Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json)
Hash identifier: EqWh22xWyCSVJZVSRd674X/alIMYNJHadQfhhinq2SA=
Subject key identifier: E5:D7:BF:26:2B:44:B6:12:74:FC:13:E0:50:AD:C9:F0:D8:CB:68:11
Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Certificate serial: 0BE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
Manifest number: 0BDF
Signing time: Fri 28 Mar 2025 18:57:05 +0000
Manifest this update: Fri 28 Mar 2025 18:57:05 +0000
Manifest next update: Fri 04 Apr 2025 18:57:05 +0000
Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: vlOFfl1s1rOKLJJameRIbmt2ueR9M18xIDmzZXrgEns=)
2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: 85Scolzp9wypOjOnR9zpu7pztxFge5H6WD9ZJw41pbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3045 (0xbe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A56E7
Validity
Not Before: Mar 28 18:57:05 2025 GMT
Not After : Apr 4 18:57:05 2025 GMT
Subject: CN=67e6f101-1227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:9c:75:44:a2:cc:cb:73:e9:96:b3:0c:74:
92:71:23:32:02:c5:14:1e:0b:9e:d6:b6:76:f1:02:
58:04:73:fe:1e:6d:39:a9:14:08:87:69:e9:5b:3e:
23:13:e8:16:2b:17:11:48:33:a6:1c:ce:c6:b0:94:
0a:58:33:c5:38:61:b6:84:50:d0:82:13:0e:10:c9:
67:0a:62:5d:06:d2:10:91:40:11:f3:d7:67:82:56:
ec:db:96:32:9f:22:4a:98:ce:49:8a:ea:d6:c6:c0:
15:cd:f1:c0:49:08:e2:46:f6:38:2d:6a:80:fe:a8:
16:15:1c:81:4d:46:f4:cc:30:90:6c:63:67:7b:d1:
98:f3:ef:78:05:ce:40:b0:10:6b:47:c8:40:f7:e6:
96:67:5e:61:25:4b:31:c1:e0:de:45:53:80:05:ff:
48:8a:a1:9e:9d:1f:a5:e2:71:0b:91:97:d6:5d:a0:
3f:06:14:ec:61:d9:2a:f3:7b:35:b1:3a:b0:d7:ee:
bb:9a:cb:34:b0:5a:67:ae:d1:29:ca:ed:13:6b:33:
3b:56:17:f1:f1:b7:25:bb:d2:14:cd:e5:c9:13:be:
2a:8a:4e:8e:32:85:a4:d4:50:39:3d:9d:f3:9e:1d:
ab:46:5e:14:d8:5e:7c:6e:bf:c1:fa:dc:57:07:f7:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:BF:26:2B:44:B6:12:74:FC:13:E0:50:AD:C9:F0:D8:CB:68:11
X509v3 Authority Key Identifier:
keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:f1:55:58:13:f2:8a:a5:3d:f5:65:63:cf:50:e2:1f:f7:76:
42:30:0e:3a:ed:96:d7:88:62:05:e4:0b:71:59:ee:05:7d:61:
74:ca:15:b5:95:d1:9f:e4:f1:cf:c8:4a:2c:7a:cb:1e:91:fe:
f5:41:d4:f5:a5:a2:7f:5d:51:59:42:91:18:1e:d8:ba:ce:0f:
c7:90:db:68:fa:c4:84:fa:e4:1e:49:fd:08:43:61:92:28:81:
65:34:fb:d8:2f:7f:70:64:f5:2b:c5:1f:98:1f:7e:45:17:fb:
af:6f:56:4e:f0:a6:99:50:27:45:28:60:0b:0d:27:8f:62:84:
cb:f4:74:47:b8:8b:ea:04:81:76:da:55:dd:9c:87:b7:22:13:
97:d3:e7:89:4d:7b:01:8e:d1:e9:dd:d5:60:00:8b:df:2c:1c:
7e:18:5f:16:26:8c:fc:36:29:cd:3c:0a:d4:d8:61:e4:8c:3a:
61:00:32:8a:85:e0:fb:dc:47:bf:db:8e:32:ac:2a:55:29:3d:
15:b7:32:20:2e:ad:e2:a0:73:6d:d7:ac:30:bc:d6:46:e9:f9:
27:11:f2:87:49:92:41:c8:57:29:b1:6a:97:c4:b9:66:70:16:
2d:ca:ea:b5:40:df:63:eb:c9:9f:76:98:9f:d6:34:b3:d6:a9:
e5:0d:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:39:02 2025 by rpki-client