Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
File: aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json)
Hash identifier: lOJNBfydPOCIZyorbdHCPBtInfRAcfJxqs52RKIZTVU=
Subject key identifier: 5E:B7:34:87:2F:AE:F0:5B:2C:B5:9B:23:14:A5:C0:33:C6:9A:C3:6D
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Certificate issuer: /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial: 09AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
Manifest number: 09A9
Signing time: Fri 28 Mar 2025 20:16:23 +0000
Manifest this update: Fri 28 Mar 2025 20:16:23 +0000
Manifest next update: Fri 04 Apr 2025 20:16:23 +0000
Files and hashes: 1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: ze4qzpby2LJ9Xygs/24EBnQP423HmA+4A10eSoxxlOA=)
2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: EKd9VQ360ebUJ8WlZXHE7k1r87p0QtlOPC8jxoN1cJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2479 (0x9af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A618B
Validity
Not Before: Mar 28 20:16:23 2025 GMT
Not After : Apr 4 20:16:23 2025 GMT
Subject: CN=67e70397-3a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:b0:b5:85:09:62:27:97:49:b2:2b:c3:e6:
ed:e1:cb:f8:81:89:06:3b:59:c4:ea:85:4d:32:ed:
44:84:fa:da:70:8d:00:dd:59:50:07:f4:73:d4:2c:
ee:b1:64:71:a8:ee:b1:f0:77:a1:a5:2a:40:a6:3b:
4b:82:f6:25:9b:6b:f8:3e:79:6d:c2:f3:51:73:5a:
8a:41:e9:25:3f:39:9a:02:b5:a5:ba:da:11:9f:b5:
a2:d8:17:e7:36:aa:06:dc:5c:5d:34:bb:df:e8:68:
e0:28:f8:2f:d9:fb:32:89:11:cd:d0:7b:8b:54:dc:
d2:f5:e1:23:29:01:83:7a:c6:3c:02:47:39:6f:c7:
45:28:49:65:0c:a7:71:51:fd:a4:b2:91:31:e1:a4:
2c:5c:e5:8e:20:71:27:1d:f9:99:2a:2a:8a:43:0c:
d8:89:1c:ec:7d:31:17:9f:cb:e2:20:63:33:d6:33:
54:d2:df:e8:4b:46:b3:84:4c:69:99:00:f7:08:89:
39:26:02:5f:dd:4b:23:2c:eb:d3:a1:4e:14:ce:06:
62:ab:1a:46:f6:b9:78:70:95:75:5c:c5:db:57:96:
72:5b:ae:a2:3a:14:9f:63:be:38:48:97:a9:f2:83:
2b:81:35:25:e8:27:e9:46:cd:92:e0:59:4d:d9:1e:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B7:34:87:2F:AE:F0:5B:2C:B5:9B:23:14:A5:C0:33:C6:9A:C3:6D
X509v3 Authority Key Identifier:
keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:74:c5:44:dd:de:d7:fb:2a:66:84:ae:79:66:8b:d8:f2:fe:
e4:f9:63:62:09:12:02:cf:e4:a7:30:88:7f:81:9b:30:45:33:
8c:ae:25:c7:fb:15:82:41:53:11:c9:db:ee:cc:59:50:11:f1:
34:e9:f9:95:6f:8c:84:ef:98:de:0e:05:15:e4:c3:f4:20:33:
c2:1f:06:a6:0c:3b:01:08:a4:e4:57:ee:d9:c5:b1:49:9a:9f:
07:d7:a1:39:f0:23:de:82:0e:83:c4:f5:04:61:a6:27:4c:ba:
fd:61:60:6c:63:de:4e:3c:c3:49:7e:13:23:0e:50:84:da:8a:
dc:82:6e:05:b6:31:2e:ff:24:80:d9:5a:92:b9:2a:6e:61:1a:
9c:04:82:f1:88:96:69:0c:0c:06:0e:ef:2e:23:76:08:68:3d:
0d:5a:d9:eb:30:9c:98:7b:ba:7a:ef:bb:6d:7c:03:a9:bc:09:
90:70:cb:0a:6d:39:2c:6b:ca:8d:e6:14:84:12:30:95:1f:31:
c3:81:62:51:31:4f:c6:6c:f2:a3:99:6f:86:db:5b:f5:02:3a:
00:2b:24:e5:f0:4e:fe:03:3e:94:1a:7b:64:e3:f7:ac:7e:62:
4e:30:28:39:43:65:ff:82:38:a4:30:f9:9f:10:31:8a:7d:3b:
6b:85:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:07:20 2025 by rpki-client