Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json)
Hash identifier: pADI3CPAv/Lmydb2fBPZ1g9n1qYJjYMRIfXwhJKplFQ=
Subject key identifier: 13:E4:3E:22:1C:1A:90:9A:3D:D7:C6:6F:FB:BA:12:3F:67:29:3D:9E
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
Manifest number: 74
Signing time: Sat 29 Mar 2025 06:07:19 +0000
Manifest this update: Sat 29 Mar 2025 06:07:18 +0000
Manifest next update: Sat 05 Apr 2025 06:07:18 +0000
Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: J151L35jdNxgOt6LNmM7tvh/1wUoehtn6nF4I4Kanns=)
2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: AOHVL3D6FsryT04X8+k30AkGqkWA0TurnsDlj6WqM9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B
Validity
Not Before: Mar 29 06:07:18 2025 GMT
Not After : Apr 5 06:07:18 2025 GMT
Subject: CN=67e78e17-d2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:ce:3e:aa:a7:2a:62:79:3e:e9:74:31:25:
53:f6:67:b7:41:e6:be:97:45:d7:d6:06:2f:6b:c2:
7d:cd:2f:a7:a2:45:5d:e9:13:79:2a:c6:92:e3:f0:
2f:26:73:6a:fb:ad:4f:98:9b:c4:9e:74:df:7e:d6:
a3:d6:ac:60:50:a2:34:35:2d:02:10:c5:9c:4f:ee:
a2:77:a3:04:1d:c3:f9:2e:24:02:e6:b1:88:4e:3b:
14:50:c6:68:17:43:d3:45:20:29:2a:6f:ee:7a:1a:
75:e0:1f:ef:2b:7d:e0:52:30:1e:03:29:fb:24:92:
1a:29:9f:9f:07:23:d3:f1:be:04:1d:f1:24:c0:b7:
6b:fb:47:59:bf:c3:ff:ec:37:af:11:e9:94:eb:fc:
a0:6a:b2:4e:a6:73:5d:ed:65:d0:07:4f:1b:fe:e4:
e3:cc:c5:fd:70:28:1a:0d:7b:ea:25:66:34:38:40:
78:63:0b:f7:3f:b7:33:cc:b1:72:44:bf:a8:4b:01:
14:8c:b2:56:8b:1c:50:94:99:60:9a:66:93:ef:96:
32:75:45:03:0f:95:4e:6c:cf:86:f4:7d:fd:b8:ac:
e9:1d:d8:e5:e6:31:56:f2:ed:bf:03:76:76:6a:d2:
60:61:88:d1:2b:5e:33:75:81:31:71:86:9b:87:eb:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E4:3E:22:1C:1A:90:9A:3D:D7:C6:6F:FB:BA:12:3F:67:29:3D:9E
X509v3 Authority Key Identifier:
keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:23:fc:a2:ab:45:5a:16:ea:7d:df:19:d5:5b:5f:ae:4f:c6:
7a:a2:e6:f0:7f:1e:bc:66:1d:be:4f:87:7b:ac:fc:f6:e1:12:
da:d6:50:13:e2:29:4e:91:a3:46:10:ab:06:27:85:f6:b8:6b:
9d:8d:a4:36:25:42:8b:9f:74:83:1f:70:d3:d2:0d:b2:d0:73:
ef:46:04:6f:2a:89:04:f4:cb:e3:1d:14:af:f0:4c:5d:59:a8:
2f:e1:d8:17:70:c7:76:40:ed:2a:80:f8:80:0b:b9:67:7b:76:
4d:68:7c:cf:67:ff:b7:da:65:31:6d:43:93:d4:4d:8d:50:79:
f9:44:72:ab:18:1a:e7:cb:99:46:1b:f7:21:cf:3d:2e:11:36:
41:02:10:85:17:79:ab:e6:4c:c4:42:d8:6a:31:4c:9f:f5:98:
66:58:20:e2:f7:46:47:74:55:82:43:fd:46:a9:79:e9:0f:54:
87:32:43:76:2f:a2:1a:fc:15:68:9d:fa:03:87:eb:ff:aa:d0:
1d:94:0a:f2:d3:60:d2:88:b4:9d:ed:f5:1b:48:b8:de:3e:37:
3a:38:1d:89:50:3c:a2:15:fc:4b:54:9d:01:d0:75:3d:f7:01:
9a:b1:e0:89:78:b2:ac:a7:fb:a3:db:c9:48:c8:81:2f:f5:92:
e9:bf:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:47:33 2025 by rpki-client