Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json)
Hash identifier: xS0+NTL+8baC5yTSq19e1NhW8RGFxCSlbY0SYy/W2MI=
Subject key identifier: D5:4A:8B:90:08:CC:1F:C0:8D:EC:64:33:62:D2:AF:4E:01:A2:46:84
Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D
Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
Manifest number: D4
Signing time: Sat 29 Mar 2025 05:00:55 +0000
Manifest this update: Sat 29 Mar 2025 05:00:54 +0000
Manifest next update: Sat 05 Apr 2025 05:00:54 +0000
Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: hbtIASVVVa1uhwEl2uWQfGrWCXo/5cTYEb6q8g4B6A0=)
2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: u6J6SPSNjElCImZDre2hX9rdBiRV9plYfnlpPbtxhQc=)
3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: hR3HemTX8sPR//njNhfSediG0DqzFMWVKhRmgOL4nRY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9
Validity
Not Before: Mar 29 05:00:54 2025 GMT
Not After : Apr 5 05:00:54 2025 GMT
Subject: CN=67e77e86-77ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:b3:27:9f:55:f7:d4:39:71:be:48:9c:77:
df:45:78:68:ae:9e:37:97:08:5d:54:7d:d7:f1:7e:
66:ca:a0:f4:0a:92:12:be:13:a4:ce:62:6c:a7:0c:
fd:4f:c3:37:41:be:67:0e:ca:48:f6:e9:9f:6c:28:
bf:71:e3:50:02:fc:16:07:4f:82:08:42:26:ea:fc:
05:b2:9d:80:8e:aa:9d:ab:bd:4d:de:d6:d2:0f:23:
52:4e:23:8d:9e:99:41:9c:01:63:c6:6e:9a:7c:b9:
c0:2c:40:64:34:14:b1:34:ff:29:1b:0b:0c:81:8f:
44:59:1a:f8:14:cf:2d:f6:13:b6:ba:1a:0f:07:f4:
a6:21:dc:d7:01:df:1e:49:07:1c:2b:1d:b3:41:9c:
bc:b9:41:11:6d:bb:45:cc:c7:f6:c9:b6:17:0d:4b:
9e:e9:d0:e6:57:6b:cd:8a:63:b9:3c:33:e0:5c:2a:
b4:fa:8d:73:92:3b:e0:6e:25:4f:88:dc:3f:2d:d0:
0b:a5:10:7f:c9:0f:4b:ab:e7:99:c5:47:12:26:8b:
4a:83:f9:92:94:33:da:ae:83:9d:5b:da:51:ca:f2:
ad:0c:db:b4:60:c2:65:a9:43:69:2c:aa:2a:45:e6:
ff:b5:c8:dc:cf:9c:d0:25:76:53:65:2b:1d:0c:ba:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:8B:90:08:CC:1F:C0:8D:EC:64:33:62:D2:AF:4E:01:A2:46:84
X509v3 Authority Key Identifier:
keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:a7:a9:9f:f5:e4:88:90:a3:8c:05:62:4d:5e:f0:66:4a:b5:
6c:17:f4:74:98:4f:59:13:d6:aa:74:c9:61:25:31:a0:4e:e4:
fc:ac:7a:da:82:aa:8b:9c:a4:14:cf:52:ff:cd:47:5f:7d:96:
6a:fc:09:09:e5:45:35:c9:dd:55:61:ff:dd:c0:8e:3d:b1:16:
bc:87:46:66:87:5f:88:57:45:c7:50:8b:42:77:5c:51:c4:50:
02:c5:83:bc:3d:46:bc:69:5a:8a:56:90:e0:19:2b:9d:58:99:
a9:6a:86:49:a2:c1:b7:22:3b:ae:9b:6d:a3:a1:20:99:32:02:
4b:81:e1:21:fd:bf:59:44:65:98:5e:d7:f6:a6:7e:1d:b3:b5:
6b:26:c0:64:68:1c:f1:a1:e0:2e:07:8b:ae:77:8c:0c:ac:90:
23:85:cf:ab:c8:ed:3a:cd:35:db:35:39:b2:ce:63:64:4e:31:
7d:2a:60:dc:be:23:97:98:66:0e:c9:7d:84:24:42:5e:e4:bf:
11:54:ee:ee:5b:52:cc:59:85:c8:a4:c6:3a:e0:f3:f0:f4:56:
e2:ba:c7:f0:b2:77:c0:6b:3c:c2:e2:22:e7:5c:c9:f2:e6:49:
08:9d:36:10:2b:71:8e:ed:8c:d3:6f:b8:37:c5:20:22:8b:14:
7d:a3:f9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:34:31 2025 by rpki-client