Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File: FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier: sVJ1Ca560XybNjYoFcwLfyLrIL8KSSE2LE2JrVJnePI=
Subject key identifier: 56:1A:9B:4A:29:58:B8:12:22:BA:38:4A:3D:CB:01:65:C9:23:F9:D0
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number: 01E8
Signing time: Sat 29 Mar 2025 02:23:49 +0000
Manifest this update: Sat 29 Mar 2025 02:23:48 +0000
Manifest next update: Sat 05 Apr 2025 02:23:48 +0000
Files and hashes: 1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: xwQRCe7Grw2K8eBOuugt7mxmuwXHFl6f7dLlbAdr0Oc=)
2: 59A2E9D8A01411EF8E674221C4F9AE02.roa (hash: Awesdi3w1tMsyunxz0+auFNmXjcMcElIgsBpVsZJdUI=)
3: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: XHpwnOzWirhZDyC+O+dd8moXeBpb4e61IwD/RSr7i40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08EE
Validity
Not Before: Mar 29 02:23:48 2025 GMT
Not After : Apr 5 02:23:48 2025 GMT
Subject: CN=67e759b4-1b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:3c:c2:e3:c2:31:a2:b3:ad:06:78:94:3e:
4a:ab:b6:a0:d5:83:90:a1:06:d9:8e:f7:7b:ab:ec:
29:71:ee:11:da:b9:04:fa:cd:d7:09:25:2c:b7:d5:
8e:b4:fe:7b:15:10:21:28:08:9a:b5:e0:d6:07:e7:
ef:7b:20:26:92:42:b5:4c:99:8a:55:70:01:84:3a:
73:bd:f4:8f:38:83:6a:e7:04:64:f9:cc:e5:88:12:
37:25:d3:fd:f5:40:5f:b6:9d:a9:9d:63:3a:64:3c:
d0:d4:76:53:c2:04:6f:16:74:c5:24:c6:ab:37:e7:
04:1e:f5:18:e9:c0:6a:7e:65:cf:e3:ab:12:2b:44:
df:d7:50:e4:68:9e:31:a3:61:33:a8:93:c5:96:16:
3b:e5:19:b6:96:3f:01:b2:bb:3e:49:0e:1f:70:08:
57:a7:ba:5d:7f:06:15:93:48:fc:69:92:61:88:01:
f8:9c:61:3f:23:77:ab:5e:5a:cf:2a:77:3b:e0:c3:
f1:ac:4b:11:38:f5:ae:4e:dc:f9:2c:e6:39:34:6a:
da:28:66:6f:aa:b7:ff:81:32:ed:6b:64:f7:a3:60:
0b:a7:88:7e:e8:bf:69:81:2d:01:dc:90:9d:71:e5:
15:94:10:32:92:fc:39:22:94:af:df:81:16:31:c9:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:9B:4A:29:58:B8:12:22:BA:38:4A:3D:CB:01:65:C9:23:F9:D0
X509v3 Authority Key Identifier:
keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:92:7e:1e:c1:d2:9e:58:57:f9:b4:20:b5:74:87:03:c6:ee:
89:e7:f8:91:88:f5:3d:5e:08:87:7c:bd:46:1d:2c:d9:25:84:
30:2a:7a:30:52:7f:54:fb:3e:52:e4:bc:a1:50:9e:cf:e2:1e:
84:cc:a1:20:16:34:64:5f:91:0f:a4:67:b4:bd:d2:ab:c9:a3:
1c:6a:57:af:24:6c:5f:34:52:6b:7f:09:99:8a:ab:8a:be:68:
d4:ba:40:8d:6c:ea:ac:0a:2e:db:e0:d3:9d:dd:f3:20:ce:20:
98:0a:96:bc:d0:e7:ec:fe:c3:dd:d7:59:6d:77:a1:0f:5f:a8:
c0:a2:e5:e3:8e:56:1a:06:9e:65:d1:23:89:a9:30:25:ac:66:
52:58:5f:ad:29:c3:64:ec:d9:c0:7c:6b:38:2f:07:29:85:08:
ab:91:91:dc:cd:ce:4c:8a:d2:f4:14:29:ea:fa:e9:13:dd:49:
f9:65:92:c5:c6:8a:8b:bd:52:bc:17:a5:19:33:85:c2:fa:32:
dc:c5:31:1a:76:fc:ce:ef:16:de:f9:99:3c:ac:b5:b0:69:7b:
1b:09:6a:cd:11:a5:71:3b:e0:f6:af:76:59:30:a5:29:83:85:
28:af:5e:0e:c5:09:c8:35:b0:3e:bd:bf:74:a8:94:48:f4:d2:
0f:59:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:41:27 2025 by rpki-client