Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
File: -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json)
Hash identifier: kt5GYQLbC9ACfGuEcQVzNl2TmOE6dpdCoagyCeNA/To=
Subject key identifier: AB:95:CC:2A:F5:75:99:8C:B5:DC:D4:0C:CE:8A:3A:75:A1:05:F7:BC
Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54
Certificate issuer: /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
Manifest number: 56
Signing time: Sat 29 Mar 2025 06:29:55 +0000
Manifest this update: Sat 29 Mar 2025 06:29:54 +0000
Manifest next update: Sat 05 Apr 2025 06:29:54 +0000
Files and hashes: 1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: GbjnR2nlNBeOaq/OQdMs0uiPtz3qqQ8jgyBex6BANtA=)
2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: PO3QH99TaEGXLczk5CFqhAB0Ach8mXnS87Xb+Nz/Uzg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7709
Validity
Not Before: Mar 29 06:29:54 2025 GMT
Not After : Apr 5 06:29:54 2025 GMT
Subject: CN=67e79362-3854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:bb:18:9f:ef:99:67:3c:9a:65:ff:b9:11:
b6:97:ab:55:3b:1a:55:5f:93:64:5e:7d:c8:ec:74:
f7:27:a5:15:cd:7e:d6:c7:ae:9b:5c:f5:8a:bf:24:
0f:e0:58:07:21:58:15:05:f3:22:e5:cc:5d:e4:12:
0b:1e:c1:3a:72:f9:3d:97:18:f9:97:ca:cf:f7:30:
e3:43:02:ad:d2:2c:75:b4:91:0f:40:5e:c3:72:ab:
13:e5:0e:20:99:a3:14:b2:f0:19:30:7e:45:28:6a:
bd:b4:74:0a:0f:a8:38:52:25:1a:37:d6:fb:35:93:
50:7b:02:8b:da:f3:01:7e:5d:b2:84:5a:0f:51:05:
ef:a5:05:c1:69:3d:26:48:ec:5b:52:54:92:85:df:
44:16:18:0a:6d:6f:88:71:f4:4c:a7:6d:07:7d:72:
a2:6a:36:c7:51:f2:06:d1:f5:09:6f:9b:76:b8:f8:
22:12:fa:5c:ed:91:fa:2a:5d:bd:e4:20:d6:f9:60:
ee:c3:8e:ed:84:2a:d0:42:32:fe:59:6a:23:f3:dc:
33:20:16:ef:46:88:e5:86:b1:d8:3b:78:36:94:5b:
34:67:71:87:79:f3:42:59:1e:06:ec:4a:bc:f9:2b:
50:b8:13:89:37:57:92:e8:a1:aa:7e:f2:77:2e:f0:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:95:CC:2A:F5:75:99:8C:B5:DC:D4:0C:CE:8A:3A:75:A1:05:F7:BC
X509v3 Authority Key Identifier:
keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ad:88:96:51:0e:89:c4:bc:c3:e2:e2:22:8b:41:e8:8b:27:
a5:5b:ec:62:37:61:a3:67:9d:be:b8:14:7f:15:1f:63:20:03:
51:ba:85:5a:14:c4:15:e9:83:06:7f:22:50:ae:6f:5d:b2:73:
49:8b:a3:c8:c1:4e:fe:9c:4b:3b:0d:8e:21:69:cf:32:61:f0:
0c:93:c3:f8:c2:91:91:48:9d:f4:51:0b:99:e1:7e:67:64:89:
37:44:b7:7c:07:28:da:e0:51:6f:d7:27:15:a8:e7:57:ea:20:
b4:25:30:ad:ea:7b:40:1d:f7:67:eb:88:fc:31:73:8d:3e:8e:
99:b4:57:5c:2b:91:73:7e:95:a1:f0:fc:8b:37:e4:d7:e7:f0:
ca:11:ae:b3:8a:81:eb:50:07:cb:15:95:2a:50:7e:81:f5:23:
58:fc:f3:44:27:46:40:73:3b:a7:c8:31:bf:5c:59:b5:06:84:
80:d8:80:3b:49:d1:d7:19:79:32:1a:78:1f:30:7c:80:37:71:
93:be:92:fa:1b:1f:01:75:0b:37:8c:43:24:39:d3:a9:94:86:
ac:88:27:58:5a:11:42:e3:0e:69:17:c6:84:ea:21:b3:c6:f1:
7b:f4:78:28:bd:83:63:cb:75:d5:6c:8d:2d:d8:cf:bb:0d:01:
7e:b3:35:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:46:49 2025 by rpki-client