Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json)
Hash identifier: RDRftq7EqAJFNN/vl4bTI/IcoYdqHT+Y8RsadhVd2bY=
Subject key identifier: 48:91:7D:E6:03:5C:DD:F0:E3:04:F9:D9:74:12:F1:16:59:67:C6:CF
Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
Manifest number: 87
Signing time: Sat 29 Mar 2025 05:54:19 +0000
Manifest this update: Sat 29 Mar 2025 05:54:19 +0000
Manifest next update: Sat 05 Apr 2025 05:54:19 +0000
Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: C0a2qdclmYsuM/M0ZjMbRLLhWZkgEjRpIQMg6D+8YHQ=)
2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: GLbMFy1JbyAVM7u4jQAEv8xQTj/rbFbdkkf2ZQWfsOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB72F
Validity
Not Before: Mar 29 05:54:19 2025 GMT
Not After : Apr 5 05:54:19 2025 GMT
Subject: CN=67e78b0b-35e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:a1:c5:58:35:c7:7b:db:76:d0:68:d8:c6:
a9:13:72:93:df:4f:6b:d5:d8:cb:8b:35:7a:d9:a4:
ec:23:e1:42:d5:ae:85:4d:b2:be:b3:36:d1:fe:73:
c2:88:2c:00:64:9a:aa:47:03:75:4f:cd:f1:51:4e:
ee:e3:46:25:93:bd:88:97:a0:ee:2a:9e:bc:22:ad:
e0:67:c1:7c:35:45:32:b5:26:ba:79:3c:03:97:dd:
f0:ac:2d:03:2c:c7:64:df:a5:57:67:ca:c6:e6:8d:
7a:68:a2:dc:6b:8b:88:bf:bd:a1:07:16:3c:4e:4b:
c9:ca:ca:4b:e4:a4:52:56:1a:14:be:54:a9:35:61:
7b:1d:91:b0:19:86:83:79:72:0e:6a:6b:8c:4b:8c:
e5:72:d6:8f:76:d6:be:dd:dc:c6:a0:b8:fe:cb:e7:
3d:da:32:d5:7d:e7:5a:8b:7d:84:6e:d5:0a:91:bc:
20:b2:1e:f1:50:01:ea:25:35:76:aa:9e:95:d0:39:
5e:b8:ce:e5:a4:7b:2e:36:3d:4c:48:02:2e:0e:3d:
50:be:44:d8:7d:d7:7b:9c:0c:d3:1c:db:50:10:c4:
61:47:65:c3:07:7f:d1:7a:64:cd:cf:3e:50:94:db:
2c:51:3c:52:2e:6e:69:7a:eb:da:c3:83:4b:06:a8:
d5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:7D:E6:03:5C:DD:F0:E3:04:F9:D9:74:12:F1:16:59:67:C6:CF
X509v3 Authority Key Identifier:
keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:de:eb:17:52:bd:c0:6c:e8:c1:36:db:b8:80:10:3b:94:1a:
51:e1:b2:df:25:24:a4:94:18:45:2e:b4:19:5c:5e:37:f8:6d:
1f:eb:05:4b:62:07:e9:41:df:93:9c:9b:ae:04:ac:73:46:db:
18:94:ba:b4:82:f1:2a:2e:9c:29:51:04:07:70:0d:67:17:a0:
02:6c:d2:a6:93:92:5a:ef:60:54:c3:9e:6e:db:3e:4a:96:fe:
a6:27:69:fa:03:6b:e9:dc:b4:a4:1e:88:20:67:14:ee:49:59:
a7:ad:e9:76:f5:22:a5:2a:11:36:9c:ab:5d:b7:e3:9c:cf:ea:
fe:5e:0a:e5:e7:a1:d0:da:35:1f:57:1d:34:9a:db:a4:91:a5:
ad:d3:ce:da:17:3f:4a:92:8c:ee:32:03:be:9d:7e:ce:8c:9a:
32:e8:6f:e3:bb:6d:d1:1a:e8:4b:cb:1f:ba:7b:20:e1:5f:40:
0c:28:72:73:4e:40:20:e1:ec:bc:fe:92:db:1f:ef:08:3d:58:
4e:8f:34:54:6f:c7:49:0e:47:56:35:60:49:21:da:24:81:3c:
1a:21:53:b2:30:ea:fb:01:32:ee:90:d3:78:b8:50:f8:e4:31:
ac:af:ce:30:dd:6d:d2:1d:12:39:19:64:10:fb:64:09:5a:5f:
15:00:3a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:18 2025 by rpki-client