Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
File: E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json)
Hash identifier: axeFJZemT2/3K3GL0pO2X+7qdUhghjboxo0gg4IInQk=
Subject key identifier: B5:89:C7:3D:92:82:B0:FE:9A:00:2D:7B:AB:97:C9:1F:43:BD:2E:63
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Certificate issuer: /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial: 045A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
Manifest number: 0452
Signing time: Sat 29 Mar 2025 00:27:48 +0000
Manifest this update: Sat 29 Mar 2025 00:27:48 +0000
Manifest next update: Sat 05 Apr 2025 00:27:48 +0000
Files and hashes: 1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: KYrzwCQq+pxoVDTERoQJX3GvXAyRKgIusX05oLxdYBw=)
2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: N6UdB/vsoDQh8PeESm7VPxFgrUH9sp1ez29ivoqCJVw=)
3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: u4T6c6+EeGnanbuuwAq6FQjgSX9l5ijgis5wFYw/MM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114 (0x45a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7CA3
Validity
Not Before: Mar 29 00:27:48 2025 GMT
Not After : Apr 5 00:27:48 2025 GMT
Subject: CN=67e73e84-2836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:92:6f:0b:c3:60:76:c0:ba:c8:3a:b4:d8:
fc:65:4d:89:b9:18:73:22:45:1e:fa:78:3e:4d:19:
f5:ba:cd:09:3d:5a:5e:ea:38:3e:bc:6b:c0:a4:95:
d4:3b:7d:91:e4:50:1d:ed:ef:ed:f0:9b:ba:94:18:
c8:27:19:19:a9:4d:b1:b1:a9:38:5e:9a:8b:1a:1b:
cb:f3:89:be:2a:94:4b:67:30:c2:dd:91:63:86:98:
7e:09:63:10:3e:72:20:03:b7:76:b1:24:c2:17:8c:
82:3e:b4:b3:b7:4c:16:e6:02:8d:48:7f:2f:2f:4f:
2d:eb:5c:e9:96:64:de:df:0d:bc:75:08:43:d7:6e:
0f:10:81:6a:dd:78:2c:86:02:6b:7d:85:10:e3:f5:
cf:7c:4a:fb:6a:42:72:8a:78:2d:b2:41:de:98:2b:
0d:42:8a:0c:b4:de:e8:19:ff:07:eb:a7:1c:0c:e2:
1e:7a:c8:f6:ef:75:8a:f7:54:f7:1a:2d:18:e3:19:
55:3b:d1:dd:bb:01:81:01:c6:00:c5:0b:97:ac:81:
9a:b6:4d:4b:d0:89:a4:03:71:da:e7:d8:35:1a:47:
f0:69:5d:83:04:00:c3:4b:df:86:03:c3:e4:0e:5a:
5e:b2:b9:8b:ed:c2:88:15:b8:27:a0:d9:c1:ad:56:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:89:C7:3D:92:82:B0:FE:9A:00:2D:7B:AB:97:C9:1F:43:BD:2E:63
X509v3 Authority Key Identifier:
keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:79:58:c0:11:ac:2f:4d:7d:45:af:d4:32:a5:36:ef:9b:45:
7f:74:64:cb:ee:63:00:8f:93:09:62:d2:b4:09:46:6a:13:16:
67:8e:7f:db:c1:da:bf:c3:c6:88:0a:d1:b9:e2:18:f6:e0:06:
75:de:35:75:7f:ea:69:b2:5f:c9:bb:87:5e:5a:62:4b:2a:60:
ac:c8:68:2d:cd:ff:7e:cd:79:69:32:58:13:ed:4c:21:ff:76:
02:0d:71:ec:17:b4:19:1e:94:d8:db:64:87:15:39:3c:f8:9c:
02:e8:7a:84:a1:f9:b2:09:0b:5e:07:36:c9:fc:bf:7a:ff:19:
f8:92:d3:ab:07:a5:36:c8:59:67:4b:06:cb:a0:54:b4:c0:df:
c8:9a:72:78:d0:15:ab:ba:71:07:59:5d:7a:94:5f:53:47:0d:
02:1a:15:72:bd:39:ba:5f:d3:c5:66:26:e7:b8:34:59:32:05:
d8:22:7b:e4:57:68:a2:33:7f:9e:7c:6e:32:06:2e:cb:e9:21:
c2:40:5d:e8:33:65:79:f5:83:8d:fd:19:a8:7b:1b:d2:b3:7e:
bc:96:cd:89:a1:55:13:88:3c:7f:fb:5b:2b:88:35:69:c8:b1:
1c:e3:27:f0:47:a3:5d:62:03:e8:58:52:fe:f3:61:d6:34:fc:
35:7f:29:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:26:59 2025 by rpki-client