Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json)
Hash identifier: sHfAA7GjLyGPAUr69snieeIkon9EQJ6hvNCPBxbOXMM=
Subject key identifier: 24:02:10:B1:88:6B:6C:54:D2:A1:AE:4B:81:B3:30:6A:AB:E7:F5:6B
Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
Certificate serial: 3489
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
Manifest number: 3474
Signing time: Fri 28 Mar 2025 15:23:33 +0000
Manifest this update: Fri 28 Mar 2025 15:23:32 +0000
Manifest next update: Fri 04 Apr 2025 15:23:32 +0000
Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: tQxHOZK7a2RKYI1JkI5Jtj59CX9KejaK00+Ceepbbm0=)
2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: diz+Mu2U4uCFECF4R8aohazh+vKfN3ig2+OPcHe2dC8=)
3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 7uOB6N38ardleWnTuq1RJZwPlZnlnhINCIW0PLcMR9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13449 (0x3489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFA29
Validity
Not Before: Mar 28 15:23:32 2025 GMT
Not After : Apr 4 15:23:32 2025 GMT
Subject: CN=67e6bef4-9567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:35:be:16:8e:2f:ab:f8:55:78:17:81:54:
28:68:16:c0:25:d2:c8:40:6f:29:82:4d:4b:e0:4e:
fc:e8:09:2f:4e:7f:48:a3:9a:86:7d:4a:15:ac:56:
bb:8d:e6:75:a1:65:c0:fc:7f:e2:4e:7f:79:d5:ac:
8b:9e:05:7a:1e:c4:83:8e:98:73:52:c8:90:f8:3f:
87:82:bf:62:0d:07:c9:40:a0:6e:6d:97:3d:7d:19:
ea:2f:bb:80:df:31:6b:d5:c7:4e:20:4f:35:76:bb:
d5:4d:ff:cc:b6:66:92:4a:7e:83:61:ca:b9:02:63:
ef:fb:95:ff:b1:6d:5f:80:93:db:0e:e8:cc:cb:ca:
2b:c6:27:ac:ef:1b:53:f3:3d:34:da:84:c2:47:4b:
ba:92:fb:02:82:2a:bb:2d:a9:49:fc:0f:f6:00:30:
e7:88:2b:01:3b:42:85:05:5a:f7:3a:c6:75:90:04:
95:a6:b4:aa:d0:50:a2:35:f2:3c:5c:d5:81:ac:d8:
d2:11:67:fd:88:f8:d3:f9:b8:02:30:f7:9f:7c:84:
37:88:9b:0e:cd:94:3a:b5:df:9c:91:66:be:1a:b4:
65:c2:fe:f8:9b:dc:a7:d9:4d:71:2b:0e:86:95:27:
7f:e1:40:ca:20:e6:2e:1a:56:68:5c:37:91:5c:d1:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:02:10:B1:88:6B:6C:54:D2:A1:AE:4B:81:B3:30:6A:AB:E7:F5:6B
X509v3 Authority Key Identifier:
keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:bf:d0:f8:fb:7a:1b:1a:09:9c:00:8b:c9:72:c8:78:f0:66:
cd:b6:0b:62:ad:a1:a2:55:e3:df:73:f1:68:06:01:46:86:cf:
08:26:28:96:e6:6e:d7:da:a2:3a:68:66:6a:1d:33:2c:dd:f3:
3b:28:88:0c:2f:4a:fe:6b:6c:56:70:18:b9:d6:22:ef:e5:39:
d8:14:be:28:d0:70:99:42:94:e7:d8:41:33:14:d2:7b:84:7a:
16:78:b8:e1:9e:a7:a4:2b:e2:9f:ca:85:ca:85:60:d2:80:af:
3d:09:88:f6:97:eb:49:df:6d:a8:6f:bb:99:27:1d:31:ac:fd:
de:c7:06:00:90:de:21:46:1d:d3:c9:a6:fb:ba:5d:79:55:66:
60:4a:f8:e5:d7:e9:54:07:87:74:e4:f0:42:5a:af:4f:ef:e1:
80:a5:5a:38:ad:f1:43:d9:ae:bc:59:d3:30:cd:42:9d:77:95:
e0:ac:31:aa:46:51:03:cd:e7:58:4c:23:95:19:41:bb:67:bf:
bc:ee:8f:6a:8d:76:69:2d:03:0a:76:7b:57:22:d0:7b:25:a2:
18:c7:7f:d4:9d:82:69:60:42:c1:dd:48:e4:23:96:9b:b4:c5:
80:b6:48:c8:81:26:c3:8a:07:7f:9b:8b:6d:80:e6:74:02:21:
30:0b:7f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:48:41 2025 by rpki-client