Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json)
Hash identifier: S8NuFyCHuL3fMeneCyjeqHbL6zjioA+YV7iD86HD4xo=
Subject key identifier: 16:6B:69:9F:77:92:77:82:E2:28:D3:74:5E:E8:8A:4E:D7:2B:30:E3
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial: 03A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
Manifest number: 03A0
Signing time: Sat 29 Mar 2025 01:00:45 +0000
Manifest this update: Sat 29 Mar 2025 01:00:44 +0000
Manifest next update: Sat 05 Apr 2025 01:00:44 +0000
Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: XKWZafedv2k4zG4Pkz2rjwwEIKpKqF/Y88CMUiBDy+c=)
2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=)
3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935 (0x3a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7842
Validity
Not Before: Mar 29 01:00:44 2025 GMT
Not After : Apr 5 01:00:44 2025 GMT
Subject: CN=67e7463d-0853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:9c:d7:53:d7:c6:ee:79:76:b5:5c:d0:04:
dc:7e:ee:e7:7f:34:7a:24:75:1b:30:ec:94:7d:30:
a5:fc:bb:94:d9:52:66:9d:e6:f3:53:38:67:38:9f:
1f:80:37:93:1e:ad:1f:57:15:2a:f0:6f:8f:9e:76:
73:fb:38:db:b3:d6:33:87:b2:38:6f:51:6c:27:7a:
f2:36:bb:1d:b9:0e:b9:f8:67:f4:d4:8f:21:cf:07:
01:36:88:ac:fa:83:1b:91:39:dd:0b:9d:0a:10:cb:
25:21:dd:8f:cb:ab:9f:15:14:00:70:53:fd:8f:07:
6a:f5:cf:35:32:8d:42:52:ab:10:8a:c7:d5:2e:9e:
c5:00:a5:4e:b7:84:bf:de:f1:c3:99:c8:43:a8:d5:
99:cc:4f:3b:cb:37:fd:8e:11:7f:1a:ee:a4:7a:f9:
ad:13:13:94:21:1d:30:4a:80:b0:98:66:75:de:b9:
f5:14:f2:4f:8a:34:fe:48:6b:4d:3a:25:70:e1:0e:
7e:03:b7:3d:cb:37:8c:e9:05:fb:45:c0:9a:5c:f5:
2e:28:0c:fd:f2:2a:44:c9:f0:1a:3b:ee:28:6e:fb:
05:04:e1:b3:ec:c1:18:0a:39:b6:9f:94:4e:fd:05:
01:84:4c:ca:21:3a:99:33:39:82:84:2a:b8:d4:b6:
3e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6B:69:9F:77:92:77:82:E2:28:D3:74:5E:E8:8A:4E:D7:2B:30:E3
X509v3 Authority Key Identifier:
keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:f0:72:b5:33:0b:35:c8:f0:00:83:fe:bb:da:49:75:41:55:
19:e5:48:a7:d2:34:bb:88:a5:e5:66:24:de:62:cf:26:e2:99:
a9:ea:11:fa:5a:fc:57:d3:54:98:f8:bc:93:2d:92:0d:4d:7d:
1f:15:05:02:7f:0f:ce:c5:9b:16:e2:6a:71:27:b6:91:56:a6:
bf:9b:1f:67:c9:76:f6:89:96:2c:cc:58:db:69:49:7f:c6:8e:
b4:fc:96:8e:e0:c9:19:07:1d:4c:1c:95:50:ee:39:8c:80:8d:
e0:1d:3a:33:32:95:41:ae:3f:58:22:cb:ae:13:e1:24:ea:32:
74:d1:23:59:0f:0d:2d:ea:f0:8a:d4:0d:cb:dd:de:0b:a9:14:
79:e4:6a:c0:cc:fc:59:28:ac:31:35:36:23:9b:c0:8d:4c:c9:
f7:20:34:17:3a:a1:9a:80:36:bf:1b:f8:14:43:fb:b2:05:71:
57:5d:44:a8:4f:e9:0f:9e:b7:11:b3:c4:f4:12:d5:59:e0:a0:
ba:94:2d:85:41:19:68:80:89:1c:29:98:94:f7:c0:7d:e0:59:
26:88:44:f7:88:f0:39:04:de:07:3d:5b:1f:95:69:8f:b4:e5:
a4:cf:3a:ae:28:73:2e:21:ef:5f:3d:b0:90:73:db:09:a4:f4:
5f:ee:a4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:54:50 2025 by rpki-client