Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier: vHDmoOfVHDpGZz5CerfHe7MAsBA0W4YvP4GW+vZK2oo=
Subject key identifier: 99:27:36:9B:1D:F6:73:7D:8A:B0:AE:6B:C6:6F:5D:30:8A:BB:78:E9
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial: 0B19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number: 0B10
Signing time: Fri 28 Mar 2025 19:25:33 +0000
Manifest this update: Fri 28 Mar 2025 19:25:33 +0000
Manifest next update: Fri 04 Apr 2025 19:25:33 +0000
Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: 8DFtsg3EIW2UU1yalurR+7Qh9bJvs10ABTUSBsioh+M=)
2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: Gpxpc8IRQzuHqiyk8bsF5mq9N6coqqpi1UICb22hud0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2841 (0xb19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD9C2
Validity
Not Before: Mar 28 19:25:33 2025 GMT
Not After : Apr 4 19:25:33 2025 GMT
Subject: CN=67e6f7ad-d0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:85:55:07:7d:5c:df:bb:dc:b8:a6:e5:95:
b2:d4:cb:1a:29:93:98:62:dd:8f:da:5c:e7:34:a0:
40:22:d3:d7:12:11:a0:37:98:0e:cd:d3:86:b1:34:
e3:ee:60:c7:0e:80:b3:0c:42:5d:04:6b:c7:62:4f:
c6:73:ac:c7:fc:31:d0:c7:3b:66:f5:4b:d4:71:61:
d9:f6:18:d5:33:27:4a:68:94:a3:eb:38:9f:9a:67:
aa:05:92:e6:e5:6a:f0:e0:53:a0:f4:c2:c2:49:5f:
3d:da:07:35:8c:e8:83:6e:bd:59:c2:55:2c:7d:8c:
1d:6b:7f:7b:3f:8f:03:a8:ee:50:ce:7d:69:b7:c6:
ff:30:4e:d7:be:41:e0:bd:a3:cb:64:ea:55:e8:27:
7b:d0:73:89:f6:55:92:86:21:f5:2c:20:2a:9a:bf:
c0:e3:00:09:56:66:e9:1e:6b:d8:2f:e1:1c:f3:0b:
97:b8:de:db:9c:09:85:d7:76:de:ec:81:fa:f7:e0:
2a:59:9e:65:90:75:9d:45:77:23:f1:a3:5b:71:66:
11:e8:ed:93:23:75:0f:82:2f:fc:6e:0b:51:f2:bd:
c4:dd:04:6b:a3:1f:1c:8c:74:f2:26:95:22:07:ab:
8f:60:58:56:6d:1a:ba:82:f5:20:0f:e4:c7:62:a2:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:27:36:9B:1D:F6:73:7D:8A:B0:AE:6B:C6:6F:5D:30:8A:BB:78:E9
X509v3 Authority Key Identifier:
keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5c:30:8f:81:0e:b4:df:26:bc:03:8e:b3:7c:53:e4:f8:f5:
8a:09:27:c5:c5:7f:9f:04:6f:e9:e9:ea:a2:56:82:4f:46:51:
be:d1:2f:77:a4:8a:83:46:f9:e1:e6:05:03:b0:d9:8d:6c:82:
d7:ab:f5:f1:26:0f:bd:e9:b3:18:a0:bb:8d:58:6e:31:5a:73:
1f:48:eb:f6:4a:81:7a:7e:95:c4:b4:b7:c6:8b:bc:de:e5:b5:
ce:11:0c:5f:74:7d:54:4e:2b:03:3a:24:0e:c3:3b:51:a6:88:
02:2a:af:e6:f9:67:02:13:c6:46:bb:10:41:2f:00:0a:c2:83:
37:1d:63:24:2c:33:1a:f0:a2:92:86:01:50:de:28:e7:75:bd:
85:a0:4a:93:4e:c9:8e:14:7c:d3:67:6f:3e:01:95:01:86:d6:
d2:6d:36:7b:d6:8e:9f:a2:e7:56:96:f5:02:9d:c6:d8:7b:ff:
39:07:45:2e:67:bb:86:f0:bf:46:ab:38:8f:d4:95:4b:ef:eb:
2c:63:5e:e4:43:c8:cc:05:3c:20:16:e2:d6:95:d6:66:2f:c2:
af:ed:67:ac:0f:e1:b1:23:53:f9:c6:f3:7c:f8:fb:f7:10:6b:
b4:23:d0:66:cf:f8:2e:8b:ea:a6:c4:6a:87:50:27:6a:90:6b:
90:f3:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:10:32 2025 by rpki-client