Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json)
Hash identifier: Mdk7vv8FmeqMETDlkHZwUCzayNZZwIjYxzKk6CvjoVQ=
Subject key identifier: 98:A6:28:44:16:72:5A:81:0E:98:95:E8:3C:76:B9:3F:26:29:DC:A9
Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9
Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
Certificate serial: 0CB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
Manifest number: 0C92
Signing time: Fri 28 Mar 2025 18:29:43 +0000
Manifest this update: Fri 28 Mar 2025 18:29:42 +0000
Manifest next update: Fri 04 Apr 2025 18:29:42 +0000
Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: v0IoHmnWFhXiCnR1js9dKOybrgJSKxNvz0nE/GyGAtU=)
2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=)
3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: 6ikKO6mfXRBRmgTIVMuW6RtmQkhRBMlzw4JjoQkAAdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3250 (0xcb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACBB7
Validity
Not Before: Mar 28 18:29:42 2025 GMT
Not After : Apr 4 18:29:42 2025 GMT
Subject: CN=67e6ea96-9592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:45:2b:39:34:ca:56:9d:0e:9c:1c:39:db:
d5:35:77:5a:a5:12:cd:6a:96:06:a4:4a:6a:c4:02:
c9:3d:67:e4:5e:13:87:f2:48:7c:71:c0:f4:94:68:
33:9e:58:6c:2a:7e:7a:88:ef:2c:30:8b:1f:31:e4:
0e:c3:e5:ce:80:7a:cd:6e:05:8c:7e:61:27:84:54:
1e:e5:b3:40:34:77:09:ec:dd:28:b0:7a:94:f4:a5:
bc:c7:e0:2f:b6:36:ed:2f:17:00:7f:de:e7:2e:fc:
3b:b7:b8:3b:52:ba:8c:26:be:f2:24:94:f1:43:12:
1a:d9:8c:6b:00:08:14:4c:df:61:e2:47:9e:32:29:
e9:e2:39:7b:44:d7:5a:d5:ee:1d:d6:57:db:ec:7a:
98:de:8c:bc:47:9e:f6:33:50:60:f2:fd:41:15:77:
c8:c6:74:ca:77:6f:c5:c0:41:b3:f4:5f:89:34:1f:
51:a3:6e:98:7c:e8:1c:ad:38:e8:6c:e8:50:11:23:
ee:bc:7b:1f:48:d8:3c:c3:9f:ad:50:91:49:2b:8f:
c0:63:1e:0d:0b:c4:33:b8:29:7a:39:9f:b4:94:01:
c2:41:c1:53:6f:7a:aa:e1:d8:92:91:78:40:0f:d8:
1e:26:78:d8:11:c9:a1:98:be:75:ac:d9:a6:70:b1:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A6:28:44:16:72:5A:81:0E:98:95:E8:3C:76:B9:3F:26:29:DC:A9
X509v3 Authority Key Identifier:
keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:36:ad:07:1a:71:a8:30:e2:26:74:a1:c6:bd:13:cd:6f:cc:
f6:da:2f:79:d0:b9:dd:33:f8:a2:31:06:ed:5a:9a:8d:49:99:
0e:fc:65:f2:ef:4c:32:46:a9:e1:f1:68:00:38:e9:84:4d:dd:
2c:13:8f:92:31:5a:aa:0e:5d:82:87:ca:ca:18:7d:0c:5d:ec:
3b:54:79:44:e3:75:66:10:0d:2b:42:68:53:19:3a:0d:b3:f9:
95:fc:cd:dc:13:91:b9:99:a8:13:70:ae:84:d2:93:f0:2e:82:
ae:ac:15:97:3e:69:37:7a:a2:26:0e:72:82:bb:d5:3b:d4:23:
6d:a5:d5:7a:4a:44:ce:c3:ca:62:ab:b4:1e:87:fb:95:10:63:
f4:9d:30:dc:a2:3a:04:97:89:bc:6b:4a:ff:72:35:41:53:2e:
b6:81:c5:0f:66:3d:17:10:1e:c1:8e:56:5e:2f:89:a7:30:0d:
ba:61:b7:4b:ec:0e:1b:12:d2:f8:10:17:c9:8a:34:12:39:9b:
41:6b:d0:bc:ab:0b:69:08:5f:a9:49:fd:2a:5f:6d:28:96:f9:
9d:ae:4b:f3:c9:8d:8a:cc:fa:82:02:67:5d:e5:b7:0b:b6:9e:
0a:1f:7e:03:7c:9d:4f:4d:7c:a4:1e:11:29:92:eb:54:36:b4:
58:e8:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:47:26 2025 by rpki-client