Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json)
Hash identifier: 3naTvT5w9LiGPTWfgs2xPNJh+z4wilK8tO/gzzwpArI=
Subject key identifier: E4:31:6C:9C:48:6E:ED:D4:03:37:A4:CF:5E:98:DB:2D:CC:3F:A1:77
Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9
Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9
Certificate serial: 096E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
Manifest number: 0965
Signing time: Fri 28 Mar 2025 19:51:26 +0000
Manifest this update: Fri 28 Mar 2025 19:51:25 +0000
Manifest next update: Fri 04 Apr 2025 19:51:25 +0000
Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: Hq4XWvYH7qSpj6oo+ntx5/kFBxuRGIipH6WqL+UQcWc=)
2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: JcavRD/UkGMKefo40xrhCPb2PgEwMsvZQrFanuv4C9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414 (0x96e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AD4
Validity
Not Before: Mar 28 19:51:25 2025 GMT
Not After : Apr 4 19:51:25 2025 GMT
Subject: CN=67e6fdbe-5437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:39:27:6f:87:3f:d9:53:09:b1:bd:df:eb:
03:4e:c0:18:63:81:11:aa:43:87:c0:4f:8e:97:43:
8b:e5:58:8c:86:6a:d2:89:0d:83:eb:03:04:66:9e:
01:4d:30:ce:64:7f:8f:28:99:fd:ee:cd:90:00:da:
0d:b5:1b:0b:e2:46:b3:ab:88:5d:52:f8:c6:fe:98:
e4:e6:ee:20:15:14:78:61:a9:da:15:08:19:4e:33:
f1:84:6e:39:ea:0c:f9:9d:5f:1e:da:26:30:76:a7:
8b:41:6c:9d:70:ac:b2:84:a3:57:25:1b:c0:c9:a2:
ce:9c:c0:4a:32:5a:04:18:d2:0f:21:b5:3e:82:4f:
4d:c5:9e:56:9e:fe:ae:47:88:de:59:c1:31:28:98:
49:a6:d1:f7:22:9a:cb:fd:0a:c7:68:06:6c:aa:91:
08:6f:c2:79:b1:3c:44:e9:e9:cb:93:76:8e:6d:11:
64:1b:6c:7f:67:8b:34:27:29:63:89:d8:2b:90:db:
4e:59:d4:94:df:cc:38:72:44:74:2f:e3:14:79:74:
f0:17:49:5f:a2:97:0a:7d:e0:76:69:95:f0:df:cc:
99:a3:bf:6a:94:b3:5b:08:e6:e3:3f:9d:ed:1d:0b:
d9:07:b2:28:28:fb:71:f0:76:b5:80:83:a4:1c:04:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:6C:9C:48:6E:ED:D4:03:37:A4:CF:5E:98:DB:2D:CC:3F:A1:77
X509v3 Authority Key Identifier:
keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:90:ba:cd:d5:06:e2:11:e5:2a:9d:a3:7b:46:9d:98:07:4b:
1f:2d:a2:a2:f4:4c:db:28:8e:39:42:90:e8:74:94:00:fb:c7:
7d:21:31:cb:99:93:59:7e:90:55:fc:67:48:0f:a8:0e:47:a2:
15:3f:85:1f:44:a7:43:c9:b2:d5:70:59:b3:15:ac:48:cf:52:
17:d0:5e:6d:91:9f:b1:bf:ba:41:d3:90:cd:cc:ab:b4:4c:0e:
f5:53:67:8d:df:0c:f3:ab:3b:a5:0c:fb:90:df:8f:fe:66:c2:
28:5a:95:66:81:92:d6:18:e7:4d:48:57:35:a0:99:30:6c:b5:
23:d4:ab:52:34:8c:0c:3c:c3:0a:94:91:2f:d0:d4:80:95:ef:
55:af:63:84:a9:12:34:42:13:b7:15:b6:be:24:95:2b:02:c8:
e7:08:18:87:80:ca:08:09:9b:b2:75:09:93:41:7e:2d:c2:f3:
ff:b8:e8:0f:b3:21:95:70:fa:d1:f1:69:3f:c9:7f:8c:21:41:
1f:71:c1:69:72:9a:72:c7:fe:6a:a2:52:55:de:70:75:9d:8d:
e3:98:7a:30:60:7a:1b:fa:8b:9d:34:8b:59:a0:39:9f:58:67:
d3:ff:9b:b2:dd:a8:89:b6:6c:a0:18:6a:4e:6c:ec:47:cb:87:
59:49:35:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:31:42 2025 by rpki-client