Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json)
Hash identifier: fICdqbU6Skeor1y9jsq+EEd/SW2caPzEfM55c5dr/+E=
Subject key identifier: B3:F6:AF:1D:15:CF:4A:04:ED:59:70:DD:EE:85:4E:A1:39:4D:C1:45
Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
Manifest number: 4A
Signing time: Sat 29 Mar 2025 06:40:17 +0000
Manifest this update: Sat 29 Mar 2025 06:40:16 +0000
Manifest next update: Sat 05 Apr 2025 06:40:16 +0000
Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: klHb9Mo9rrb/qYqiQEEn93OhM3DrCDRndl+MqxGTYVM=)
2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: +tAlw28NvGVDo5cCezaQKFVIMHfW8hqdMwBD9HYIeLs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA941
Validity
Not Before: Mar 29 06:40:16 2025 GMT
Not After : Apr 5 06:40:16 2025 GMT
Subject: CN=67e795d0-b52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:21:77:5b:cb:49:b4:6e:63:20:3e:ef:52:
33:e0:83:d6:9e:6d:83:72:b8:68:d5:c7:27:50:7b:
be:a3:9a:24:51:7b:66:1e:1c:8f:0f:21:70:78:32:
48:44:57:b8:ee:c3:3f:44:4d:06:c0:f5:96:69:7e:
91:69:db:4f:37:82:45:21:69:c5:68:50:27:ab:c8:
56:e3:e1:ee:72:d2:5b:eb:03:4d:50:1c:38:a3:04:
b7:fe:92:eb:0d:cf:b6:c8:b5:73:7a:e3:93:fe:2a:
f0:6e:d8:a8:4f:70:7a:3c:30:57:72:14:ef:9c:0e:
a1:3c:97:94:ec:93:40:ed:1a:8d:33:b8:15:11:f4:
29:d3:95:cb:9d:89:32:63:b8:fd:76:27:32:35:0c:
b1:c0:09:06:39:93:9e:22:45:04:70:0e:95:a7:ca:
9f:32:47:04:30:dd:a9:66:0b:14:b9:47:3e:dd:36:
a5:cd:b9:74:14:48:2b:3d:41:c6:9d:bc:1b:b0:bc:
a1:d3:53:37:88:83:35:59:3a:ea:d4:58:21:ec:65:
ba:15:2d:97:e1:97:3e:9a:2b:e2:6d:95:a7:e6:46:
75:42:de:0c:69:d6:44:29:f2:1e:ff:9b:ca:61:ee:
51:e4:f9:7a:cb:13:df:78:74:0d:18:ed:df:6f:52:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:AF:1D:15:CF:4A:04:ED:59:70:DD:EE:85:4E:A1:39:4D:C1:45
X509v3 Authority Key Identifier:
keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:32:72:de:58:64:8b:45:7e:74:5e:60:c2:18:8d:6f:ce:8c:
8d:38:47:75:8d:66:d1:96:1f:14:24:b9:6e:b5:5e:09:63:8d:
e6:74:83:0c:87:56:e7:6f:d9:c9:94:ed:b0:e6:cf:57:05:d7:
fe:73:b3:ab:9e:e0:64:48:fe:9e:e1:e4:b1:43:f7:50:1d:42:
b3:52:4c:82:46:28:bc:8a:84:bd:95:80:57:c0:41:a4:ec:7f:
6a:d3:08:2d:61:f7:11:4f:4a:4d:51:7a:1c:c8:6c:7c:70:a8:
02:8b:ec:a1:9a:1a:e0:10:a9:c7:d1:fd:75:64:60:62:79:4f:
4a:6a:01:b0:2f:41:7b:ed:45:ea:ba:c8:e9:93:30:91:45:d4:
3b:9e:56:96:cb:b3:c2:d2:98:1e:e6:fb:ea:b6:95:e0:d1:ac:
70:12:02:9b:25:bc:f4:31:64:f3:7b:a0:2c:71:1b:8c:23:94:
c6:ac:33:ac:ec:83:fe:ac:2d:d9:c2:0c:99:0f:f6:6b:d8:b6:
6f:b6:c0:ac:c5:b5:56:68:70:53:22:39:1c:ab:7c:b1:ba:8d:
56:05:62:cf:2f:88:bc:ff:17:a4:64:22:bb:fb:ed:0b:2f:ae:
f8:74:58:0d:44:36:fa:67:9f:00:2c:e3:f7:81:06:f6:d4:07:
44:43:89:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:53:57 2025 by rpki-client