Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
File: _SqdXvq5ERsKWjAT80wsva_QH8I.mft (raw, json)
Hash identifier: NkhO3nrAZE9IhTCOTj7znkMikJh38ghgYgyV/GSACug=
Subject key identifier: 17:C9:10:81:9F:63:C5:D9:9B:AB:B1:FE:4A:05:B6:0B:6F:E2:1B:B7
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Certificate issuer: /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial: 0702
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
Manifest number: 06FD
Signing time: Fri 28 Mar 2025 22:12:46 +0000
Manifest this update: Fri 28 Mar 2025 22:12:45 +0000
Manifest next update: Fri 04 Apr 2025 22:12:45 +0000
Files and hashes: 1: _SqdXvq5ERsKWjAT80wsva_QH8I.crl (hash: JGqPYM+UXLHM6mlRkNGGNaosh4XSEgW92Jppi9Yf5TU=)
2: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (hash: OHqpc630iPDrvxa3JYL+djk/kcEwI5eOHtscWctQIpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B189B
Validity
Not Before: Mar 28 22:12:45 2025 GMT
Not After : Apr 4 22:12:45 2025 GMT
Subject: CN=67e71ede-3d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:92:ee:a5:48:47:b8:7f:b5:e2:38:2f:32:
c7:f1:aa:6a:a1:bd:0d:b1:a6:f3:75:64:48:a2:74:
bc:75:8f:3b:70:64:e1:01:e7:4a:43:2e:1b:d9:ef:
63:2a:ad:72:db:b8:49:5a:49:77:6e:09:da:a8:e5:
f2:24:f5:33:7c:0c:e9:58:2a:e8:08:71:a9:e1:66:
72:d7:cb:d8:0a:11:be:df:8d:18:ec:49:2d:36:ae:
90:f2:8e:4d:13:2c:d3:91:e2:0f:38:97:79:79:42:
b0:74:c2:f3:4f:d3:6d:78:a7:a0:1b:1e:2c:a2:a5:
13:02:55:0a:73:9b:de:fa:c4:ec:01:09:db:60:1f:
21:77:fd:6c:04:c4:4d:d6:e3:24:39:80:e8:d6:9b:
c4:e3:b5:2a:5c:19:3b:6c:4f:ad:85:11:e0:3c:e1:
81:8a:21:45:16:a0:c2:3e:cb:18:5f:21:f8:26:31:
d4:d8:b0:03:ad:52:4f:2b:45:9b:06:62:ec:d6:8f:
11:40:48:35:cb:f2:97:ba:8e:6e:38:41:c5:78:6f:
8d:62:b0:3c:27:d6:4f:51:60:40:a8:d2:c8:8c:ce:
c7:a7:8c:32:d0:ea:2e:1d:d1:2c:40:29:40:a9:54:
3c:48:47:66:48:b6:9e:38:bf:4a:15:84:e9:22:85:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:10:81:9F:63:C5:D9:9B:AB:B1:FE:4A:05:B6:0B:6F:E2:1B:B7
X509v3 Authority Key Identifier:
keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:21:62:9f:62:a8:6c:b2:c6:7b:61:91:cc:af:f2:04:f3:77:
37:c6:c9:11:f7:40:a0:bf:d4:1c:77:70:f6:71:32:73:9b:1b:
97:8a:76:91:02:c1:df:09:f0:a4:70:b4:e1:9e:c9:c1:e8:7e:
f0:c0:bd:08:2b:5a:b2:3b:28:14:70:e2:c7:ef:5a:a3:41:30:
3a:7d:f1:5c:97:f7:c4:91:d6:33:5b:ff:ff:70:45:5a:da:e4:
42:a2:26:4e:f1:f1:fc:61:87:30:c6:23:b1:bc:2d:5f:6a:36:
52:d8:e7:fd:c2:70:a3:27:5c:50:9c:55:78:6e:25:de:a1:28:
c0:07:3e:17:a2:90:72:37:2f:49:39:f4:eb:ec:56:56:da:47:
9f:cc:b7:4e:89:a8:8c:18:d9:eb:54:0b:4f:cf:d2:0d:0e:32:
55:67:6c:5a:10:86:69:1c:67:fd:ba:e6:d5:44:dd:83:a9:e0:
a0:c6:c4:3a:93:8d:47:03:2a:3f:9d:e4:1e:9b:ff:dd:da:94:
d6:48:7e:c1:ba:ef:dd:a7:49:f5:e5:61:b9:1f:e3:c7:ec:c1:
ad:d3:fa:8f:ad:d0:66:8f:37:18:d6:2a:56:66:2a:fb:2b:dd:
33:59:2e:e6:1c:fa:e9:19:ba:b9:39:c5:5f:67:43:b1:57:80:
45:8a:2b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:15:09 2025 by rpki-client