Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier: eDSEgwYeSh75rUuns6AIkzXbobIJ8cFlyO1SB1eCzuc=
Subject key identifier: 53:8F:18:00:55:BB:DC:0A:A9:E2:05:2E:84:92:42:F5:CC:FA:58:D2
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number: 01B7
Signing time: Fri 28 Mar 2025 16:12:20 +0000
Manifest this update: Fri 28 Mar 2025 16:12:20 +0000
Manifest next update: Fri 04 Apr 2025 16:12:20 +0000
Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: fpMC3p5oZP2PMZDBvqWLHshRrWm0VcCHb4NQu/yIKUQ=)
2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: lu38CDRBmX2eL86FuDGblRO37V7hVT/nMCfbmUIJkQk=)
3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: UFLmIYqMMQZsSlXO+J3Nx0+Pb9WqTG32RlxuAiHOUdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A
Validity
Not Before: Mar 28 16:12:20 2025 GMT
Not After : Apr 4 16:12:20 2025 GMT
Subject: CN=67e6ca64-1fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:dd:88:57:7c:38:d1:e7:a5:71:40:ad:ea:
0e:41:41:91:f7:0b:52:9b:96:08:de:3f:f0:05:b3:
fc:ed:c8:ab:2d:9b:08:19:8d:65:c1:89:8c:1a:fb:
3a:de:41:bf:0e:ca:38:44:6f:27:de:cf:32:35:26:
9d:a3:d6:30:ae:b1:90:31:d7:d4:17:56:64:a0:7f:
64:f2:9d:c5:6a:a2:3a:0f:f2:cf:17:38:48:0b:ab:
cc:55:12:9d:eb:de:d6:40:12:b2:1f:25:12:e7:d1:
e9:01:75:a9:be:42:dc:42:e6:7a:30:85:21:c5:78:
36:e4:92:b9:50:3e:d0:b0:6f:25:81:fe:4c:5f:2c:
35:62:a6:3f:fd:99:70:2b:13:12:af:05:78:00:55:
0a:b6:d1:d9:f1:9a:4b:a8:dd:7a:a8:71:30:d0:fb:
a4:30:be:00:71:fc:d3:d5:79:35:a8:cf:b6:df:0e:
a6:a5:f4:63:5c:5d:5e:70:5d:45:f0:4e:9c:5d:3c:
ec:e4:e9:15:ea:57:85:e0:c6:f6:e7:4c:b0:3e:1d:
6b:0f:5d:c9:55:87:70:91:cb:46:39:99:84:27:42:
5d:05:78:23:7e:41:53:2c:1c:b3:74:4b:5f:f3:66:
77:49:9c:e0:e8:05:f4:42:db:04:b5:2d:7c:f4:73:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8F:18:00:55:BB:DC:0A:A9:E2:05:2E:84:92:42:F5:CC:FA:58:D2
X509v3 Authority Key Identifier:
keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:86:91:be:1a:e8:db:94:cb:3c:2f:44:43:b3:05:fb:05:fc:
96:b8:cf:a6:36:40:8a:70:37:0f:0e:a0:62:5d:9c:3c:44:06:
c3:eb:80:ae:1c:bc:5f:9c:b4:31:9b:50:83:d5:ef:54:e8:94:
22:c2:55:aa:d7:15:e7:36:48:f9:73:3f:71:9e:b7:9a:ab:72:
79:b2:2c:bc:c5:2b:96:90:f1:12:2a:08:6d:b8:14:e3:0e:60:
1a:54:db:cd:36:06:b3:6b:8e:29:24:61:4a:dc:af:d1:cb:42:
88:f7:7c:6b:1a:e1:8f:ec:83:f0:40:26:14:96:5a:0b:89:7d:
03:5d:0c:4d:27:ce:41:12:3d:1b:9f:27:63:2d:50:b2:b2:33:
ea:c1:66:2c:97:5b:33:1f:6a:84:49:17:1e:39:b9:31:7d:68:
c4:6a:25:4e:10:2d:fa:17:c5:bd:5a:6a:a3:24:ab:98:1f:cc:
16:ae:af:e6:4e:26:b4:de:37:8a:9b:2a:fa:d6:e2:25:45:2f:
5d:da:ee:d9:f4:9e:fe:9a:0d:06:6b:ea:22:e4:99:70:10:10:
61:ee:d8:cd:4d:40:12:d8:d0:cd:66:2d:46:cb:4a:6b:c0:dc:
e4:95:dd:5e:c2:14:a6:92:75:23:7d:dd:79:3b:56:f3:02:95:
32:6d:8a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:58 2025 by rpki-client