
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
File: mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft (raw, json)
Hash identifier: or00t2m0eIOEDIiyjzTQTZ0jhl6tAYw5sI4MsPnnOvo=
Subject key identifier: BF:DB:AE:7D:AF:A9:C4:BD:B2:40:69:45:8E:A5:5A:89:4E:D5:36:6D
Authority key identifier: 98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
Certificate issuer: /CN=A91A4707/serialNumber=98E863E44B597B64CA8C81FE3F6DCBCDDFE1F655
Certificate serial: 04E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
Manifest number: 04DA
Signing time: Sat 29 Mar 2025 00:02:24 +0000
Manifest this update: Sat 29 Mar 2025 00:02:23 +0000
Manifest next update: Sat 05 Apr 2025 00:02:23 +0000
Files and hashes: 1: mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl (hash: c63GqjOLFf9mvaA6/qQD8uXUR4fD4Jk/hnep+QkWoY0=)
2: 52B59ED2108D11ECA2542150C4F9AE02.roa (hash: YHM2Ry9OqK4ZQ8qnXB/9z3rSEtR8bDIhVl02jmEtILs=)
3: 5202131C108D11ECA2542150C4F9AE02.roa (hash: f0fj2CiJrQsqOvPb5aCJ72sWUs4weqyglPKr75EglVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4707
Validity
Not Before: Mar 29 00:02:23 2025 GMT
Not After : Apr 5 00:02:23 2025 GMT
Subject: CN=67e7388f-9d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:92:3f:d3:bb:68:94:d6:ca:ef:dd:9f:2d:
ad:28:96:6c:37:f8:bf:88:86:b7:8c:b0:fc:7b:5f:
50:1c:fa:80:d5:ed:b4:1e:12:4e:de:ab:72:57:6c:
e3:51:02:05:9d:15:74:0e:f9:ee:6f:1d:47:cb:8e:
0e:91:8a:3e:55:a9:14:b4:72:17:5d:f3:54:7d:43:
03:6b:69:e9:b0:44:f7:1d:f1:d9:78:02:a1:92:1a:
04:5c:fc:fd:a9:f7:7e:6a:7b:01:87:c9:4e:e9:79:
c4:39:81:a1:7b:d1:6f:bc:ba:eb:12:0e:90:46:80:
66:61:80:f3:b3:da:8e:01:05:33:d6:97:d9:46:5e:
d9:5f:47:7b:7c:85:79:34:fb:20:91:9d:bc:d9:08:
4f:a8:41:b4:ea:c7:a0:3a:e9:f2:e0:e1:29:7e:85:
81:aa:23:30:bf:26:15:be:8c:b6:48:4d:9d:31:94:
81:09:75:6a:66:69:32:8b:e5:81:65:5f:a3:46:9d:
07:5e:5d:fa:24:51:81:0e:00:f6:ac:7a:cc:3d:b5:
14:a2:10:c7:07:a0:09:83:1a:78:ca:90:2c:aa:65:
cc:20:10:42:4d:76:15:1d:18:e1:97:1c:dd:41:70:
a2:7e:e0:2c:56:0f:ea:3a:2d:92:d1:1d:a5:b0:43:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DB:AE:7D:AF:A9:C4:BD:B2:40:69:45:8E:A5:5A:89:4E:D5:36:6D
X509v3 Authority Key Identifier:
keyid:98:E8:63:E4:4B:59:7B:64:CA:8C:81:FE:3F:6D:CB:CD:DF:E1:F6:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOhj5EtZe2TKjIH-P23Lzd_h9lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4707/2866C234108B11EC878F1B4FC4F9AE02/mOhj5EtZe2TKjIH-P23Lzd_h9lU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:66:50:fa:7c:d9:6e:0b:9e:14:14:bc:a6:05:f3:d3:5e:29:
7f:a0:bd:ae:14:26:c8:a0:87:20:e2:47:e3:f3:32:7b:d1:3c:
6f:88:1c:2c:72:fd:d8:b7:3f:79:df:c5:ee:f3:2e:3a:17:39:
ab:15:d6:11:e1:09:47:70:5f:4e:a9:a1:7b:b5:09:12:67:31:
bc:83:ae:40:08:11:81:ea:e6:3a:32:37:75:ee:79:c3:cf:87:
1b:07:45:7a:e7:94:a6:b2:ff:f9:d3:ab:50:83:1a:78:18:5c:
1e:7b:f6:6a:76:72:1c:0c:a0:67:44:d3:8a:af:b1:41:a0:21:
1d:b1:0d:9b:85:6f:3e:e8:50:87:39:62:99:a7:1d:c6:5e:e2:
7b:6b:45:b7:74:79:a4:2b:96:a5:e8:62:e6:bf:07:b5:04:d1:
33:de:b3:52:5e:88:c6:63:5d:66:fc:65:05:d6:1b:ed:2e:39:
3c:d9:e1:f4:e3:32:44:3a:60:42:4f:ba:63:de:55:a8:53:90:
b3:62:79:6c:f2:ee:6d:f8:c8:d6:d0:bf:4f:7f:5f:01:c6:61:
10:f2:5c:01:9d:12:b3:3e:e4:6c:8c:a1:24:4c:32:f5:1a:84:
49:e0:61:3d:50:a7:37:f6:e1:b2:92:98:d6:ad:35:93:03:30:
4e:1d:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:50:28 2025 by rpki-client