Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json)
Hash identifier: HyHJgOsxnFRymunjvGTyjiiHLpCkcZHyMLpxRC8gRVg=
Subject key identifier: C4:FA:C3:73:11:3F:6B:2F:83:70:48:34:8C:D2:07:56:80:47:6F:15
Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E
Certificate serial: 057A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
Manifest number: 0565
Signing time: Fri 28 Mar 2025 23:40:30 +0000
Manifest this update: Fri 28 Mar 2025 23:40:30 +0000
Manifest next update: Fri 04 Apr 2025 23:40:30 +0000
Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: Lu1gFvbCUHeo1Q6+8nRaHL/aOJF5hZ0UZhAu6wIcGWE=)
2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: JaP8DbxQir8/0bWtIBOnJ0xxJ2zmG81J8TY5KOYqo20=)
3: BA8EFE48E5D411EFA67E0112C4F9AE02.roa (hash: PTrsZlGZCJahEmYwcjdYzVJYq42LWnB7L7jKaaAzFW0=)
4: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: iJ+3fFN0ePrtmOVIDHG94Bkp4m0H5KVuwmeRjgUmL3I=)
5: B5579BEA421911EC832A4A41C4F9AE02.roa (hash: ezrYPRz2mMJqogCAVE9iLagUvmStXqPt/J4TeogUnNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB383
Validity
Not Before: Mar 28 23:40:30 2025 GMT
Not After : Apr 4 23:40:30 2025 GMT
Subject: CN=67e7336e-4d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:98:49:21:f6:4e:7e:5f:64:da:a3:80:c6:
7e:3c:f6:6d:58:fa:ba:3c:23:c4:75:37:6a:45:cc:
df:69:6e:38:94:27:ef:bc:e6:d0:11:7b:8c:8b:6b:
a3:48:46:cc:42:de:5f:c8:0a:61:f7:9b:7b:73:8b:
d9:7f:be:bf:67:c1:b2:bf:cb:c8:57:2b:af:45:59:
79:50:f1:ec:f2:56:42:2b:7d:35:6e:2c:2c:f9:e7:
ea:16:5e:40:67:b0:ad:f1:87:d3:56:cc:c3:4e:65:
64:cf:bb:12:68:ce:f0:b9:ec:59:da:eb:39:1e:4d:
c4:8c:a3:d9:90:d9:cd:4f:2d:72:62:b4:c8:a4:2d:
b3:f1:7e:56:fc:ab:27:c4:f6:67:72:ec:46:a6:08:
7b:66:b3:66:d5:85:62:3b:e5:31:03:d6:57:36:b9:
df:02:34:14:9c:12:c0:1b:c6:87:89:f3:29:56:e8:
ff:b0:83:61:76:ca:70:84:b1:09:18:51:29:36:b8:
a8:9a:11:74:46:59:52:32:ef:cb:73:f0:27:97:6c:
5f:14:37:32:e4:e2:cd:1e:97:1d:a4:99:d9:bf:ea:
5a:8c:d6:84:0b:f1:cb:0a:00:d2:dc:45:be:08:58:
9c:76:e9:7e:5b:da:a8:ff:62:41:54:69:f1:1f:22:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:C3:73:11:3F:6B:2F:83:70:48:34:8C:D2:07:56:80:47:6F:15
X509v3 Authority Key Identifier:
keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:84:ec:48:51:b0:31:da:75:8a:91:11:4c:88:ff:6e:7f:4d:
a0:c5:89:72:fc:6b:82:48:99:85:1b:30:18:72:3c:89:e7:9e:
58:c2:1f:ef:5b:3f:ca:33:4d:32:83:e3:92:69:26:02:f0:f2:
3a:0d:84:24:4d:44:59:00:d1:78:6a:ea:cb:b4:20:11:35:b8:
47:3f:ec:bb:9b:38:8c:f7:94:ca:06:35:e3:61:d6:7b:4d:90:
47:71:03:20:a6:d2:0a:9d:72:cd:b2:ce:f7:7a:63:87:4a:19:
7e:2e:7b:fa:6b:d2:43:98:8a:5a:41:3c:23:02:28:db:22:f4:
f2:35:93:18:42:02:8f:01:2b:97:bf:53:31:e0:4f:66:e8:93:
28:cc:f6:b8:89:00:1c:08:86:3f:36:38:1e:9e:bb:f4:51:dc:
5d:3a:56:8c:b3:b6:ea:61:47:ba:23:97:eb:29:4d:1c:d5:52:
65:2b:fc:b9:c8:9a:78:48:52:9f:bd:7f:61:0e:8c:8c:b9:23:
db:b1:14:c7:7b:dc:1a:f2:c1:be:cd:bc:e6:59:b9:69:64:bf:
7a:97:e4:df:7b:eb:d8:97:ad:ef:fe:12:28:d7:4e:29:5e:48:
71:77:7c:f5:d3:27:9d:51:73:d8:00:e1:a4:ca:be:0c:7c:37:
4f:88:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:14 2025 by rpki-client