Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
File: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft (raw, json)
Hash identifier: g2VsBFdkUt9LeYzmovOVJETCyTA3fIRlGb9vle0r3pQ=
Subject key identifier: 09:A8:42:92:D6:87:17:8F:FA:60:42:E7:E9:E1:94:14:D8:A5:58:AB
Authority key identifier: AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
Certificate issuer: /CN=A91B5BD4/serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
Manifest number: 01B6
Signing time: Sat 29 Mar 2025 02:39:42 +0000
Manifest this update: Sat 29 Mar 2025 02:39:41 +0000
Manifest next update: Sat 05 Apr 2025 02:39:41 +0000
Files and hashes: 1: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl (hash: FGhZR/K3O53vyx4uoJtt3wKyr/fU7TOa5Hhm96htXGg=)
2: C248DFA26DBB11EDB3635D28C4F9AE02.roa (hash: a52+Pk1FkwC/G3hPUY7oyb3u48mgwz6grHdpG9+HrUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5BD4
Validity
Not Before: Mar 29 02:39:41 2025 GMT
Not After : Apr 5 02:39:41 2025 GMT
Subject: CN=67e75d6d-5188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:5b:1c:d0:1a:ec:2f:02:88:fa:2e:84:da:
0b:ea:cf:bb:f6:16:7c:72:a1:3d:43:f6:74:b5:13:
f8:95:24:20:dc:a4:a9:b1:42:f7:32:0e:7a:e8:4d:
7b:bb:bc:0a:f5:00:96:bd:c7:92:67:b0:24:75:f8:
25:c0:07:99:f3:c7:3e:f3:7d:24:80:7b:03:a1:91:
3d:5e:35:13:13:f8:65:7d:c9:ac:01:8b:7d:f2:ee:
d7:71:de:47:ea:85:bc:76:7d:b1:5a:10:e9:58:81:
b2:b4:92:a1:9e:0f:a9:b2:b8:95:65:52:76:c8:46:
19:f6:cf:83:ab:24:ad:f3:7e:f6:28:54:a5:1f:fe:
3d:05:db:c7:b6:79:38:85:86:3d:a5:a2:7f:5d:25:
20:6a:d8:47:71:95:1f:8f:ee:ed:cb:95:43:0f:78:
61:78:c8:f9:1f:cf:1f:39:07:c2:f1:d0:cd:61:32:
03:b8:cf:e4:18:37:47:5c:9f:1e:04:d8:44:fa:b2:
77:d8:8f:96:8f:15:ab:8e:5a:00:b2:6e:64:a9:70:
b2:d3:31:c5:be:d9:9d:6e:bc:8c:16:11:4d:30:cb:
87:95:4e:09:41:0e:9d:69:f4:11:54:e9:90:ed:83:
7e:08:1d:b8:a6:52:84:23:59:c6:3b:b0:88:7d:86:
ae:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A8:42:92:D6:87:17:8F:FA:60:42:E7:E9:E1:94:14:D8:A5:58:AB
X509v3 Authority Key Identifier:
keyid:AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5b:83:e1:55:5f:5d:fe:9a:7e:c7:ad:10:ba:26:6b:2f:cf:
e2:61:66:23:f1:14:85:e9:f5:79:b9:42:c0:d6:e8:66:4f:9b:
0b:d2:97:3a:cc:e9:e1:3f:fc:54:6e:a9:f3:56:d0:ab:e5:3f:
1e:ef:1f:73:f0:d2:8f:38:f6:ae:93:80:e7:70:a4:0b:98:0b:
66:d6:f9:f3:35:12:24:0b:c3:38:6f:5e:bd:4b:3d:20:d3:05:
8c:4e:12:06:6b:db:db:5d:e3:3e:21:e9:b0:8e:31:b6:40:70:
4a:91:09:18:11:82:0a:d6:e4:c7:8a:4f:b2:e3:16:66:7a:bf:
53:6b:07:22:b5:ca:6b:35:83:ba:07:62:7e:44:bb:65:14:8d:
8a:94:34:9e:23:b7:39:72:d7:16:d0:5b:12:02:d8:32:92:32:
f5:a5:c1:dc:90:00:be:ef:e1:f4:e5:33:03:f5:e0:21:87:32:
d3:1f:0f:c1:33:05:69:14:8d:d4:b0:dd:09:54:89:a4:0a:b0:
c9:3a:f2:79:92:80:29:f1:ac:38:7a:0f:f8:77:0f:31:84:89:
b3:7a:8e:eb:f9:43:2f:c9:53:a7:fd:dd:cb:eb:c7:91:e4:1a:
4d:49:f5:2a:3b:18:fa:ae:86:0e:94:a4:e7:d2:ca:da:bf:04:
82:26:fd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:38 2025 by rpki-client