Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier: IJiqXODJLhlMdHkNiFuhSwk4faP29FIBgiaJwSQbdS0=
Subject key identifier: 9A:C0:71:B8:ED:4E:77:C9:28:43:D5:37:34:4D:E0:58:64:29:AF:54
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial: 03A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number: 039F
Signing time: Sat 29 Mar 2025 01:02:12 +0000
Manifest this update: Sat 29 Mar 2025 01:02:12 +0000
Manifest next update: Sat 05 Apr 2025 01:02:12 +0000
Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: 3wgk+bOJT7gzlwhihwkgLRrJYf9wJalDV0een5rahJU=)
2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: 9DfUOxvFR13SpwnP9dE6JJ+qwtWuEZ4XB8tC3ndW1gI=)
3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: dBKzmRV5kLqxEgnT/9vEMvol4LmNVdPd79i3sVZVmJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937 (0x3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE567
Validity
Not Before: Mar 29 01:02:12 2025 GMT
Not After : Apr 5 01:02:12 2025 GMT
Subject: CN=67e74694-8cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:53:6d:f3:d6:2d:81:24:80:c3:a9:aa:19:
38:a1:d9:a1:30:b5:43:0d:1e:a2:02:6f:cb:19:f7:
de:59:22:fb:d9:67:13:a2:c5:95:ae:5b:19:42:b5:
e8:96:f0:46:1c:92:af:7d:23:61:88:34:24:6a:ee:
93:59:ff:9c:54:c0:e9:c8:21:73:dc:91:95:e6:3d:
d8:d0:a5:20:0b:40:0f:c4:09:00:27:0a:16:7b:b6:
6b:f0:07:c5:1b:89:e2:63:5b:80:80:f4:50:3a:1e:
30:03:19:63:60:f7:71:46:fd:06:72:25:1b:0d:3d:
c7:14:55:8f:bc:15:9b:c7:dd:d8:18:2a:55:8f:4d:
af:34:69:de:e7:36:7e:d4:6d:f6:b0:ab:41:0f:5e:
a7:2d:15:ce:c1:4d:69:a6:07:4d:82:aa:cb:9e:78:
b7:95:d8:4f:68:84:98:66:d9:70:03:0a:fc:f1:c1:
79:a2:ce:a9:0f:7f:d0:a6:bb:66:6d:68:9e:8d:74:
6d:ab:2e:32:76:d2:2d:12:53:4c:e3:dd:f7:4a:4b:
77:4e:17:a7:00:77:1f:ab:96:b2:57:78:48:80:39:
be:81:9e:bb:f4:be:62:2b:76:44:f5:a7:aa:8e:e3:
96:2d:d0:b4:59:24:e7:b5:bc:13:8d:ab:2d:45:d1:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C0:71:B8:ED:4E:77:C9:28:43:D5:37:34:4D:E0:58:64:29:AF:54
X509v3 Authority Key Identifier:
keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:65:d6:09:57:9d:41:53:58:fb:8c:fd:65:2a:54:47:c9:35:
35:78:b6:1f:78:fb:1f:0f:4c:59:7f:c5:91:68:58:a2:f6:7d:
c9:ee:4b:14:a7:46:2b:1c:72:8f:11:10:bf:01:c6:cf:7b:62:
00:66:e2:65:0a:46:71:e2:76:9c:a3:41:25:2d:7b:08:67:28:
da:2b:07:54:2a:7c:39:38:e4:e4:14:9e:63:57:62:8e:b5:7a:
e1:e5:df:37:67:a1:1f:a3:5e:44:20:9b:bf:54:2a:0d:24:5b:
44:b3:d5:3c:f8:2e:27:6e:b7:20:c6:40:01:51:36:76:42:cf:
40:bd:33:df:04:a5:71:5e:70:fd:5d:4d:60:fd:e1:df:31:c7:
82:13:4f:1c:ca:a6:db:68:e0:fe:e8:ba:46:a7:90:ff:82:28:
67:64:1c:f6:65:5d:b7:ba:9f:76:aa:26:5f:33:fe:ef:71:0b:
ef:db:33:3d:4a:5f:96:b1:a9:7b:52:1c:0f:ba:06:56:db:ec:
b7:1d:95:8a:5f:e1:df:8f:09:9d:bc:a8:a8:32:3d:bd:ca:5e:
f7:16:48:5c:0a:52:9a:35:b6:cc:7e:f6:1c:50:78:11:44:2a:
1a:c2:06:15:bc:39:80:79:7f:e0:45:22:ea:58:9a:a2:31:f7:
0e:08:4d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:41:54 2025 by rpki-client