Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File: EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier: dmkDeCYStuAnNMIJgHeoT3pacccrs3eM5IIL1xEvyuk=
Subject key identifier: C5:27:64:FB:36:17:52:9F:C1:06:49:71:D8:09:E9:4A:3B:86:E4:40
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer: /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number: 014E
Signing time: Sat 29 Mar 2025 03:42:31 +0000
Manifest this update: Sat 29 Mar 2025 03:42:30 +0000
Manifest next update: Sat 05 Apr 2025 03:42:30 +0000
Files and hashes: 1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: 2qK9mE+bWto2QsUv7zzSULITys3q6QOWjS/9w7ns1Xo=)
2: 32D39C06224511EE81776175C4F9AE02.roa (hash: 1b01HrQ984mzb/02NyzWUFZzcTsdrWy3Ymvx1U4TcOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD844
Validity
Not Before: Mar 29 03:42:30 2025 GMT
Not After : Apr 5 03:42:30 2025 GMT
Subject: CN=67e76c26-b4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:63:0b:e5:54:86:c0:11:e3:4b:1c:79:68:
2c:3d:65:0d:14:7c:eb:9c:06:b5:0a:79:c9:f7:20:
bb:01:8e:35:e4:3b:cf:12:13:63:10:8d:83:d7:66:
b2:28:ec:9a:2d:06:84:83:f1:13:2d:c4:fe:71:f8:
a6:74:8d:f7:62:dd:62:e8:b1:d2:7a:93:d3:d4:d4:
ad:9f:00:c6:5a:a1:bf:d0:8e:b4:d0:92:27:69:56:
b4:58:3a:46:66:f3:bf:69:3d:78:26:24:ee:7f:fe:
c2:ce:95:cf:1b:c5:33:50:de:77:93:66:ad:07:d2:
eb:b8:fd:fe:5b:35:13:74:45:21:30:73:58:05:b5:
b6:c1:e6:e5:7a:ce:cd:dc:ae:d9:4a:73:24:3b:d1:
5f:d7:d2:48:ee:e6:d1:70:86:3e:90:b7:6f:c9:26:
6e:b4:dc:ee:5e:6c:68:7c:5c:1d:31:f4:89:4d:8b:
98:6c:4f:17:fa:c6:14:79:8a:7b:b6:b1:2c:db:7b:
35:5c:38:72:49:db:0a:1c:90:a6:af:ee:11:90:bb:
19:15:72:00:64:f3:72:79:ca:b5:ff:6d:91:e9:f7:
3b:7d:78:e6:ce:f7:1f:9b:d2:98:2c:ba:b2:36:cb:
1e:8b:d1:40:55:7e:1b:b8:f6:a7:64:02:38:31:68:
26:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:64:FB:36:17:52:9F:C1:06:49:71:D8:09:E9:4A:3B:86:E4:40
X509v3 Authority Key Identifier:
keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cd:92:e3:26:f3:d2:81:28:d4:fa:ba:e0:ae:21:3e:81:b3:
24:a7:ad:a4:5b:3e:3f:ac:fc:01:dc:4a:75:ff:ff:54:8e:6b:
b8:90:41:fd:b6:2c:49:02:36:71:98:72:35:2b:18:b2:c7:51:
c9:0e:82:0d:32:3b:e0:87:32:38:c8:71:b9:97:3c:11:37:20:
d1:90:61:57:84:dd:5f:00:e5:45:cf:92:af:df:d7:5e:1a:cb:
8e:22:b4:45:87:02:72:74:11:85:01:9d:09:f6:85:18:15:3a:
cc:bc:4d:92:60:2a:a8:9f:d4:cf:ea:c2:59:ba:21:8c:ee:b2:
e2:81:39:2b:71:b1:04:66:05:18:f2:d7:61:75:db:d9:b4:70:
33:2d:12:33:a6:73:1d:cd:03:4b:5e:35:37:14:cc:bd:f6:30:
15:72:f6:6f:33:cc:bc:3c:3b:6b:0f:6b:25:07:b4:16:41:4a:
41:93:84:d7:c1:15:7f:e0:17:59:23:92:76:eb:5d:81:1e:41:
e1:25:4a:bb:9b:0f:d0:80:8b:3a:a5:fb:8a:bc:7b:17:57:d2:
11:bf:53:25:5c:00:b1:7c:ef:2d:7a:8d:f6:b4:84:24:d3:61:
ce:cb:76:89:92:9c:0e:35:cd:d9:28:22:2e:f5:fd:76:a4:ce:
c8:ed:02:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:30:57 2025 by rpki-client