Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json)
Hash identifier: 5qMSH0Ate0eOYSkdkIjHE1pH6yARJa7HlwvWTnxmXdI=
Subject key identifier: EE:79:59:9C:22:34:40:EA:8D:D9:CB:FA:B7:7A:CD:B7:5C:9D:E7:C1
Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82
Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382
Certificate serial: 084C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
Manifest number: 0847
Signing time: Fri 28 Mar 2025 21:00:18 +0000
Manifest this update: Fri 28 Mar 2025 21:00:17 +0000
Manifest next update: Fri 04 Apr 2025 21:00:17 +0000
Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: EaSTdMPXHd56x7Xfmf0y/VRSsAZkq6LTTOtR2HJecSY=)
2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: cbktrrt4RsOUs9FstYccY602a8M1M48rOaYFq7f84Xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA521
Validity
Not Before: Mar 28 21:00:17 2025 GMT
Not After : Apr 4 21:00:17 2025 GMT
Subject: CN=67e70de1-d13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:13:28:b4:fe:32:07:bf:38:27:c7:a1:84:
f9:9d:0b:03:32:1c:30:4f:0c:cb:bd:ca:9e:0d:ab:
2b:3e:2d:53:19:82:88:1b:29:79:6b:59:a7:3a:e9:
e6:e6:27:53:65:f9:de:26:d6:ba:78:e3:07:f6:8f:
66:6c:bd:47:ee:0a:fa:46:57:12:f4:b8:b4:5a:e7:
74:fc:63:25:a0:bd:45:b6:2c:33:46:61:64:13:be:
70:f4:a2:db:2d:30:00:9f:89:a4:13:10:77:b4:32:
c3:14:47:5c:90:c4:ed:ee:91:e7:73:2e:0f:75:4a:
3a:50:57:d4:db:9a:b0:15:f0:cb:a6:52:08:42:8b:
a1:f3:98:67:c6:86:c8:44:7b:c9:a5:b3:1a:45:3d:
d0:30:7b:d5:7b:8f:61:ec:40:7d:e8:06:71:e8:c8:
3f:b6:ab:c1:b2:d3:c7:01:9d:be:a7:72:3a:91:09:
02:6c:e1:04:31:a9:fb:44:ce:c9:ff:3f:0a:30:57:
0c:e0:8d:d7:3b:01:6b:7e:d7:96:7f:4c:f8:c2:3a:
ce:30:f4:7a:7b:f0:89:23:91:0b:2e:b9:bf:bc:07:
6e:0e:4d:1e:11:16:5b:f4:b7:8a:21:64:8a:92:26:
d5:00:80:59:af:f0:e7:4d:48:13:fb:06:c7:2e:1d:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:59:9C:22:34:40:EA:8D:D9:CB:FA:B7:7A:CD:B7:5C:9D:E7:C1
X509v3 Authority Key Identifier:
keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:a3:1e:24:67:d3:bb:63:20:10:2c:07:de:32:cc:98:7a:5a:
c1:59:a5:d9:c7:8f:95:62:20:27:23:10:ff:35:2c:61:68:77:
29:c0:9a:f4:74:79:43:fc:3d:89:9c:3a:f6:82:e1:eb:ca:3b:
29:ae:a2:35:01:9e:ec:33:1b:f4:00:8b:41:50:10:9d:fd:6c:
dc:95:66:49:2e:08:28:fa:e2:76:ed:3f:29:d1:ed:7b:b9:05:
bb:5e:31:56:5b:f7:16:ac:1a:80:f5:13:4a:f5:ac:c3:a6:5e:
35:5d:82:b6:ea:f7:93:c2:52:7a:20:ca:1b:9b:06:ab:cd:eb:
fc:d1:62:b2:fa:70:f2:b3:4c:09:ce:9e:34:95:a2:60:6b:43:
ce:1b:88:a8:03:4f:eb:82:7b:16:b5:2f:3e:80:b4:d9:7a:7c:
e5:49:04:96:d4:12:3a:0f:59:70:b6:7f:9b:64:c9:f5:c0:eb:
b3:52:38:d6:1b:17:a9:db:a0:4a:e6:45:b6:7d:ad:60:ad:5d:
32:c1:16:d6:4d:68:ab:34:fa:db:0f:bb:97:ae:4e:95:a7:e4:
12:0c:c3:49:bd:30:2c:83:34:68:75:74:d6:93:87:4c:59:71:
e5:77:4d:28:98:57:5b:94:a3:0e:c1:b1:98:8f:4f:3f:09:49:
0b:54:76:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:19:14 2025 by rpki-client