Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier: wcQ+5g1ajOoUmbQ5a58ecanQf6c0a2FnTL18ddps9jU=
Subject key identifier: 85:23:93:F7:FE:66:55:1D:75:EE:A7:A4:AC:B0:BD:A9:06:F9:30:93
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number: 75
Signing time: Sat 29 Mar 2025 06:14:09 +0000
Manifest this update: Sat 29 Mar 2025 06:14:08 +0000
Manifest next update: Sat 05 Apr 2025 06:14:08 +0000
Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: s5MXtiGgSpVeO+vl3NvQZqBTNVg6hdIhCGBJMdz/wNM=)
2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: GJjFHlhUrw3PK9n6h+pqP/cBSWFV8op0nahH1r+sT6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA96A
Validity
Not Before: Mar 29 06:14:08 2025 GMT
Not After : Apr 5 06:14:08 2025 GMT
Subject: CN=67e78fb1-17a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:db:97:35:93:d2:83:4d:01:6f:9c:3a:1f:4b:
ff:53:0b:76:29:5e:ce:5f:b0:d3:81:49:7c:e0:c1:
25:d8:79:22:9e:d2:ab:83:e0:f3:b0:cf:ac:ca:38:
b3:98:94:62:3f:d6:a3:9c:94:14:96:29:6e:5e:90:
23:9e:d5:d7:df:29:bd:90:88:22:09:bf:33:95:74:
8f:a9:0e:13:73:3b:af:46:10:3a:b8:5f:97:15:a7:
04:33:c5:cf:86:3c:ef:34:dd:0f:63:01:13:b0:c2:
ed:d5:f8:b9:1a:6e:1e:0e:67:35:87:bd:73:d7:1a:
ba:d8:25:a6:09:1e:1d:b1:4c:61:98:60:5f:e5:48:
45:48:a1:9e:e8:b0:09:51:7c:0b:61:34:70:31:b1:
e0:33:1e:a1:6d:93:b9:f0:d3:8f:70:2b:43:7d:ae:
a5:7e:98:33:ad:5e:b7:0a:60:a7:a1:75:1e:2e:eb:
eb:72:de:31:df:2d:63:c4:06:a6:9b:d2:9f:96:32:
e9:cb:40:ff:12:57:f1:19:b8:04:b7:1f:a8:13:94:
ce:22:69:06:bd:a8:df:56:01:15:43:9c:80:87:b0:
ad:8b:cc:6d:0d:5b:a4:81:00:d7:67:a6:0f:5f:96:
12:a2:c3:1d:44:f6:f6:2a:9f:ea:e3:6a:ac:4f:94:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:23:93:F7:FE:66:55:1D:75:EE:A7:A4:AC:B0:BD:A9:06:F9:30:93
X509v3 Authority Key Identifier:
keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:91:6a:60:dd:66:99:99:6e:29:7c:e8:76:64:f2:88:0b:b1:
c0:b1:ac:f4:6c:5c:17:bb:7a:cb:0b:56:f0:df:d3:76:79:53:
43:80:b2:9c:84:48:16:88:1b:d3:a7:44:ad:55:11:17:2a:4b:
75:be:a7:49:4b:f5:ed:95:e0:8a:f0:2d:ae:24:fb:2f:9e:5c:
5f:93:df:70:4f:4c:53:03:1d:93:81:47:ed:a2:8d:9f:ed:c4:
25:de:fc:d5:d2:83:b6:01:f0:93:5e:3d:d1:31:a5:c2:f4:c7:
ff:b0:ef:07:c3:16:03:a9:6f:6a:bd:64:9d:cc:ea:b8:bb:ed:
ee:e9:9b:fa:0a:12:0a:fe:5e:b9:57:78:24:99:df:4e:fd:67:
bc:a9:aa:c4:6e:5d:f1:71:55:04:96:dc:6c:22:f9:77:7a:75:
d4:de:cd:ed:13:c2:24:a3:01:f7:08:36:e1:ab:05:a1:ef:7d:
10:bb:7e:f1:78:7c:d1:4a:fb:bd:30:65:fa:2f:c7:e4:a9:1b:
61:11:5f:5c:4e:59:d5:40:19:f6:76:f7:fe:b7:52:e1:5f:23:
94:30:64:2f:a1:cb:0d:f1:df:70:96:b3:59:28:cc:57:cb:a6:
e8:dd:f9:f0:bd:01:15:f6:2e:56:77:e5:ae:d5:b3:12:d0:7b:
1d:fe:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:23:23 2025 by rpki-client