Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json)
Hash identifier: YrpYcfT9r713jsat+uD9KeszgpKLTfPXvEQ9uIhM85w=
Subject key identifier: 8C:38:5E:54:A1:F2:F1:74:55:E1:A0:2D:63:A4:2C:7E:89:54:E9:AF
Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
Certificate serial: 348F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
Manifest number: 3473
Signing time: Fri 28 Mar 2025 14:24:08 +0000
Manifest this update: Fri 28 Mar 2025 14:24:07 +0000
Manifest next update: Fri 04 Apr 2025 14:24:07 +0000
Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: tS78CmZXsRBpAlJwblyWTe3pGgcOW85LbBTppvV3dXQ=)
2: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: VGqKOKmiRQqT6yzNCTI4GsckVdo9EsIqZ8D30e0mo6o=)
3: C28E34620A2011EC8B517885C4F9AE02.roa (hash: WML6bSJiK9+KF/pEPMbVuQofZWsQq5X8goxfmm+ACQg=)
4: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: mmOf8E5cH5F9E51SwHybcc0hD3kIHBOrU1OwIH3yXaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13455 (0x348f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A60A9
Validity
Not Before: Mar 28 14:24:07 2025 GMT
Not After : Apr 4 14:24:07 2025 GMT
Subject: CN=67e6b108-83ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:de:45:0d:3b:e0:73:ab:fe:2c:3a:79:72:
4d:4f:93:4e:1d:b7:ef:92:9f:2c:71:27:af:37:f2:
e8:3d:b9:30:55:7c:e4:37:e7:f4:2e:ce:87:50:1d:
23:eb:2d:fe:11:7e:22:1a:93:91:87:59:66:30:56:
c5:b5:18:45:7b:6b:13:e3:6e:1d:89:59:56:b3:c6:
e4:ea:87:34:8d:3a:66:e8:b6:12:d8:18:3f:fc:34:
7d:a9:cb:49:da:69:6b:c9:d8:72:75:a5:88:d7:09:
a2:db:d2:d5:91:4d:07:c4:0f:81:a6:bc:22:32:f8:
59:c5:c9:5a:b3:92:a6:e9:9c:16:62:c1:91:5a:78:
f9:be:c1:e6:f4:c0:95:02:1c:cd:00:1c:83:98:7e:
95:2b:f9:00:4b:ad:d1:fc:59:4c:5c:6c:28:5f:55:
eb:1d:66:d9:49:89:f8:ad:23:b5:91:e0:bd:db:ad:
40:ce:7b:5e:38:4f:35:1c:92:99:fb:ed:90:a8:70:
49:37:dc:c7:7e:97:b0:69:12:dd:73:fa:44:d1:2d:
7f:58:55:46:75:de:7a:f2:2f:14:fb:ef:a9:40:0d:
03:66:d1:01:15:52:dc:0d:07:08:bd:ff:90:da:38:
67:9a:51:43:b9:33:44:34:de:97:09:cc:d2:57:1b:
c9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:38:5E:54:A1:F2:F1:74:55:E1:A0:2D:63:A4:2C:7E:89:54:E9:AF
X509v3 Authority Key Identifier:
keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:98:c8:b9:3f:88:b4:ed:00:55:48:38:bf:c5:c5:37:83:e5:
ec:eb:79:9f:a3:28:d5:18:f1:a8:7f:c5:60:ca:1a:05:3e:a4:
00:34:29:67:cb:07:01:68:74:0d:fe:72:97:c0:6b:85:4f:be:
a9:e9:be:75:a1:64:ca:e1:92:52:d0:b0:e3:1e:13:22:48:b8:
1b:bd:07:05:25:ee:e0:16:c9:01:9a:4b:86:2e:49:12:ec:9a:
29:f7:29:dc:5d:6a:74:77:92:7d:98:71:3f:e5:e5:54:5e:c9:
73:8a:2d:d9:10:6a:53:26:47:0b:67:36:9d:0f:06:cb:f8:f1:
de:db:c6:32:35:81:5c:f6:14:f2:89:50:e0:37:93:f9:e8:15:
b8:b8:79:f1:07:09:ef:7d:01:00:5e:51:ac:e2:2a:91:2b:cf:
23:60:9e:0b:02:fa:dd:82:2c:76:4c:ad:74:d6:d2:65:a1:47:
71:34:42:f3:33:e6:3e:9d:c3:b7:3a:a6:14:a9:91:c9:aa:cd:
7f:5a:df:7f:9d:69:3a:40:22:04:e1:be:a2:17:e6:4f:02:90:
05:71:21:7c:16:47:5a:67:df:2f:9e:e4:ad:6e:a7:9d:41:1e:
64:e2:f5:aa:9b:6e:ef:d3:14:f1:b8:35:45:1a:09:ef:af:63:
b9:02:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:12 2025 by rpki-client