Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json)
Hash identifier: +Y2Ko+7HL7PG98zL+JHepEyfI2Fyrzqj5HQW/L1tMcw=
Subject key identifier: 7D:12:A1:AF:D4:61:1D:1C:0A:74:A7:E4:40:AB:39:29:4E:F0:AB:6C
Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Certificate serial: 107C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
Manifest number: 1063
Signing time: Fri 28 Mar 2025 17:29:11 +0000
Manifest this update: Fri 28 Mar 2025 17:29:11 +0000
Manifest next update: Fri 04 Apr 2025 17:29:11 +0000
Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: 7d8Tkfvs5Ae1bwkIR//Mcp7mrtRkc8nGpYYJgKzWorw=)
2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: Ur8W3C7QgJQkw3BnGAD55weFMOItsdqD/26WShAlLaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4220 (0x107c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE096
Validity
Not Before: Mar 28 17:29:11 2025 GMT
Not After : Apr 4 17:29:11 2025 GMT
Subject: CN=67e6dc67-7bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:f3:fd:be:7a:77:3c:b5:e7:9b:1f:0d:45:
de:8c:eb:6c:1e:3a:b9:35:88:a3:cd:df:0c:6e:bb:
3b:48:9a:be:19:d8:f9:a2:bd:c9:f6:b4:25:75:57:
b1:7b:db:b5:fd:f4:0c:eb:cb:38:e8:ac:2b:69:1a:
e0:85:08:2a:68:30:7c:eb:14:fb:ff:47:d3:98:08:
10:7c:02:ce:21:ae:e8:0e:39:00:a2:34:60:4d:ee:
b7:6d:2f:4f:63:84:8a:be:60:6d:8b:0c:12:dd:18:
79:83:4f:13:2d:23:d8:2f:24:57:f8:bb:8f:d7:08:
42:1a:21:9a:a1:58:99:db:83:07:8b:17:96:36:cc:
b7:4d:c5:9e:bb:fe:23:03:9f:de:ba:b1:95:0c:e1:
93:40:54:73:4e:a5:cb:13:38:9d:61:98:39:93:fa:
f1:ad:b1:b7:44:a1:f5:56:fc:8b:56:b2:94:96:aa:
d6:d8:8b:e0:ab:17:ab:95:ab:44:0a:58:61:00:b0:
57:0b:d2:f3:ff:f3:7e:9d:ef:60:3b:93:8a:ad:3f:
72:cc:cc:35:46:44:8d:82:21:9c:42:04:04:c5:9c:
3d:72:3c:95:69:ed:26:ff:f4:81:68:eb:00:e3:d9:
fe:4c:35:6f:29:a9:db:06:41:18:be:56:4e:f9:2b:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:12:A1:AF:D4:61:1D:1C:0A:74:A7:E4:40:AB:39:29:4E:F0:AB:6C
X509v3 Authority Key Identifier:
keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f0:61:3e:a9:18:b2:de:93:2d:6e:23:3c:b5:ce:b9:d7:62:
9c:20:61:d0:dd:87:29:28:ca:a5:56:1c:76:e9:23:04:db:6a:
cd:e5:25:fb:3a:48:36:4c:bd:46:6b:3b:09:e0:74:9d:e8:0c:
c0:96:bf:14:44:05:e0:e5:2a:d6:49:e1:1c:b9:44:0c:e5:46:
a1:a1:ff:c0:d2:14:34:42:0b:eb:d8:49:fd:0d:4e:36:00:72:
42:12:55:67:a9:6e:77:fc:73:cd:20:10:48:d9:00:fa:26:60:
b7:f0:db:ff:91:97:65:17:f6:18:fa:ef:5b:46:69:3d:6e:dd:
a5:1c:f6:31:65:18:f9:7e:1a:9c:03:fc:84:f6:4c:b8:79:54:
b1:68:2f:32:c6:2a:b1:34:11:b3:2a:84:39:dc:94:cd:9a:dc:
e4:f1:74:d0:48:71:89:16:f4:98:e4:03:85:aa:97:9e:fb:bb:
2e:2a:5d:84:19:fc:00:86:01:03:93:18:33:5d:de:85:d5:cf:
52:26:e4:1f:8c:95:e8:7b:7f:bf:fd:a2:34:7d:5d:4f:7b:d4:
9b:3d:9e:d8:a9:53:12:49:5c:8a:90:bf:68:af:01:e5:31:6c:
2c:0f:35:b8:40:ea:52:4c:4e:a3:60:34:65:d9:ff:83:00:78:
9e:1e:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:21:46 2025 by rpki-client