Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json)
Hash identifier: yx1HdltViWPYO1TZhpqh99dy/gAPg+qWFB1ERDbAAJs=
Subject key identifier: 0E:6B:77:D2:AB:08:82:5A:0C:3F:29:04:E6:36:DD:3F:ED:F7:C7:AD
Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19
Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919
Certificate serial: 06B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
Manifest number: 06B3
Signing time: Fri 28 Mar 2025 22:25:30 +0000
Manifest this update: Fri 28 Mar 2025 22:25:30 +0000
Manifest next update: Fri 04 Apr 2025 22:25:30 +0000
Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: Tb7ZnTQVFSimhLZ/GfGXIxjrrWAVDhzBrqdFY6eEfB0=)
2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: MAjBjHq25tUzReWQ1rF0NI56VYERQs/LZrZBQC23acU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1033
Validity
Not Before: Mar 28 22:25:30 2025 GMT
Not After : Apr 4 22:25:30 2025 GMT
Subject: CN=67e721da-6344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:7f:8a:81:21:52:6b:5b:cb:59:9f:4e:3e:
9a:26:bc:ca:25:88:0f:88:18:c5:e7:97:59:e9:3c:
e2:a8:78:b8:ab:da:9b:21:a0:1d:93:4b:8c:7f:17:
6c:4a:38:5d:0a:66:53:59:0c:da:e6:4c:4a:93:cb:
7c:b7:80:1f:bc:3d:c1:5e:af:bb:70:a4:9d:6a:0f:
6d:df:ea:6c:2b:90:80:2c:0e:ea:bb:c7:bd:b8:e7:
90:d8:25:d3:1a:b5:61:0e:a4:dd:73:6e:88:ae:fe:
83:5e:3c:f9:38:4d:d2:63:7b:e4:9f:fb:7f:ba:0d:
00:b1:06:70:14:a7:dc:75:58:43:a9:ca:8f:8f:3a:
04:68:b7:e8:84:74:ad:33:0a:a5:52:60:02:18:81:
6b:88:61:16:32:68:ee:d4:89:cc:18:c2:44:3d:3b:
c2:0e:c0:e6:6e:16:ab:18:cd:fe:9b:e9:41:5d:a3:
3e:41:c4:ab:65:b8:66:e8:96:7f:0f:c8:97:ab:c1:
d0:99:a8:d4:a8:b0:a6:bb:f2:97:97:8a:6e:ab:3b:
cf:a4:dd:80:cc:b9:b8:f2:07:a0:ae:fc:db:4d:58:
6e:c4:20:bd:3d:34:a5:34:80:0c:43:f2:b7:a3:4a:
50:c1:ab:12:79:53:39:15:4d:d2:ba:7c:4b:0b:6b:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:77:D2:AB:08:82:5A:0C:3F:29:04:E6:36:DD:3F:ED:F7:C7:AD
X509v3 Authority Key Identifier:
keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:82:89:b5:bc:18:b8:fd:5a:f1:aa:ba:04:81:99:e8:36:cd:
59:50:a5:de:07:cb:fe:a9:04:42:03:ae:64:3c:0e:81:30:be:
c2:17:fc:e8:f4:3e:8d:de:31:c7:71:c0:38:d9:fe:cc:2c:a3:
3b:b9:f7:21:e3:ee:83:19:c2:51:85:4c:27:07:a7:e3:aa:f4:
d3:be:3c:97:c3:7c:05:1f:65:a7:28:39:df:46:01:ff:c3:f0:
65:d8:83:53:03:7a:c2:db:d6:49:43:9e:05:b3:00:de:59:f6:
1e:89:86:29:15:9f:08:5b:45:2a:36:75:22:f9:22:4e:54:42:
f0:08:6d:c3:b6:c4:3b:be:90:a5:18:fd:e3:3f:37:b0:78:b2:
2f:be:19:68:3e:8a:8f:cd:45:99:5d:73:1f:3d:1c:fb:e8:06:
9e:d3:1a:2c:bc:11:6f:4d:ac:d2:53:bc:51:7d:cd:2b:08:14:
c6:3b:36:51:28:1c:88:27:54:c3:ae:9c:13:aa:70:ff:68:92:
c2:29:f6:5d:37:68:35:5b:dc:f8:20:e9:cb:d7:01:e9:35:50:
3b:32:e5:b7:b4:55:30:2e:5c:61:84:4a:bb:a9:55:c0:ea:a3:
62:db:cc:c6:34:33:bb:c8:2b:72:fc:a4:2f:a5:dc:5f:d5:04:
aa:10:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:10:09 2025 by rpki-client