Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json)
Hash identifier: Ql6xGnBjuksmYfGeLr44k4ySLM1RnCwShxnJr4wCbgU=
Subject key identifier: C1:62:A6:00:2F:1A:73:BE:22:15:82:15:53:B0:31:98:A1:F6:E8:B0
Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Certificate serial: 076F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
Manifest number: 076A
Signing time: Fri 28 Mar 2025 21:45:14 +0000
Manifest this update: Fri 28 Mar 2025 21:45:14 +0000
Manifest next update: Fri 04 Apr 2025 21:45:14 +0000
Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: ElgmW3s0ueVzlYnS2anwJCX+EYZw/32ptEjsvB8kpxQ=)
2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: IvwVD4Q9iLuwpemzgQpr7lRPiWqlqg1E9p3bOADAod8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0049
Validity
Not Before: Mar 28 21:45:14 2025 GMT
Not After : Apr 4 21:45:14 2025 GMT
Subject: CN=67e7186a-e2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:b5:d9:9b:8c:ca:fb:1a:62:30:58:9f:8b:
ae:f9:7e:06:de:e3:ba:e9:32:b3:aa:82:d0:29:07:
88:59:d2:3c:2b:ac:d8:c3:3f:e0:a2:1d:4f:9c:1e:
1e:b8:fd:ec:97:fd:c8:e8:de:3b:ae:62:5d:ff:10:
12:56:97:06:d9:2f:53:dd:41:34:6d:5e:8e:33:37:
66:52:ff:ed:e3:30:c8:62:98:02:0c:66:a7:a0:55:
6a:fb:72:e1:86:72:1d:83:63:68:74:69:44:88:03:
d9:32:9c:5b:c8:b8:9a:6a:1b:15:e1:74:7c:19:0b:
c9:5a:60:37:72:73:4e:78:f6:95:cb:03:9f:a2:23:
ba:72:0f:12:e7:18:92:f4:16:dd:af:bd:d6:ec:a7:
82:63:25:ba:e3:30:5b:a4:2e:25:b4:e9:b4:1c:15:
a4:a0:f4:94:4b:e2:78:67:aa:5c:3a:c2:db:e9:cf:
44:63:02:e3:c9:59:a1:19:6e:f2:67:07:33:1f:dd:
58:08:8c:8d:f1:62:d2:df:88:ce:9c:6b:68:2a:e2:
32:e1:6e:47:a1:2b:4d:8a:da:08:e4:e6:bf:5b:5e:
f5:61:b2:ab:15:b8:f5:65:cb:6b:37:b4:68:a2:b8:
82:23:b6:25:91:08:7e:09:c7:9c:d8:a6:17:fc:eb:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:62:A6:00:2F:1A:73:BE:22:15:82:15:53:B0:31:98:A1:F6:E8:B0
X509v3 Authority Key Identifier:
keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:57:e5:44:d0:e4:ac:97:24:f8:07:1d:b8:51:05:0c:2f:2c:
f7:fd:97:9a:ca:a8:b1:92:f1:aa:b0:de:9d:b8:44:5c:69:58:
87:a2:a7:dd:0e:7e:7a:85:e1:19:70:03:0c:34:6a:b4:29:a8:
db:87:86:fa:6f:f1:ad:d1:5c:16:04:3e:69:bc:2a:93:75:83:
4c:a1:1c:44:a8:95:ab:24:01:ce:03:3b:9d:72:f8:56:c0:28:
74:e5:f1:c9:67:75:5c:bc:77:1f:c2:b0:a9:bf:13:9c:02:c4:
c9:9d:7d:d1:cb:06:4e:20:34:0b:14:b7:71:c9:a5:04:13:b0:
0e:03:03:30:31:0a:d8:b5:33:b8:30:6e:18:a1:b7:76:83:d9:
f1:13:76:e1:57:58:f5:9e:85:2f:cd:68:7c:09:79:92:dc:95:
54:4a:63:60:59:b3:ae:ea:fb:fb:74:6f:92:0a:f5:91:c1:e7:
a9:83:0a:8c:07:37:b2:f9:f3:fe:5e:85:eb:d1:d1:39:a5:96:
4f:3e:45:ca:c8:9e:b5:dc:17:19:d4:00:22:d6:11:84:01:53:
db:73:fb:78:89:59:77:e7:8f:f3:ae:a9:0f:5a:a6:e3:57:72:
5a:62:01:db:76:92:ed:c9:37:f7:41:de:14:0f:72:fe:23:04:
3e:aa:aa:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:26:12 2025 by rpki-client