Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
File: 72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json)
Hash identifier: MS0dhOdG+XOxhgHZSW5l7o7tKDM2EDzEuEM4u6PSNOc=
Subject key identifier: 35:67:FE:D5:20:84:FF:7E:4B:DC:B8:B4:FA:4C:CD:91:27:43:90:04
Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
Certificate issuer: /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
Manifest number: 0152
Signing time: Sat 29 Mar 2025 03:39:09 +0000
Manifest this update: Sat 29 Mar 2025 03:39:08 +0000
Manifest next update: Sat 05 Apr 2025 03:39:08 +0000
Files and hashes: 1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: 5DIfAnpcByQ4lFCkuJoTHIn/mDXMfv8KDXp7YQVeUVE=)
2: 3E734F70B9A311EE85D60B49C4F9AE02.roa (hash: rwWLgX0j1gAae5w6bqH0qLh9uyb80tM8QLuYgGiI8EU=)
3: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: d9ZhGU94CxjAU4bAS3pBSunhF0F9voc5kw0tZ3gpDNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A352E
Validity
Not Before: Mar 29 03:39:08 2025 GMT
Not After : Apr 5 03:39:08 2025 GMT
Subject: CN=67e76b5d-a091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ef:51:c3:c5:b1:95:00:fd:8d:c3:1a:e8:95:
c4:53:9d:f3:e3:ca:c9:53:d0:0e:12:cd:e5:eb:e3:
28:d8:47:f5:cc:e9:2e:f0:90:64:88:46:60:66:cd:
f8:3a:bc:17:7f:38:18:3d:7a:8a:a8:c8:c0:dd:94:
f9:2c:41:55:b9:f5:d5:57:6f:f9:b8:27:ce:5d:36:
e2:26:18:90:83:12:2d:0b:95:58:da:5d:50:cc:ee:
fa:12:6b:3b:fd:c2:9e:d0:9c:82:56:f1:b9:e6:d9:
24:3a:67:7b:cc:3f:0c:07:b1:bc:b8:0a:a0:55:19:
0e:45:69:e5:49:c0:7a:44:45:a2:6c:1d:ac:39:bc:
a2:1b:97:19:5f:65:8c:46:60:18:8a:80:7b:cd:3a:
63:6a:86:63:57:52:ed:08:07:71:e9:ea:f5:c9:31:
11:36:60:47:a4:25:86:23:55:ed:e2:7e:b2:32:4e:
95:2d:f2:98:43:fb:23:e7:eb:76:0e:57:2e:66:be:
61:e5:de:8f:e8:fc:3e:83:50:2f:2d:9d:94:7c:af:
bc:00:0d:b2:e3:19:18:1d:fc:ee:d6:ce:ed:bd:75:
6d:e7:1f:71:99:7d:18:06:b4:5a:d5:21:7f:b2:04:
9b:2a:18:57:4b:b3:c0:fb:4c:4d:b2:8d:7e:5a:67:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:67:FE:D5:20:84:FF:7E:4B:DC:B8:B4:FA:4C:CD:91:27:43:90:04
X509v3 Authority Key Identifier:
keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:77:ea:d4:65:8b:8b:44:73:e3:47:6d:f1:b1:8a:3e:d7:23:
be:fe:68:c1:c8:8e:a2:7f:9a:c2:36:29:2c:e3:39:5d:3f:88:
02:a3:0c:e1:b0:81:01:ec:86:17:6f:0a:64:22:88:ca:b9:27:
cc:54:28:6f:5d:16:3d:2c:d4:ac:b3:07:66:f5:b3:05:b6:b1:
f3:48:00:b7:61:9b:40:c4:8a:43:f8:76:39:3d:9f:4a:92:3c:
2b:ec:03:bb:fe:0d:6a:b8:d1:8c:b1:63:e3:53:20:f2:8f:da:
bf:d6:81:9f:7e:04:40:78:0d:f3:12:ed:e9:7c:fd:da:1f:48:
e5:08:f6:5a:65:51:2f:c7:d7:0e:93:f5:a6:31:8a:0b:84:6f:
af:aa:20:0e:63:3b:ed:70:b6:d7:9c:0d:4d:ec:2f:b5:44:3b:
1f:75:ac:21:eb:03:19:1a:43:52:df:7a:02:7c:56:6a:d7:c9:
0b:fd:11:86:dd:f7:d8:a0:52:5a:57:9f:8a:1d:a0:55:fb:af:
2b:58:35:31:c9:24:c0:c3:6b:22:8d:b7:c4:c7:9e:9f:55:05:
75:70:ad:49:99:25:da:ec:f4:06:ac:86:47:1f:12:e6:b3:d2:
32:a5:06:17:35:83:91:ba:2d:86:15:f6:18:59:5b:2f:4c:3e:
9f:d3:7f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:53:53 2025 by rpki-client