Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json)
Hash identifier: lJ44iISUHh4DbWqB/sRp5SUrxVDT24XF+sf1G1Zn/JI=
Subject key identifier: 59:6C:05:E7:3E:E7:EE:AD:E9:5B:5C:FD:5D:CE:71:42:5A:01:AA:51
Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10
Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910
Certificate serial: 087A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
Manifest number: 0873
Signing time: Fri 28 Mar 2025 20:54:42 +0000
Manifest this update: Fri 28 Mar 2025 20:54:42 +0000
Manifest next update: Fri 04 Apr 2025 20:54:42 +0000
Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: q9KhcX+yzVWjsLs4pEBv6QF3WmWUag2iVrTN40Jgne8=)
2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: jrXgAGT3lqn2oPe4fiJJc8FiNv+5i0XvozNfLQNBQxY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2170 (0x87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B289C
Validity
Not Before: Mar 28 20:54:42 2025 GMT
Not After : Apr 4 20:54:42 2025 GMT
Subject: CN=67e70c92-da31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:3d:c3:e9:f7:62:97:b0:08:0e:ba:36:36:
42:be:cb:30:0b:a8:17:33:0c:23:a5:22:48:c9:e1:
5c:af:7d:1a:63:eb:cd:0a:8e:f3:82:82:03:a0:b6:
35:f5:d5:46:2b:f2:7a:50:3f:d5:27:e4:29:07:8e:
6e:0a:c4:8c:20:ac:f6:e3:7c:3e:bd:d4:93:9a:42:
aa:e7:d7:e8:e1:ae:b7:27:f7:c7:3a:67:1d:cb:37:
96:df:c6:56:ba:86:b0:4f:76:71:4c:c6:ff:f9:b0:
eb:15:fa:0e:17:fb:4c:30:35:02:96:98:20:98:ea:
fc:22:56:4c:8c:de:f3:b6:cb:f5:4a:13:44:1d:d5:
b4:a8:6f:ba:02:b1:00:7e:50:30:40:68:2a:7d:95:
06:67:46:ad:03:44:c8:d0:6e:e7:9a:82:16:e6:d6:
96:63:a5:26:80:ce:86:ff:50:35:e8:13:ce:d9:ab:
55:62:2a:5a:a0:aa:92:d1:64:92:c6:16:88:40:ca:
50:f6:7a:cd:d3:dc:a0:6b:8b:19:dd:1f:3d:87:b7:
fc:48:36:1f:23:47:ac:f5:38:82:f4:bf:c3:c6:de:
a9:8b:49:98:63:19:93:02:13:5e:bd:22:aa:b3:fd:
62:5f:5d:aa:fe:f0:eb:f0:b5:18:fb:08:2b:af:09:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6C:05:E7:3E:E7:EE:AD:E9:5B:5C:FD:5D:CE:71:42:5A:01:AA:51
X509v3 Authority Key Identifier:
keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:16:97:65:5b:aa:b0:6f:f0:f4:b4:47:19:fc:b6:1e:23:b0:
55:ff:6a:ce:98:47:19:3a:45:8d:6a:4e:72:27:59:b2:3a:66:
c9:ff:73:e0:2c:f2:82:03:ee:a1:8b:56:b6:45:bd:03:c9:9f:
5c:13:03:64:83:28:68:9d:e2:5f:27:0d:1e:f3:e1:db:ec:fd:
fa:50:d1:a9:75:60:85:05:03:ec:0f:28:91:a5:8b:19:0f:78:
fa:e1:e3:f9:9f:40:d1:cc:f8:39:a2:c8:c4:1f:81:e4:1e:7b:
03:77:d0:31:c3:44:1a:e6:4c:a6:e9:e1:2b:b2:43:e7:cd:50:
48:a6:06:dd:93:2b:08:c3:32:39:c7:66:88:bd:57:5a:3b:10:
7b:75:9b:ad:8f:51:75:37:a0:e1:8d:e2:35:95:05:62:37:4c:
da:f5:18:1d:a6:af:84:3e:e9:90:e3:65:25:af:ef:e0:d6:31:
62:3b:54:7a:83:9e:6d:9b:fb:01:87:e6:83:65:c4:1c:dc:b5:
af:72:ee:f9:8a:90:2f:d8:7a:fb:48:ec:54:47:a0:c4:e3:97:
cc:b0:50:b8:a6:41:25:cc:e5:2d:f2:9b:7e:34:99:d5:7f:00:
81:6f:02:17:4a:a7:c0:c9:8e:a9:29:f7:42:91:30:62:6e:d7:
df:1a:33:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:09:39 2025 by rpki-client