Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
File: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft (raw, json)
Hash identifier: MCv1RELMpI3R9fVtWs6r8gPI9J2Ft/oGd0GWP+8/qCA=
Subject key identifier: A4:2E:66:B8:F9:DE:ED:81:4B:7D:2E:AF:0C:BE:AE:E7:75:7D:97:40
Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D
Certificate issuer: /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D
Certificate serial: 1B63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
Manifest number: 1B57
Signing time: Fri 28 Mar 2025 16:23:20 +0000
Manifest this update: Fri 28 Mar 2025 16:23:20 +0000
Manifest next update: Fri 04 Apr 2025 16:23:20 +0000
Files and hashes: 1: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl (hash: +p61iBe2KmX4hKgKAbQvpcE9QJMovkO8pmeFHWchzsg=)
2: B6FD84CE54F611E79DF7E643C4F9AE02.roa (hash: YQFMKBF60xX3PieFKAIG2OCODzb9u3iqyawtkqXWSC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7011 (0x1b63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB063
Validity
Not Before: Mar 28 16:23:20 2025 GMT
Not After : Apr 4 16:23:20 2025 GMT
Subject: CN=67e6ccf8-28dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:be:67:06:7d:7b:88:20:0d:a4:f2:54:5b:
77:11:85:17:d4:9f:5f:69:24:56:45:f5:9e:0b:c9:
6e:30:e9:c5:d2:77:b0:b6:12:63:09:ff:07:53:78:
f4:58:e9:c8:c0:71:d4:83:42:70:68:58:7c:9c:e9:
d8:c6:bc:aa:6c:7c:91:26:7b:d1:45:3e:69:70:00:
94:f0:73:36:2d:79:2f:82:c4:2d:e4:36:2d:f9:c0:
1f:71:50:7e:4d:ab:82:62:94:f9:24:0f:95:a9:6b:
0d:4a:53:d2:d9:a9:7b:10:4c:23:a4:c8:ab:47:e1:
9d:7e:b6:0c:33:24:c7:0f:25:26:93:7e:88:d7:f8:
d9:1b:9d:2f:7b:25:02:2e:5d:60:19:c1:dc:52:2f:
75:0d:fa:8e:3e:4f:5f:cf:60:af:de:53:83:47:fc:
7a:23:b3:67:d6:aa:88:22:86:2c:3b:65:ef:f2:db:
31:36:66:a4:c0:80:50:6c:32:2e:76:bf:88:b3:b5:
a3:0b:a8:24:28:52:f1:13:8f:1a:d0:be:ab:22:3d:
f5:68:ec:08:5c:32:7a:79:4b:62:30:db:44:ec:fc:
80:16:4d:fb:77:b2:00:2e:96:44:69:a5:03:c1:33:
8b:92:37:25:7f:27:49:27:c8:c7:e5:2c:3f:e4:2f:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2E:66:B8:F9:DE:ED:81:4B:7D:2E:AF:0C:BE:AE:E7:75:7D:97:40
X509v3 Authority Key Identifier:
keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:69:31:19:62:c8:97:30:5c:73:dc:7b:74:6d:5d:8f:7c:6c:
91:54:19:7a:42:fc:4b:12:9e:b2:97:33:52:8e:f6:01:2d:cb:
c7:fa:33:bd:f9:f4:08:9b:56:4d:15:f4:e6:7a:38:6e:4a:cf:
52:9b:6d:44:23:6a:20:5c:74:9a:0a:63:ac:53:bd:c3:b2:09:
28:67:c4:73:c7:f4:e2:eb:fa:14:c2:fc:56:f4:1b:13:35:94:
43:02:40:8a:61:c4:aa:df:a4:61:ff:55:0d:20:67:58:8c:5e:
63:78:f2:6e:5b:50:aa:c9:32:1f:a5:fd:57:a3:1b:76:f2:af:
93:22:12:ce:ed:9e:9c:d6:44:47:fc:60:d8:9f:3a:89:aa:6d:
a9:62:d0:fd:7c:7d:1b:6a:de:f2:64:0d:43:2e:2b:9d:fa:0d:
e6:02:53:07:ea:bd:55:3b:12:6a:17:b4:d7:7f:7d:7e:f6:f0:
25:17:92:4e:aa:74:02:e1:ba:c5:12:b8:75:27:12:de:76:a0:
f4:26:5e:a0:e0:94:72:2c:30:8d:15:fc:dc:49:96:a2:e7:2f:
1a:45:37:6e:f5:09:77:fe:1a:0a:e9:9d:7a:49:02:c9:f0:e1:
48:ad:40:d1:ba:1e:65:51:07:c1:64:ff:9b:82:98:97:63:6d:
f6:9a:2b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:19:12 2025 by rpki-client