Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json)
Hash identifier: 3nJaSOkNZgUfcF0R5W29U2sDEohXx1Xcz3oeAw1Vtyc=
Subject key identifier: 81:A1:84:01:35:E3:06:B9:4E:15:34:CE:87:5F:D2:C8:9B:A7:7F:C8
Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15
Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15
Certificate serial: 3478
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
Manifest number: 3472
Signing time: Fri 28 Mar 2025 14:35:17 +0000
Manifest this update: Fri 28 Mar 2025 14:35:16 +0000
Manifest next update: Fri 04 Apr 2025 14:35:16 +0000
Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: lHuTw31QgKgjfFAu+NXOjsdin71Ce/1HZspu9Fj1t1k=)
2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: /ycT0LeM2B6SfJOIcutt73CO4dhLu842cRCTArO5hco=)
3: 673DC29606B011EFA665703AC4F9AE02.roa (hash: F5Zy7dXCYPL9clQFpPmuH37XP7Qhuqmf+NBAd1W/CM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13432 (0x3478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD8CB
Validity
Not Before: Mar 28 14:35:16 2025 GMT
Not After : Apr 4 14:35:16 2025 GMT
Subject: CN=67e6b3a4-932b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:4d:c7:b5:ad:c0:27:78:d9:ba:74:84:77:
0b:d9:79:cb:99:08:cf:1d:37:7b:91:a1:b5:56:7a:
00:20:49:46:4e:f5:29:31:c7:68:99:37:5f:fa:7a:
2a:e9:40:9b:21:f8:56:5f:b4:8f:e4:f4:83:88:c5:
08:96:f0:16:ea:3a:93:41:cf:6d:b7:70:4d:7b:fe:
13:b7:f6:83:30:33:f7:63:9b:bc:06:42:05:fc:da:
87:15:8a:07:a9:fc:0f:d4:75:fa:1a:21:ad:b6:2b:
c0:d6:11:81:b4:ac:48:40:cf:5a:a3:f2:fb:51:cf:
0a:bd:7c:cf:5c:a6:62:e2:d9:2b:68:73:30:bc:fc:
28:6e:09:07:81:9f:69:86:e0:56:35:78:25:bd:4b:
cc:be:b8:a1:a3:9b:98:77:87:e4:92:95:bd:55:33:
b1:1d:0f:c0:f0:0d:2d:eb:1f:12:1d:ea:bb:ac:a9:
50:9b:0a:6a:3b:fc:15:3c:55:1a:fb:5b:ce:75:d7:
b8:4e:57:3c:0d:0b:40:e9:d9:a7:3c:31:d2:7c:6e:
22:e8:43:fe:03:ce:f1:ba:6d:de:41:32:33:31:dd:
23:02:a2:88:4c:19:49:22:5d:c4:b6:a6:90:1d:45:
e9:13:93:fa:2e:a5:56:82:fe:47:9c:60:5f:8a:96:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A1:84:01:35:E3:06:B9:4E:15:34:CE:87:5F:D2:C8:9B:A7:7F:C8
X509v3 Authority Key Identifier:
keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:cb:de:4e:87:e1:ac:fc:b5:0d:86:ef:73:93:93:52:a4:9e:
a5:4c:be:61:1d:24:3a:83:21:a6:d7:6d:4f:26:d8:01:0b:6d:
ad:dd:31:ca:44:fe:29:44:9c:c8:f1:43:8f:a3:65:10:a5:27:
89:f6:89:34:87:d1:29:a5:ef:1d:83:89:90:0b:f2:22:f2:18:
1f:ad:fd:63:8c:c0:e0:2a:33:45:a9:dd:a0:08:2a:f3:dc:ce:
3b:b7:fb:33:ba:d0:0f:4d:69:c0:12:6b:2f:6b:95:4a:21:b0:
1c:f9:d2:25:84:30:e5:2d:3c:52:5d:eb:a4:e5:ca:fb:3f:85:
c8:8e:d7:54:cb:68:61:80:1b:f2:e3:8b:eb:2b:3e:37:39:ce:
57:d2:07:8b:76:d1:c3:d8:72:4b:7c:f5:6d:a8:3e:82:ca:84:
62:af:26:6d:d6:c6:88:be:44:c5:58:75:bb:0a:3a:bb:47:76:
79:d9:99:3f:b7:40:7f:9b:5b:93:9d:d3:ee:50:04:0e:29:4d:
8c:66:3e:dc:75:e6:fb:72:95:d1:b5:58:d1:28:6e:b0:b6:1c:
b2:61:c1:80:b1:88:38:48:c5:f4:ea:4b:4f:d7:0f:4f:ac:e4:
a8:c3:5a:79:f3:fc:57:90:59:ed:f4:bf:45:04:e6:c4:26:25:
84:4e:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:43 2025 by rpki-client