Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
File: AWWp3MArwOh2h-4GcFwObJkt6TI.mft (raw, json)
Hash identifier: 5zidKZePujLrahxerpLZa5GR6ERNF/BGmCJfa7dIlFs=
Subject key identifier: D0:92:47:95:3D:43:CE:CD:E2:32:66:42:2F:3B:20:4D:60:58:AD:47
Authority key identifier: 01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32
Certificate issuer: /CN=A91AD544/serialNumber=0165A9DCC02BC0E87687EE06705C0E6C992DE932
Certificate serial: 0667
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
Manifest number: 0661
Signing time: Fri 28 Mar 2025 22:39:04 +0000
Manifest this update: Fri 28 Mar 2025 22:39:03 +0000
Manifest next update: Fri 04 Apr 2025 22:39:03 +0000
Files and hashes: 1: AWWp3MArwOh2h-4GcFwObJkt6TI.crl (hash: HuCN962ORSj85XkGqJTnTeZ9qrMEpVbaKFgi61eNVQc=)
2: 206DDC4A77AF11EB8E972C66C4F9AE02.roa (hash: zqG4bc06KvBhxn6QFTh7x4mtk1td0qh6Ee0/kRUb20s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1639 (0x667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD544
Validity
Not Before: Mar 28 22:39:03 2025 GMT
Not After : Apr 4 22:39:03 2025 GMT
Subject: CN=67e72507-b123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:c7:fe:d8:5b:9b:78:cb:ab:a3:e0:a1:ef:
2c:84:04:b7:3b:20:ea:58:72:9c:44:5b:a3:b7:b7:
65:0b:ad:0e:33:28:0a:ac:56:c8:4c:0c:38:e6:db:
93:bf:59:ef:e1:d6:22:32:28:9b:80:b9:dd:63:94:
21:5d:91:7e:b7:c1:45:b7:9e:6b:0f:a5:77:4f:c1:
4e:f0:d0:a1:b1:ee:26:b0:77:84:fd:9c:77:c5:6c:
6f:23:e7:53:58:a6:42:25:24:65:af:ff:29:c1:e1:
d5:2b:08:7b:a8:f6:c4:e6:d5:ce:d3:7b:6d:04:ee:
f7:c2:a5:b2:7e:45:fc:14:88:fe:ac:f0:36:a6:e7:
58:0a:7b:d3:dd:47:d9:0d:4a:76:5d:2e:e4:e9:2c:
ea:d0:72:32:93:80:57:58:e4:92:8b:68:62:80:b9:
ac:05:37:8a:71:5b:f1:6f:1e:9a:97:2c:31:2c:ba:
8e:c7:36:12:fd:d2:28:72:47:c0:99:9d:49:fd:87:
5e:dd:4e:61:77:53:c1:59:84:e8:ed:c0:e1:ee:fc:
1e:67:3d:57:bc:e7:66:7f:bd:10:80:06:03:77:45:
ac:45:cb:af:2b:52:4c:9a:e4:3c:54:69:ec:25:0c:
98:17:8a:04:c2:5f:8a:68:55:50:f2:d6:72:6f:d7:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:92:47:95:3D:43:CE:CD:E2:32:66:42:2F:3B:20:4D:60:58:AD:47
X509v3 Authority Key Identifier:
keyid:01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:e7:e0:cf:e0:ef:0d:f3:f8:ed:58:ee:35:9d:d9:16:ca:a4:
19:42:b2:8d:00:d0:98:4c:e4:4b:75:65:b0:7a:eb:5b:d0:b5:
dd:f6:f4:2a:7a:f3:2b:f1:4d:0f:c2:1c:3f:84:84:8c:0d:f7:
09:35:07:4d:7c:5d:2a:ba:65:a0:98:0f:24:51:07:eb:da:10:
58:45:14:97:82:d5:be:3a:c5:74:1f:d4:b9:12:b4:4b:6d:0e:
76:e5:5f:b9:b2:1d:b2:79:f3:aa:82:ad:50:a9:c9:a6:2b:15:
ec:f9:ce:ca:95:d0:2e:9a:25:32:5e:18:9b:1d:25:09:a1:7f:
ed:b1:1e:71:58:d2:d2:ed:60:da:e6:f6:3c:82:46:e3:da:c5:
4e:a4:e7:3e:b7:ae:71:81:08:f8:3e:f6:0d:49:3f:aa:d5:26:
c9:ab:83:92:58:11:d9:98:eb:04:74:e7:c2:89:5f:ac:5e:32:
65:24:74:73:b0:f9:37:87:e4:5a:bc:b6:0a:41:26:85:f5:28:
a6:7b:2f:86:eb:b0:ab:cf:f4:4b:2b:db:9a:18:64:c0:81:98:
2f:7c:d3:dd:d0:bc:81:c3:56:f8:37:e0:fb:a8:9d:96:17:3c:
f2:8b:be:1b:fe:d5:3d:c2:67:ab:d6:2d:b4:5c:25:5f:fe:9a:
c9:fb:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:55:06 2025 by rpki-client