Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier: 7nyp63Apk72oKfPubuqOMfzwhPyOD0rWv+FHuYipeWY=
Subject key identifier: F8:DE:E5:7A:48:FC:53:BB:AE:FA:8C:61:04:40:06:98:28:40:A0:F4
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial: 1319
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number: 1303
Signing time: Fri 28 Mar 2025 17:10:21 +0000
Manifest this update: Fri 28 Mar 2025 17:10:21 +0000
Manifest next update: Fri 04 Apr 2025 17:10:20 +0000
Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: H9Sy+VGPEfXzUpxxThQmefSFilCmAgMnavL+jnbQgkU=)
2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=)
3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: vee2Trog0A8Sa455ioxH/3gGtre4yzjbz6bH8ySXmH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4889 (0x1319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8
Validity
Not Before: Mar 28 17:10:21 2025 GMT
Not After : Apr 4 17:10:20 2025 GMT
Subject: CN=67e6d7fd-04d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:62:48:e3:00:c8:20:29:30:b8:9c:81:8c:a4:
56:53:bb:64:8a:17:c1:a3:d0:42:53:a9:13:66:56:
f6:02:22:f6:a1:78:7c:88:7b:4f:f4:ed:0a:2b:76:
f2:3b:91:d3:38:17:f1:0f:a4:43:e5:8f:83:05:5f:
68:23:b3:4a:f9:d8:93:8f:33:9e:99:8a:22:5e:f1:
79:73:f2:ba:20:c9:34:df:fe:96:f8:78:05:c3:71:
97:2b:e7:c0:bd:f2:ee:f7:d0:85:09:2b:3d:86:8a:
88:4d:74:58:39:09:83:83:88:aa:6e:3c:1b:90:e2:
18:55:76:ca:d3:52:e7:1b:e1:06:4b:38:ea:40:4b:
33:f5:64:6b:84:d0:4b:5e:ab:ab:c8:4f:eb:f5:57:
eb:97:aa:68:f9:2c:c4:0d:ec:53:22:aa:ac:9c:fa:
7b:59:c4:43:68:5f:b7:bf:70:58:6c:35:ab:bc:54:
70:0d:25:70:df:ac:4e:19:47:fd:f4:56:ab:02:01:
85:48:09:b5:da:6b:93:22:a4:0b:b9:82:95:f3:ff:
82:a1:de:0b:f3:f9:b9:bf:1c:7b:6c:44:6f:e2:5f:
3f:c0:2e:dc:5d:59:6f:f1:56:2f:fa:6f:b2:ea:cc:
56:07:35:13:96:ea:c5:55:28:3d:02:bc:20:69:17:
30:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DE:E5:7A:48:FC:53:BB:AE:FA:8C:61:04:40:06:98:28:40:A0:F4
X509v3 Authority Key Identifier:
keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:fc:80:8d:c6:2d:69:33:e5:2d:ab:11:01:96:bb:2a:ac:f7:
fd:41:72:c9:6f:a5:de:22:2a:d1:85:15:e1:f6:29:45:1c:99:
42:25:d6:2a:ff:59:ce:08:52:b8:b2:54:72:13:72:30:b7:60:
a2:1f:a9:ef:28:33:ca:d7:61:1e:bb:fe:9d:db:6c:73:f7:f3:
1d:3f:17:0a:3e:3a:55:c1:c5:95:24:d8:6c:08:a6:d8:77:f3:
cd:2b:94:22:76:ff:59:74:73:15:53:95:55:cc:15:74:97:71:
88:4b:04:07:a4:2c:5b:8e:cf:43:9a:5a:c5:80:7e:cf:12:dd:
18:4c:d3:ab:e8:31:3e:b1:20:69:62:01:12:a2:e4:d3:c2:53:
23:8c:a4:46:72:a3:33:ee:47:20:51:eb:65:b7:4e:d2:df:04:
9d:98:40:81:90:f5:d6:a5:26:b9:a4:ab:46:57:7d:9e:c8:70:
2d:18:35:0d:ff:7f:37:5f:ad:09:b7:74:b1:aa:c2:67:de:2e:
85:5c:1c:d5:e5:2f:96:3c:00:3a:31:4f:68:b8:62:7a:de:d9:
43:d7:6d:d0:19:3c:fa:e5:1d:5b:95:12:1c:e1:3c:42:aa:5b:
e1:01:53:39:e5:ce:65:10:5c:6a:44:b1:03:15:b7:21:8b:91:
b5:0c:56:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:29:43 2025 by rpki-client