Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier: ATa9lc9H9w3OwXX2yYPPbjY6BFAVExEpzHpVPyQuwbs=
Subject key identifier: FF:14:B9:02:07:FA:AE:4C:FD:0B:91:F2:F8:6C:DD:27:0D:6F:53:A9
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial: 0A16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number: 0A0D
Signing time: Fri 28 Mar 2025 20:04:14 +0000
Manifest this update: Fri 28 Mar 2025 20:04:14 +0000
Manifest next update: Fri 04 Apr 2025 20:04:14 +0000
Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: k7VyZ4W87WdpZmhL+1VyzzWEtQCeG+9BXyqAv+dtTQA=)
2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: EkYTFmKjanasajMVGUVTZ322q1F+k60qJOC2SSq8q9Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2582 (0xa16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2A6F
Validity
Not Before: Mar 28 20:04:14 2025 GMT
Not After : Apr 4 20:04:14 2025 GMT
Subject: CN=67e700be-8902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:ca:5b:4c:ae:fe:61:b6:fb:96:77:1d:6b:
a7:2a:ce:c5:16:42:27:ff:96:c9:19:12:da:03:a2:
72:0e:20:38:1b:0e:f2:c0:39:86:f3:47:3f:31:d8:
9e:16:62:a5:7e:5c:1a:3f:b5:5e:d2:8b:0b:9d:2a:
56:f9:d6:a3:04:7d:fc:a3:00:4d:5c:b4:e7:42:cc:
e1:14:22:7e:78:ed:2f:b4:08:3a:a9:72:c7:84:f1:
9f:e5:de:03:f7:a8:6a:23:cc:c9:e5:db:c3:d9:7d:
56:bc:f0:c3:2d:d5:16:a9:b9:4d:68:a9:d6:ff:ed:
eb:bc:be:4c:e4:8c:5f:dc:52:61:37:00:80:d3:b9:
b2:62:17:c9:b8:33:6c:95:d7:ad:9c:df:51:2d:6f:
4e:7b:71:82:10:c5:3e:7e:13:ef:86:80:c6:aa:5e:
e5:2d:2e:91:03:26:79:63:9f:97:42:a3:4f:ae:66:
9e:6b:35:0a:95:4f:98:32:b6:ff:56:b9:e9:14:78:
56:76:f2:85:14:2b:ae:aa:93:91:fe:88:23:e3:4a:
cc:7b:f6:63:56:d0:0f:2a:d6:b6:9d:9c:58:53:c8:
3f:8c:d0:0e:a1:ff:c2:93:cf:66:76:2d:4d:e9:0f:
f4:39:e0:c8:b4:e7:09:52:e7:56:a2:07:9e:d9:3a:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:B9:02:07:FA:AE:4C:FD:0B:91:F2:F8:6C:DD:27:0D:6F:53:A9
X509v3 Authority Key Identifier:
keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e9:c5:a5:33:6d:f9:81:05:49:4e:fb:76:5f:3d:b0:44:83:
d7:8f:89:c8:00:d3:5c:65:99:5a:19:7d:ea:f9:36:52:5d:ff:
0b:27:b4:ba:d6:21:8b:5f:35:ad:19:31:d9:e0:e1:d5:29:46:
bb:75:58:15:c7:60:5a:62:d3:be:0e:32:bd:b5:38:94:5a:3c:
17:5b:05:86:e0:e5:5b:07:e6:52:c0:f4:8b:56:6c:28:37:14:
d3:80:a1:0c:c2:98:27:c0:96:84:ec:a4:bd:9d:36:f6:c2:6b:
0a:73:91:d0:f1:8b:b9:2b:c3:d0:ed:2d:00:06:61:87:46:6e:
b7:fc:0a:fd:8a:7e:4c:6b:dd:b6:1c:5a:d9:bf:d5:6f:8d:a2:
38:55:a7:eb:c0:e0:fa:4e:b5:8a:1d:f0:a3:0f:7e:9a:55:25:
26:4b:16:3d:45:1c:36:50:83:d5:15:a8:1c:9b:f7:e4:3f:03:
07:0a:08:9b:29:7f:c0:c1:d4:c2:5b:11:39:89:c5:27:80:79:
df:73:d1:d9:31:87:66:28:21:ae:ee:b3:eb:0b:30:c7:e4:91:
2f:09:ad:6f:9b:4a:2c:1e:0d:24:8f:6c:f1:61:fd:f0:d7:f2:
a5:e2:39:c9:e4:11:86:8b:e4:9f:44:e9:77:ed:6e:5e:f5:7f:
6c:e5:63:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:22 2025 by rpki-client