Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json)
Hash identifier: mJ5TbQ09ShbJCSJaUgtzBq4t7JfYo/HnziwChS7TVH0=
Subject key identifier: 34:B2:28:1A:E8:B3:96:01:5D:0F:DD:6D:91:11:BF:A0:21:15:84:B8
Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
Manifest number: 85
Signing time: Sat 29 Mar 2025 05:53:52 +0000
Manifest this update: Sat 29 Mar 2025 05:53:51 +0000
Manifest next update: Sat 05 Apr 2025 05:53:51 +0000
Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: ORyS30HmKh6Sb1IW9axlSo2tIl5wQwNhgfsnC6XQTok=)
2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: q/DDrGFL5S2NU9DAF/3ZYujxHcWmF0oksvSTie/kXHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D88
Validity
Not Before: Mar 29 05:53:51 2025 GMT
Not After : Apr 5 05:53:51 2025 GMT
Subject: CN=67e78aef-f426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:84:19:57:70:55:38:6f:1b:3d:42:3a:db:
69:bf:0b:47:4c:68:69:bf:ed:7f:4a:8f:97:5c:cd:
d9:11:93:c5:bc:4e:4c:a5:c1:6b:1d:b6:13:81:fd:
01:cb:aa:ff:96:6b:a9:26:60:ce:2b:a4:22:06:f6:
37:9b:9b:97:94:b8:40:4d:cd:07:13:42:e4:1c:37:
af:a3:9f:cf:5e:47:61:30:a5:18:11:50:5e:e5:ce:
84:a0:b8:b0:c6:d4:94:44:43:b5:b7:01:57:2f:2e:
79:46:ad:51:75:e3:f0:95:80:66:d4:3c:55:81:3a:
c1:fe:ce:a9:06:2e:ee:24:48:59:9f:73:00:78:b9:
ca:ad:3d:56:40:4f:c5:0e:b7:16:3d:73:29:5a:88:
53:98:9e:23:48:12:2b:29:5c:1c:e3:c3:43:3f:4e:
0c:18:06:34:e5:88:9e:5d:9e:24:0f:34:9a:64:c3:
cd:8f:a2:83:01:09:93:0f:56:52:40:d1:9c:45:1a:
af:20:ae:57:64:38:8e:43:c0:56:35:53:81:bd:dc:
26:5f:a7:d2:9b:d8:2d:fd:77:07:71:2b:85:43:ac:
2d:4c:22:a1:f8:11:e9:7a:4a:55:42:91:62:5d:ac:
8d:6f:9e:82:33:da:53:59:82:02:f3:8d:f1:84:ab:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B2:28:1A:E8:B3:96:01:5D:0F:DD:6D:91:11:BF:A0:21:15:84:B8
X509v3 Authority Key Identifier:
keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:82:6a:86:1c:c3:a9:2c:7e:31:92:28:0c:a0:ad:04:08:26:
97:72:ad:ed:56:b1:f2:f7:ca:f1:e3:60:9f:6b:d8:bc:b2:14:
8c:52:87:4c:10:1c:ba:3b:d3:43:9a:3f:66:b4:cc:6c:3c:94:
b3:2d:ae:cf:59:d1:a9:00:2b:e4:87:b8:70:bd:dd:cd:97:2c:
03:5f:f2:d6:3b:fd:99:1f:a6:92:56:f7:90:8e:c7:75:a4:15:
fd:05:b0:a1:d0:16:8c:07:ca:5b:e6:0c:f4:ff:24:22:d4:52:
7e:a0:f4:66:af:b6:da:06:2d:7f:ba:52:ce:ef:04:7e:11:c3:
15:82:ed:d5:09:48:76:d2:b8:6e:a4:96:5c:32:d0:3b:14:8c:
8a:b2:d8:93:58:51:00:0d:70:fc:ff:f4:f5:68:7f:0e:b7:49:
a7:f4:eb:bf:2f:3d:2d:91:70:3d:82:38:f3:48:02:18:f2:7c:
da:85:08:b2:50:8b:72:21:d5:7c:a3:e2:35:73:56:6f:2f:40:
c2:cf:67:a5:b8:db:ce:6b:b0:e6:fb:40:a0:e7:29:9c:32:c2:
e0:13:23:6d:8f:a1:a5:03:eb:ce:8c:82:96:13:61:06:d3:29:
63:a1:28:d4:d3:2f:82:e5:0f:b7:c1:b6:a3:b6:66:a0:7c:00:
f0:8d:68:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:58:44 2025 by rpki-client