Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json)
Hash identifier: JnUgoXqRbiuG8A5uQXLkwwKYdwDa9RoK5SSMzxWY44Q=
Subject key identifier: C8:91:E6:AC:40:47:D4:63:E4:FD:92:BF:FE:F4:D4:21:9E:9A:9F:07
Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07
Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407
Certificate serial: 0721
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
Manifest number: 0719
Signing time: Fri 28 Mar 2025 22:07:39 +0000
Manifest this update: Fri 28 Mar 2025 22:07:38 +0000
Manifest next update: Fri 04 Apr 2025 22:07:38 +0000
Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: 0Yj1NK+PD42YCwQTKUmbv6rZu+OZW/DNgCcH5BhVIDQ=)
2: 4D12DEAE2E9311EBB9FC5259C4F9AE02.roa (hash: Xm2gMwoiYfX+Fm5qNYBayNhfXFjCoBptj23LkxdkfKM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1825 (0x721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6B8E
Validity
Not Before: Mar 28 22:07:38 2025 GMT
Not After : Apr 4 22:07:38 2025 GMT
Subject: CN=67e71daa-66be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:8d:95:88:ee:28:3b:22:77:0d:4a:47:ec:
27:b1:6b:a6:2e:66:8f:f0:c9:eb:99:ea:bc:0c:8c:
38:9b:77:74:7f:0c:35:60:0d:1b:61:66:96:54:b9:
db:0c:c9:bb:3b:cc:a0:49:bc:2b:b5:b9:7b:6c:42:
e0:fb:54:4d:e2:a1:c1:0a:9c:88:6b:5c:9f:ea:e8:
c4:a5:b9:c7:a5:ff:90:c7:c1:28:6e:36:54:d6:62:
b0:b0:d1:33:c5:53:67:c1:95:90:59:22:8f:9b:6e:
0e:f4:a4:1a:d3:14:6b:65:e1:ce:10:24:6f:b4:25:
8a:e0:5b:90:c4:21:59:43:72:db:03:65:b1:d2:aa:
06:bd:7e:ad:15:fe:63:7f:a3:0d:32:8b:fc:6a:a1:
d5:fd:10:d2:16:0e:9e:74:33:5e:84:d3:79:b8:9a:
96:88:4d:f3:e5:2b:31:ec:b9:2b:a6:b3:f8:dd:b2:
f1:3d:54:08:26:0b:2a:94:bd:ce:4c:94:c4:36:6f:
1f:11:1c:94:09:92:8f:88:b8:fb:22:02:d1:41:af:
29:e0:82:d8:7a:e0:60:4a:dc:43:42:ce:cb:c2:b2:
e6:f2:39:5e:99:93:99:c5:cc:ea:bd:54:03:65:97:
f1:99:a5:fb:6e:86:d4:a1:4b:d1:38:a8:76:92:c6:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:91:E6:AC:40:47:D4:63:E4:FD:92:BF:FE:F4:D4:21:9E:9A:9F:07
X509v3 Authority Key Identifier:
keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4c:94:49:73:17:fe:11:f7:a1:ef:03:09:7f:36:89:b5:1b:
80:7a:24:92:38:1a:f7:ca:19:fb:51:e2:1f:4f:44:b2:08:07:
46:98:45:2b:f2:36:74:e3:fb:25:81:9f:68:16:d2:b6:e9:da:
6e:8f:56:da:35:6d:fe:4d:74:97:d9:c3:9e:c7:18:2b:ac:b3:
1c:22:5c:9d:83:37:52:c9:94:57:49:13:de:da:d1:e0:0f:43:
04:9c:33:d6:7d:ee:b8:47:3b:44:80:20:69:f5:f0:8d:aa:4a:
91:09:03:d1:5b:eb:a3:67:8e:df:6a:29:ca:06:da:da:e2:95:
9b:4e:43:0d:eb:94:9f:7a:17:f9:d4:c9:37:8d:da:2f:0d:9b:
fd:aa:87:e7:e1:1d:98:7e:2a:92:7f:1b:11:ba:9e:6d:d9:04:
ca:a7:dc:01:bf:a2:eb:d6:8d:42:57:09:10:c7:06:f4:ba:49:
63:e5:c8:54:e3:4b:c4:39:95:7f:f4:7a:d0:e5:ba:93:f4:91:
57:44:15:ac:cf:96:ac:6b:60:3e:ba:6c:68:c5:15:05:bd:ef:
50:9a:07:3d:c2:71:9f:31:16:2e:23:bc:54:63:01:ce:da:23:
e1:8f:7a:35:f3:74:12:e8:47:04:37:69:6f:ec:83:e2:9c:8c:
22:f3:94:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:37 2025 by rpki-client