Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
File: pSvwKHcZGUlxLT2tKdSreid57EM.mft (raw, json)
Hash identifier: AQMUjBZoWSlqs/NqTqn9y1Xgs8iqvSGm+4czCLdubcY=
Subject key identifier: DD:8D:32:FA:D3:3A:3F:C0:0C:90:98:C1:8F:6F:60:1B:AF:EA:65:8B
Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43
Certificate issuer: /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
Manifest number: 8D
Signing time: Sat 29 Mar 2025 05:50:34 +0000
Manifest this update: Sat 29 Mar 2025 05:50:34 +0000
Manifest next update: Sat 05 Apr 2025 05:50:34 +0000
Files and hashes: 1: pSvwKHcZGUlxLT2tKdSreid57EM.crl (hash: ZIBDi14kK+Hj2IqrtbUt2rotwxmt8rNmaB4Ku6TPIqM=)
2: 88F562E83DAD11EFAA46E417C4F9AE02.roa (hash: y+CwsCOmzO2omqt+7OucZwgkShxhjQvdzFrUFNJogYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA618
Validity
Not Before: Mar 29 05:50:34 2025 GMT
Not After : Apr 5 05:50:34 2025 GMT
Subject: CN=67e78a2a-553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:c3:ee:7d:ea:d7:35:8f:a0:12:22:2d:1a:
68:8d:55:34:11:57:3a:e6:09:ce:7b:0b:50:d8:5b:
ef:7d:56:a1:10:40:02:97:c0:41:32:c1:bf:2e:05:
ca:a7:e5:db:9b:1e:d3:a5:4e:45:41:9c:58:d2:f3:
95:e5:03:35:85:5f:91:27:47:f1:81:80:29:25:11:
b9:11:a9:47:81:30:84:78:ba:f2:4e:08:7d:bb:d7:
0d:4c:54:4c:3a:c2:ed:f3:c4:aa:42:65:82:65:51:
b9:25:d8:68:d3:25:f9:83:07:5c:0f:db:38:86:c5:
6c:cc:e5:a8:54:88:07:42:d0:84:2a:47:f7:4c:9c:
fb:0a:0a:56:ab:ed:0a:13:2a:dd:c5:c9:c9:f5:97:
9b:a8:13:08:8b:1f:da:91:df:7b:8c:57:e9:66:cf:
8c:6d:e9:a2:3a:58:47:51:bf:e2:25:65:bc:c6:d5:
c9:ee:62:60:a2:aa:24:e6:87:7e:c2:14:ac:9b:d7:
5f:13:03:36:6b:bb:bd:ed:da:39:8d:7e:51:63:fb:
fc:76:0c:2d:c4:91:c2:3d:fa:42:88:f1:b0:9b:e9:
e9:98:32:ad:16:0b:cc:2b:5a:87:be:1f:4a:db:89:
dc:20:5a:61:fb:f3:2c:55:de:25:1e:87:7d:e3:83:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:32:FA:D3:3A:3F:C0:0C:90:98:C1:8F:6F:60:1B:AF:EA:65:8B
X509v3 Authority Key Identifier:
keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:e6:10:22:95:f3:db:e4:e8:45:1e:58:30:a8:88:d8:d1:28:
00:b0:40:41:e0:c8:63:1e:e0:bc:9e:6a:9a:a0:d6:00:94:b6:
1a:b8:69:d6:89:d9:78:da:78:22:31:7d:5a:da:64:c3:84:11:
dd:43:86:66:ac:c4:b0:be:51:b4:0f:1d:32:0b:0f:4b:75:78:
12:a8:0d:00:b1:34:9f:9a:04:34:63:64:94:36:14:1a:53:ab:
26:08:6d:31:5a:87:f3:37:51:1d:04:a1:dc:ac:52:ad:eb:f3:
be:af:23:2a:8d:91:c1:a8:56:1c:0a:cd:e8:2f:01:41:36:e5:
9f:d6:f7:01:60:6c:a6:ef:99:b2:56:7e:7a:c4:0a:21:d8:16:
88:93:bb:71:d7:64:00:6c:2f:13:29:6a:f2:88:95:1a:56:da:
f6:1d:fa:4d:b0:75:76:cd:b6:ae:c9:dc:33:00:54:8d:ca:dc:
36:5d:9f:f7:45:59:91:0e:3f:09:9d:c8:7f:e6:34:20:6c:49:
90:ec:ab:e6:97:4a:4f:62:53:39:55:91:d2:8c:08:a5:7f:77:
14:45:f8:ac:92:f2:d2:ff:0b:87:df:79:81:6f:4f:92:d2:9c:
c8:67:f5:2e:74:4c:55:0a:f0:e8:9b:58:c8:e6:14:59:87:06:
2b:26:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:43:40 2025 by rpki-client