Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json)
Hash identifier: Bn9OePGtmOufp57NmyNEXXUJh0eeIIGXiP82NzFuuXw=
Subject key identifier: 4C:6D:86:F3:F5:B0:C7:D8:11:96:CD:28:82:C5:79:1B:D7:6F:85:31
Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60
Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
Manifest number: 0160
Signing time: Sat 29 Mar 2025 03:25:41 +0000
Manifest this update: Sat 29 Mar 2025 03:25:40 +0000
Manifest next update: Sat 05 Apr 2025 03:25:40 +0000
Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: +rgnoVxm1lRR4wapXbgT3SxjhgA9rIM8tOxSeiepAJ8=)
2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: +bA3oLtddNBLbESFYmKhlFjoL38F7uGh4zuU1dN6BAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9101
Validity
Not Before: Mar 29 03:25:40 2025 GMT
Not After : Apr 5 03:25:40 2025 GMT
Subject: CN=67e76834-ad79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:7b:e1:11:28:2c:e8:fc:20:94:ea:01:36:
fe:e7:dc:99:01:7e:7a:40:b9:fe:88:c5:98:45:a6:
49:50:8f:47:3a:60:28:0c:52:e4:b0:2c:56:7a:21:
80:2a:03:db:d4:65:55:53:5c:59:a6:98:9d:1f:9a:
de:3e:02:bb:15:7d:ef:05:cf:f6:80:02:6a:55:df:
96:24:3e:c3:54:bd:42:71:fa:e7:5c:c5:0b:d0:d1:
7c:12:d7:6a:d4:59:aa:91:c1:1f:78:85:a4:3d:18:
eb:f2:36:4a:25:2d:5d:56:a8:97:ee:6a:a9:26:ce:
38:13:7d:e4:76:6a:7e:8c:a9:24:31:e4:30:8c:9a:
09:2f:44:9e:f0:6c:b5:39:91:8c:e6:b0:9a:06:db:
37:b7:f6:89:e1:69:4f:47:83:3e:f1:d7:c3:5c:c5:
26:ce:98:8e:85:43:1a:93:76:e6:59:fa:8a:ac:b8:
12:0e:ee:e7:0d:b2:9a:9b:e6:3c:c7:98:25:4b:bd:
65:77:65:a2:13:2e:e7:56:07:8e:0c:20:c4:9c:ad:
ad:9f:d5:fb:00:7f:a4:75:7a:cb:a7:9d:a8:a0:b6:
b1:1a:d7:b4:f2:4f:79:07:dc:3b:1e:e6:ae:f5:04:
c5:ec:a3:32:1a:8c:eb:43:c8:5a:94:65:1b:ba:55:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6D:86:F3:F5:B0:C7:D8:11:96:CD:28:82:C5:79:1B:D7:6F:85:31
X509v3 Authority Key Identifier:
keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:7c:d7:48:f2:73:2c:8b:c2:79:83:d9:14:74:bf:85:4e:22:
87:de:c5:d3:52:04:db:fa:28:70:99:1e:5e:5e:71:89:19:33:
1f:51:7e:41:60:b4:87:c0:68:ce:8e:a0:07:83:bb:09:d9:4d:
d7:72:56:f2:50:8e:9b:7e:02:2f:00:55:5b:e8:4b:c6:e6:00:
54:9b:6b:b4:54:92:1e:61:94:be:fb:01:fb:ea:69:0d:a9:ab:
20:a4:87:2b:f4:86:a5:88:36:a4:5e:4f:c2:e8:22:cb:b0:41:
2d:35:96:ea:e9:73:4f:bb:6b:71:32:04:4b:aa:cb:99:03:23:
a5:03:60:3d:93:da:db:29:9e:fc:6b:80:3f:0b:c5:95:4b:7f:
31:88:37:30:e7:cf:0d:9a:24:37:ba:92:f3:6b:d0:fc:4a:73:
ab:04:8b:b8:51:5c:20:30:89:9c:e2:80:42:e0:fb:fb:c7:ce:
85:82:65:6f:63:a7:dc:f9:c4:7c:04:45:f2:8b:16:37:59:d7:
26:c3:fd:79:8d:40:e3:e1:27:9e:ed:fe:85:a1:c0:d7:d4:3b:
2a:30:82:47:09:cc:50:87:89:28:da:92:63:9b:59:7f:ae:fa:
b6:77:2a:91:f2:ec:a3:87:c6:ca:25:0d:c1:4b:23:de:f9:ca:
84:6d:4f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:54:17 2025 by rpki-client