Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json)
Hash identifier: ITDjwA5ZhmnKzW1+uI6r1ylzW45L8fjOiR5HFcHAzKM=
Subject key identifier: A0:71:A2:FA:16:49:98:48:A9:8B:23:FF:83:B9:36:B7:8E:4D:A3:9C
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial: 1267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
Manifest number: 1246
Signing time: Fri 28 Mar 2025 17:14:45 +0000
Manifest this update: Fri 28 Mar 2025 17:14:44 +0000
Manifest next update: Fri 04 Apr 2025 17:14:44 +0000
Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: Pi/34C/Ukyy0xkybVxdN+k/TB0146d5C9wrcqHajHhA=)
2: 36AFB016FC6111EEAFBE4719C4F9AE02.roa (hash: CA19srqh0Q6qSkpS5f1WI4ZLZ8befQ3b095HOMVpe8Q=)
3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: RyCNpZPyi/g+YauzqBs7rDG8vGnkFGaOzI70T5pPGJQ=)
4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: CyPCkB+xF7/7LV5tDeHmCsATVCTbsm9N+YA32mChPrU=)
5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: ulDXXytzKLhDZDPUF/WwhWO/+4HtH6mgUrwehHRDvEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4711 (0x1267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE6A
Validity
Not Before: Mar 28 17:14:44 2025 GMT
Not After : Apr 4 17:14:44 2025 GMT
Subject: CN=67e6d905-e09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:11:45:ec:45:bd:56:53:97:3b:f7:92:8e:
fb:6d:c3:1f:8c:e8:4f:32:d7:41:a2:ad:d3:3f:f2:
a3:a9:a0:04:a4:c0:ba:20:7c:ac:72:a6:b0:f8:ef:
67:5a:27:3c:42:42:c4:d6:59:bb:a9:bc:2c:0d:70:
74:74:1b:46:b7:20:dc:4d:64:7f:48:d1:aa:34:85:
5d:0b:c6:67:61:77:b3:63:e1:4d:bb:19:cc:27:ee:
78:40:3e:34:76:1b:fc:78:50:a6:c5:79:87:5a:cc:
2f:4d:d3:71:04:1a:1f:3e:6f:25:e9:cf:e1:82:2d:
7a:76:bf:95:93:af:a7:56:e8:bd:1a:fb:89:bd:43:
43:06:6a:58:ef:56:23:48:0c:66:79:8a:a6:2b:d5:
e6:fb:9d:90:dd:4e:28:e7:2e:5e:2e:a8:be:c4:d1:
ca:04:16:a4:1d:7c:28:96:1a:c2:35:4a:b4:f3:61:
22:34:c2:f7:5b:3d:30:89:fc:1f:a4:a1:d0:5a:07:
9a:4a:a8:d6:29:5d:cc:32:c3:b4:ca:7b:08:5f:f8:
b1:24:39:29:d6:81:ad:50:4e:95:3e:8f:cc:01:1c:
8f:96:06:60:96:74:9d:ff:6b:80:30:a3:e6:5a:38:
be:84:53:b3:44:d8:a8:e0:37:5b:27:8d:7b:53:67:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:71:A2:FA:16:49:98:48:A9:8B:23:FF:83:B9:36:B7:8E:4D:A3:9C
X509v3 Authority Key Identifier:
keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:e5:f1:4c:68:0a:4f:27:f7:59:64:24:b8:ec:eb:a9:86:fd:
77:30:99:6b:18:32:0f:66:26:66:46:e7:27:ad:5c:47:95:d0:
a6:15:db:dd:3a:cc:5d:28:20:7c:8d:36:84:88:34:04:a4:12:
83:5c:a3:a0:c0:66:84:98:8c:bd:cc:22:b5:ad:c5:2e:e5:3b:
22:c3:67:71:d4:3a:65:76:8b:c1:47:51:e2:3d:6f:c9:da:b4:
04:db:54:2e:3f:a4:2b:6b:15:61:27:9f:b4:c3:04:d4:99:9a:
3e:84:c0:fa:33:3a:b6:e5:47:58:d3:60:30:4c:5f:66:c5:6b:
13:6b:af:f9:ac:4b:4f:27:9a:46:df:65:da:c5:6c:73:31:23:
2f:89:72:a3:21:4b:4f:57:c4:f5:4a:7c:5c:66:77:2e:5f:4e:
1a:2e:5c:e6:97:80:f0:69:9b:64:49:48:c1:82:1c:71:89:d3:
ba:0b:52:b7:c1:39:0f:3b:e7:24:07:13:3c:6c:fe:7d:bb:d4:
4a:93:84:01:36:c7:10:ec:91:7d:73:2c:f6:75:c3:ff:ff:93:
f5:3c:b2:78:23:67:bb:f4:c5:33:df:b5:e4:da:e0:dc:17:4a:
1f:e3:3e:d0:48:5c:89:a4:28:17:0a:87:3d:83:29:f0:ae:bb:
ef:b1:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:54:37 2025 by rpki-client