Mar 2025 19:32:10 +0000
Manifest this update: Fri 28 Mar 2025 19:32:09 +0000
Manifest next update: Fri 04 Apr 2025 19:32:09 +0000
Files and hashes: 1: KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl (hash: nmzoHki53oYA+nRDhrA15oPTs8cqPaRYUKtVTH0y1gQ=)
2: 496096EE41A311EABAADCE0AC4F9AE02.roa (hash: c6hB6o27DTn4G9KshxwwCrACiildcNHuM9kyD7kWDTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2801 (0xaf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3456
Validity
Not Before: Mar 28 19:32:09 2025 GMT
Not After : Apr 4 19:32:09 2025 GMT
Subject: CN=67e6f93a-0eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:48:d3:ce:29:2b:8b:af:ce:a1:02:af:5d:
b8:be:2e:6a:5e:e8:7c:f5:c3:52:75:3d:10:1b:e7:
11:ca:13:a9:f0:ba:4a:b3:01:20:5d:3d:ea:b4:2c:
e3:f4:ad:ce:bd:81:07:b7:f8:66:93:34:d9:9a:c9:
32:b2:b3:75:1f:76:d8:10:0b:3b:40:46:21:51:d0:
e3:59:f7:a0:f7:72:e1:d2:b9:0e:c2:9c:8d:3b:e3:
7e:83:45:a6:a2:9c:c0:a7:25:57:95:d0:91:44:3e:
78:48:89:2c:74:50:e2:bb:88:ea:9e:16:25:9e:32:
45:22:2a:ee:be:96:ec:a6:e9:07:4e:d5:83:4b:a0:
81:c1:fc:da:ff:a3:fd:ad:53:69:71:59:13:e7:27:
fc:58:d7:ca:79:36:88:01:12:f2:12:f8:fa:39:b3:
2e:45:29:92:4e:f0:2b:c0:34:87:c6:ca:71:15:28:
6a:3f:80:1e:5d:de:16:17:ee:25:71:42:50:9f:d0:
6f:94:68:d3:aa:28:1b:c2:e6:48:66:f5:73:e8:48:
bd:8d:c0:22:52:9b:ed:f0:ea:a8:ec:2e:cc:f0:58:
95:9d:59:d7:f4:c9:1c:4b:f6:d9:e1:15:0a:39:8f:
7f:20:59:f6:68:b9:24:72:34:24:6b:22:31:a8:a6:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:22:85:E1:E1:A6:A2:2C:0D:0C:9C:0B:8F:75:5C:DC:D2:E5:25:2B
X509v3 Authority Key Identifier:
keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:14:d6:e7:a3:5c:bc:6f:a3:61:fa:83:d6:a6:56:12:0f:db:
8c:91:91:05:37:9f:c7:35:bf:6b:ed:bd:44:25:88:6c:f4:29:
e1:fb:3b:89:28:41:4f:01:b3:cf:2e:dd:3f:3c:80:d7:53:a5:
26:72:66:1b:0e:bc:f3:4a:f9:5a:cd:b2:15:6b:cf:d5:78:f1:
7c:76:84:0b:c8:9d:4e:8a:11:6d:05:3a:9a:f9:1b:06:c1:0b:
86:b4:32:c8:77:9f:5d:4d:13:db:94:db:9a:22:ba:69:49:39:
8d:e8:93:1a:f4:33:90:da:a3:bb:27:7f:1f:6b:55:d1:5a:09:
37:81:b3:5a:66:4a:7a:96:4c:bf:5f:c4:e6:8f:4e:d1:2b:53:
a8:de:d0:85:13:ee:6c:9e:25:95:53:90:78:45:69:0b:bf:59:
73:04:51:34:a4:34:b3:ad:f4:a0:ad:99:17:d7:c6:e0:6b:22:
e4:f5:f9:2f:39:72:84:87:9a:c9:bc:3b:4e:f2:9b:34:f5:e2:
e6:46:f9:9a:1a:16:f1:85:27:f6:3b:fc:33:7a:55:64:4e:88:
4f:42:b0:1f:e2:8d:66:92:93:90:8b:97:1a:21:4f:72:67:88:
f0:29:10:3e:52:ef:07:ef:41:90:49:e6:2f:27:0a:0d:f3:d5:
f8:30:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:39:45 2025 by rpki-client