Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft
File: ChpgX3N8mCCzMTPlo1ecFw0idOw.mft (raw, json)
Hash identifier: j3PT9m7H+UlrnpdorYqPT3F8gOYzITqVliYEo0TUaGg=
Subject key identifier: 76:CD:EE:69:F1:64:E4:B1:19:F9:99:D9:36:80:A3:2B:17:9A:82:75
Authority key identifier: 0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC
Certificate issuer: /CN=A91BD614/serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft
Manifest number: 0183
Signing time: Sat 29 Mar 2025 03:09:47 +0000
Manifest this update: Sat 29 Mar 2025 03:09:46 +0000
Manifest next update: Sat 05 Apr 2025 03:09:46 +0000
Files and hashes: 1: ChpgX3N8mCCzMTPlo1ecFw0idOw.crl (hash: Agscq65jxiadedY6l0NnxSNzlShBslFBLNRdoo3ZUsI=)
2: 1E925A56BEE111ED83037109C4F9AE02.roa (hash: TBhcbssExgqFxRfQy6kh4THFtAGhrBLT/uB9I75u5Cc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD614
Validity
Not Before: Mar 29 03:09:46 2025 GMT
Not After : Apr 5 03:09:46 2025 GMT
Subject: CN=67e7647a-add6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:ca:f0:e2:aa:31:b6:9d:5a:29:ee:11:e0:
e5:1d:8a:4b:ec:b4:bc:87:6c:9a:23:92:bb:4c:5d:
0d:25:9b:ab:e5:d0:c7:2d:c8:64:14:0d:52:08:de:
ad:d2:25:79:ee:96:5a:fa:8a:06:e4:14:63:ea:23:
b0:0e:ab:6c:4d:ce:c7:22:2e:6f:5e:33:51:ed:2a:
00:e8:9f:39:ec:48:8e:4d:fa:61:d9:bb:e7:48:6b:
f1:cc:ac:80:be:fd:3e:10:ce:a8:0e:2a:88:53:bb:
61:af:00:4a:6f:d9:e1:b6:b0:76:55:4d:bc:8a:05:
bb:62:81:09:14:f6:36:b8:44:8d:8d:cc:8b:ba:8e:
ee:da:d6:99:61:34:0c:aa:4d:6d:1a:68:80:15:20:
41:92:07:82:71:fa:f5:19:df:88:16:b5:99:a4:d6:
c0:80:a5:0d:2e:0b:81:57:58:b5:e5:b5:fb:d3:ef:
2d:04:5b:67:a2:cb:1c:b5:80:32:bc:65:ce:44:ad:
82:49:62:58:4f:7f:ce:06:7c:74:e0:bc:a7:6e:4e:
14:ef:c9:f8:7b:0a:8f:93:72:f0:9a:12:f9:d1:e8:
76:ac:42:db:0c:82:ec:78:38:44:93:68:81:c1:f8:
6c:84:2c:36:6e:53:20:63:d3:9d:3d:e1:95:c4:cc:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CD:EE:69:F1:64:E4:B1:19:F9:99:D9:36:80:A3:2B:17:9A:82:75
X509v3 Authority Key Identifier:
keyid:0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4f:35:12:c4:16:d8:02:0f:0c:1f:67:7f:40:73:ba:1a:17:
b8:d0:0a:b3:d3:42:f7:5c:36:8f:2f:52:ea:f7:06:b5:ea:13:
e0:47:d0:92:bb:33:97:bf:c6:95:df:00:69:47:29:f2:f6:b0:
b2:c2:d5:4e:b2:62:52:47:eb:ae:a0:59:a8:09:47:95:05:a0:
5d:86:a6:af:1e:d1:c7:b4:dd:2c:a0:b1:c2:e8:5d:e2:fb:5c:
4e:dd:1f:32:3d:17:40:63:ce:05:60:41:4a:21:33:f5:28:e3:
b4:6f:5c:1d:50:b1:bf:16:49:b0:67:5e:6f:f9:a4:cd:1a:f7:
de:1a:6c:c2:79:59:d8:d8:56:6f:9a:53:d0:cc:82:6a:c2:32:
14:0e:eb:6d:8b:d8:e0:a1:fe:54:dc:50:c0:c2:d3:3f:60:d5:
b8:7c:76:bf:9f:28:0e:dc:d2:42:86:cf:1b:07:e4:8f:43:ee:
80:af:fa:69:5b:d9:4e:bf:f5:67:7f:5b:d9:5a:73:8b:a4:e6:
d6:6b:8b:55:13:6b:22:4a:00:b9:72:ff:c8:3f:a5:43:b8:48:
b1:2e:21:3f:cc:af:8f:ac:6d:a5:c2:94:1c:53:e3:41:03:21:
e6:c8:38:3f:bd:41:95:80:8c:b4:3c:01:50:2b:37:6b:c0:78:
7b:06:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:00:46 2025 by rpki-client