Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json)
Hash identifier: FV0yBqV5Eb0hqIFX5L71Z3UAQ5PnmS0c8v9En6dhgqQ=
Subject key identifier: C4:95:76:AC:65:98:93:D8:9C:09:81:6D:CB:3D:BA:3F:1C:81:B3:A0
Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04
Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
Manifest number: 0188
Signing time: Sat 29 Mar 2025 03:34:45 +0000
Manifest this update: Sat 29 Mar 2025 03:34:45 +0000
Manifest next update: Sat 05 Apr 2025 03:34:45 +0000
Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: wN19YMzNa50QxSVIbewvRWruXCsY8JPffSTvUztYg3I=)
2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: q2jyIpsgOSZMDylILKfsOrMIus5pnrAFZdrI/kJzgvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB4C2
Validity
Not Before: Mar 29 03:34:45 2025 GMT
Not After : Apr 5 03:34:45 2025 GMT
Subject: CN=67e76a55-ada2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:f5:4d:fc:4f:ff:03:96:e1:d0:72:09:88:
b8:a9:37:ad:e4:b5:d4:44:02:b6:a3:18:36:9d:bb:
e7:ef:2e:31:fb:da:64:08:e1:b2:de:25:77:fe:56:
e1:91:43:91:b5:36:3a:24:67:c8:97:9d:fd:9b:32:
cc:cc:93:8d:01:cc:06:2f:8a:6d:e4:6d:39:13:79:
8c:e4:8c:87:96:06:dd:76:30:74:8e:ee:91:ec:de:
a7:4f:7e:87:00:de:20:09:4e:da:30:82:77:66:6e:
0b:e8:60:db:67:ad:cb:26:6f:3e:24:59:df:54:fa:
71:34:c5:72:5d:bf:7b:5c:58:aa:7a:1b:9a:f9:56:
24:9b:b1:a3:01:21:67:e7:e1:2c:4c:2a:05:ae:70:
35:c9:a8:91:36:99:0d:4b:20:66:0e:b0:33:3f:73:
f4:c3:e2:fc:27:63:0a:71:59:5d:68:cf:c0:9f:ca:
ce:16:39:48:7c:dc:ae:58:70:9e:e5:4c:d7:cd:91:
ad:25:49:8d:9b:4c:0d:b4:52:00:f6:2b:73:ce:5a:
f8:cc:6e:a2:7b:2c:73:78:42:ff:be:7d:c2:6a:48:
47:29:49:10:9d:be:cd:64:ee:44:4d:67:0d:6c:a3:
22:78:51:c3:70:9b:55:cb:23:44:44:56:6d:4e:32:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:95:76:AC:65:98:93:D8:9C:09:81:6D:CB:3D:BA:3F:1C:81:B3:A0
X509v3 Authority Key Identifier:
keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2e:df:8c:be:3d:a7:f9:10:e4:61:1a:cb:93:44:80:6a:4d:
10:6a:90:43:51:5b:1d:11:5c:19:af:eb:ea:0d:0f:6d:71:ab:
ff:fc:58:28:fe:ef:af:31:a9:12:a0:f2:9d:ab:4e:37:65:80:
0d:bf:fe:67:55:29:de:2a:7f:24:ed:9b:77:03:df:02:05:54:
7e:3a:ba:35:1f:00:ef:57:67:62:e3:86:14:ee:dc:57:59:c5:
36:b0:af:24:d9:33:b6:95:79:41:00:12:84:ff:6c:e2:3c:38:
2c:be:85:cb:ad:96:91:82:72:33:25:3b:e8:4a:56:16:9a:44:
01:7b:11:12:61:a7:8c:98:9b:b4:05:27:e8:c4:6c:96:46:90:
12:47:dc:7e:8f:fe:d9:76:7c:46:35:12:31:29:23:a4:98:f2:
8e:bc:61:5b:b2:31:a4:f4:29:20:04:02:4d:74:e1:44:ea:1a:
78:bb:c9:bd:8a:81:86:d4:e6:d4:6f:8c:bf:cb:05:30:40:b8:
89:b0:51:8e:4a:04:e0:c0:21:c1:91:4f:52:81:84:b4:0b:08:
db:94:c2:84:12:9b:70:23:64:36:c1:bd:c9:bb:d8:28:60:ca:
56:5b:92:ff:da:1b:56:d1:e4:e0:85:f2:81:1c:c2:8b:7a:45:
7b:88:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:33:13 2025 by rpki-client