Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json)
Hash identifier: qMrjRBArKn+tI4Fae8sX/3ygSruZjXAnfqci+AoaPrc=
Subject key identifier: C2:F6:FB:E8:62:22:0A:02:0D:77:41:DD:9E:99:E3:70:F6:1B:6B:F7
Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
Manifest number: 0131
Signing time: Sat 29 Mar 2025 04:02:05 +0000
Manifest this update: Sat 29 Mar 2025 04:02:05 +0000
Manifest next update: Sat 05 Apr 2025 04:02:05 +0000
Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: efzzwuGXC+YdP7hKLaBAcTwWe/vDHGJQanTOfUYAxHg=)
2: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: fNs1z1deex6fcIdqMxez0n/drhicpYWMQnLuUAo17fo=)
3: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: ygqqEQTyg2IH19vlQAL4kX0HHDThJX4eE1C7WPj4wYg=)
4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: xRbmb+/1S1f8++5LVT2TgnO4g2wWlkEYjHuBK2BLWRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8D33
Validity
Not Before: Mar 29 04:02:05 2025 GMT
Not After : Apr 5 04:02:05 2025 GMT
Subject: CN=67e770bd-888c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:86:1f:89:87:4d:b6:57:de:3c:24:f8:89:8d:
d1:a1:0a:32:26:2c:b4:3d:02:c8:9a:16:5b:b9:d6:
fe:16:29:dd:d1:07:d3:7c:26:df:0b:74:ba:8f:f7:
7a:1f:e9:d4:3c:78:cb:fd:3c:97:64:90:91:5f:f6:
66:39:94:79:0b:dc:02:80:28:74:e3:ec:b3:55:58:
c7:f1:0d:90:fd:d1:de:21:ee:0b:37:7c:eb:e4:1e:
0b:3a:bb:6b:85:ff:e0:b0:ab:92:57:ad:6f:e4:7b:
32:b0:26:eb:f5:58:bf:34:8c:ef:29:32:84:22:aa:
ff:bb:30:21:af:51:06:34:54:59:cd:35:53:0a:06:
7e:0f:ae:39:88:bf:f9:51:a0:ae:d3:3c:ee:d2:02:
e9:38:03:87:14:0a:c1:60:b1:64:e7:66:d1:d1:d6:
32:5e:df:bb:63:c7:6f:b3:5e:cd:f9:9e:2a:f8:a3:
f5:99:07:70:ce:15:05:a3:ac:65:dd:c8:87:9d:0b:
bb:4e:cd:e8:af:a7:0a:96:71:13:71:0b:85:80:75:
6a:6a:71:6f:78:45:89:82:60:af:b9:85:d6:aa:c1:
e2:22:dc:0e:a1:e0:38:f5:85:6c:36:be:ab:30:bf:
21:1e:93:f6:9e:4b:eb:56:74:c3:23:8b:de:14:fa:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:FB:E8:62:22:0A:02:0D:77:41:DD:9E:99:E3:70:F6:1B:6B:F7
X509v3 Authority Key Identifier:
keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:ae:57:81:d5:b9:1d:80:9b:11:1f:d1:c1:d1:fa:32:14:f1:
d6:28:24:2a:b4:1f:76:d6:ab:58:9a:21:38:b2:25:e1:e6:b2:
3e:29:98:47:a2:11:25:7d:37:34:21:05:61:69:0c:e5:98:0c:
b3:53:0c:67:bc:b8:65:5c:7f:ca:06:e9:e9:b2:4a:a6:fe:2b:
6a:42:0a:fb:03:47:5b:8b:40:06:cb:7a:47:b1:78:0f:13:f6:
61:3c:df:c0:f3:4a:df:ad:bf:ed:f4:0d:8a:e7:04:04:f1:e9:
da:52:58:96:e9:f0:42:89:c8:e0:b5:d3:5b:ef:88:12:4c:66:
14:c7:c3:7e:e0:42:fd:e0:68:04:a7:39:ea:66:68:f0:9d:1a:
8e:eb:15:fe:96:87:da:ea:3c:d4:5e:a3:d4:40:d7:ec:e3:72:
11:4d:e6:22:d7:43:5f:a7:6a:99:79:f8:c1:de:04:64:8e:71:
8e:d5:07:d7:30:a6:d4:da:57:21:a2:02:d7:50:7e:b1:bf:d5:
b9:b2:ec:6f:f8:c0:2a:2d:6b:98:aa:3b:20:46:cb:52:0f:7a:
eb:52:1a:41:84:d7:11:f3:65:1b:b8:cd:0c:d7:08:eb:ba:8a:
98:e8:d6:23:09:74:ff:b6:6f:52:42:e4:a6:7f:c6:f8:8f:c8:
66:d7:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:40 2025 by rpki-client