Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
File: -uIUFNET23jVT-q6G2BvhUokC9E.mft (raw, json)
Hash identifier: gTaGpNg4FLGk2s1VVtQA1As0jmF2p8YFladE6kQ/jls=
Subject key identifier: 00:60:B3:DB:C7:C0:4E:66:B7:9C:6F:73:31:D9:8B:07:E4:FD:39:15
Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1
Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
Manifest number: 0160
Signing time: Sat 29 Mar 2025 03:29:02 +0000
Manifest this update: Sat 29 Mar 2025 03:29:01 +0000
Manifest next update: Sat 05 Apr 2025 03:29:01 +0000
Files and hashes: 1: -uIUFNET23jVT-q6G2BvhUokC9E.crl (hash: b1PpLkjqrWUSuww5B63kzm699vgEsVnKlNWjhve69sE=)
2: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (hash: nYA6dKLF7hZ2252OSmbcet0fM3uQj9FqvEVTxCVbcwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDA2A
Validity
Not Before: Mar 29 03:29:01 2025 GMT
Not After : Apr 5 03:29:01 2025 GMT
Subject: CN=67e768fd-1309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:24:78:54:da:01:32:14:61:c4:b1:5c:67:d4:
07:92:4a:43:31:79:ff:80:4f:fd:f7:66:99:f7:ac:
de:47:a6:65:3a:ed:bc:30:e4:ff:87:17:ef:a6:1a:
9d:27:34:79:0d:d7:88:4e:04:6b:eb:75:3b:54:3f:
41:df:3c:51:54:0f:be:22:b6:6c:59:6f:98:29:4e:
af:78:22:09:42:2f:5f:b2:17:48:25:e5:ea:10:0c:
87:5c:da:22:bc:95:b5:09:4a:38:b9:f9:20:ef:6a:
a1:ad:ec:c7:66:39:aa:45:15:6f:01:47:7d:da:0d:
d3:11:21:db:13:5c:7e:9e:10:c6:de:d8:5b:23:ef:
bf:38:52:f7:70:9c:5e:c5:c4:10:70:0b:9a:c2:ae:
77:ee:aa:40:a9:e5:21:bc:d1:6a:68:e3:5f:87:de:
26:ff:5b:45:1e:96:a4:f4:f3:c8:77:02:0a:02:7d:
2c:19:c7:57:e6:4d:5f:3e:99:5d:f6:ff:2e:75:ef:
90:42:ef:b4:c5:4a:f3:e7:cd:c2:6b:87:46:37:aa:
21:de:62:98:5f:88:8d:9c:c3:38:ff:fb:74:eb:c3:
1e:58:f6:e4:26:80:86:59:e4:29:d3:b2:44:f1:56:
a7:81:51:07:d5:f7:dc:f6:b3:d6:b9:09:31:b3:c4:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:60:B3:DB:C7:C0:4E:66:B7:9C:6F:73:31:D9:8B:07:E4:FD:39:15
X509v3 Authority Key Identifier:
keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:83:6c:a7:72:8d:5c:b5:74:13:0e:db:db:59:2f:87:d4:a0:
a1:3f:1b:c7:41:23:2e:44:08:91:3e:db:24:d1:35:15:1c:61:
d6:be:6e:0a:29:91:d1:85:e7:a0:14:7c:d7:88:ea:65:8c:d1:
21:30:c7:bb:bc:76:97:fa:55:7b:b6:02:f2:9c:ad:8d:66:b9:
83:68:64:43:77:50:45:88:1b:9c:ba:55:04:5a:55:5d:ea:f0:
07:01:ce:86:1c:a3:dc:9c:f4:e5:60:90:66:b1:1c:35:dc:4d:
0d:85:fe:25:74:ba:70:06:63:59:70:22:41:84:9e:97:99:74:
31:f3:5e:f4:22:3b:42:46:ab:60:5c:c0:04:5f:05:6c:49:71:
60:20:69:f1:d7:6c:02:fd:1e:05:58:29:52:a0:9d:b7:eb:dc:
cb:c3:e5:25:49:27:59:8d:44:6d:db:bb:bd:6c:24:19:f1:00:
b4:a0:a3:dd:7e:2f:15:ff:32:89:9a:63:f1:d0:b3:72:b1:d2:
d5:87:33:d7:98:11:a3:b8:5d:22:81:a3:8d:89:72:79:5c:10:
57:9e:8b:25:3e:fa:8d:e5:c6:f6:69:78:bc:75:56:df:ad:cd:
e7:91:17:b8:58:be:48:4e:a6:22:46:97:7b:08:df:16:56:46:
3e:33:22:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:19:56 2025 by rpki-client