Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json)
Hash identifier: dFcWkhbXPCyAg42i58ML+GicApZQk0LbcOFAsdf33HA=
Subject key identifier: 28:82:1A:9D:D5:CD:F7:2B:30:84:FC:75:FF:71:90:72:7E:1C:F5:F4
Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Certificate serial: 0CF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
Manifest number: 0CED
Signing time: Fri 28 Mar 2025 18:14:59 +0000
Manifest this update: Fri 28 Mar 2025 18:14:58 +0000
Manifest next update: Fri 04 Apr 2025 18:14:58 +0000
Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: PO3a6BJ31AvfFJILEO/Rz31KXLXspT30Sc23bKMH1Dg=)
2: 5563895C378911EABB08EC0EC4F9AE02.roa (hash: WnvG/G2ljF/bLCjnLck6amfr8nqRxURnaP7xF6JQcoo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3319 (0xcf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DA6
Validity
Not Before: Mar 28 18:14:58 2025 GMT
Not After : Apr 4 18:14:58 2025 GMT
Subject: CN=67e6e722-fda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:4e:75:12:f6:d8:1d:77:60:91:6f:5a:34:
bb:43:c7:50:28:36:02:77:2a:e3:d5:9f:ba:dd:9a:
52:c4:4e:d2:47:0e:4d:58:d9:f4:8a:ca:7c:06:ec:
f1:00:ac:2c:04:64:87:cf:d2:8d:74:03:4e:c0:25:
28:a5:92:d4:3a:e3:4c:ac:fc:f8:bb:6b:80:0a:15:
fb:3c:f6:6f:f1:a5:d2:26:ad:2f:5d:c6:24:64:8c:
17:c1:19:d4:02:9b:8d:fa:a5:3f:79:5b:5f:25:19:
45:a0:33:64:6c:95:18:a9:a4:ba:db:c2:14:e1:ca:
ad:fe:18:b1:5e:f1:28:c9:87:12:e9:d3:a5:07:d2:
03:df:7c:ef:86:4e:c3:3d:a6:bb:f1:f5:fa:2d:29:
ca:57:9b:5e:2b:38:0e:af:43:1f:19:1c:9a:43:bb:
57:4e:14:56:48:06:a8:d9:5e:c4:4b:41:63:e1:94:
de:c2:c9:7a:98:27:87:1a:cb:bc:f0:f6:1f:a7:1e:
e1:f3:47:84:5f:4d:f0:11:c9:91:08:96:45:64:ac:
8e:7d:f1:4d:6e:57:79:60:bc:18:95:0a:69:ff:ce:
66:e8:27:e0:1c:dc:6d:5c:f1:73:2b:ac:93:27:6c:
b0:79:e0:b0:42:03:a7:2f:2a:d6:6c:9c:e1:e2:67:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:82:1A:9D:D5:CD:F7:2B:30:84:FC:75:FF:71:90:72:7E:1C:F5:F4
X509v3 Authority Key Identifier:
keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a2:1f:e5:0a:2f:6f:46:2d:e4:b0:4b:02:37:e4:09:be:ce:
a3:6f:85:fb:5f:9a:6e:eb:41:37:82:a0:cf:2d:9b:09:34:e9:
0b:bc:a0:cf:17:80:02:e8:de:87:10:fb:79:82:f2:3f:74:ae:
64:ec:68:3d:09:05:e7:58:26:7e:36:ff:63:33:ff:30:c8:59:
28:71:49:4c:69:9e:1b:89:5a:5a:9e:01:db:e5:7d:eb:f5:17:
b3:79:91:f7:48:b2:88:bc:75:1c:8c:35:e1:27:e1:92:0f:8e:
52:75:fc:f3:38:8e:5f:18:66:00:45:c1:0c:8d:d2:18:5c:19:
0e:4d:ee:93:09:94:c7:ff:b6:dc:01:13:43:83:f4:f7:22:9d:
1d:32:df:d3:e8:ae:fc:3c:c4:05:18:1f:be:bd:3a:37:a9:af:
20:16:83:c6:aa:24:7a:07:06:28:6f:5d:43:a6:11:f7:31:c7:
98:3c:9e:f6:dc:2b:ce:c9:6c:14:e8:eb:2c:c7:af:48:e6:b9:
36:22:5c:99:33:3a:6d:31:7e:bd:13:7a:56:c8:b0:ff:e1:42:
cf:fa:ae:38:93:89:22:e3:77:89:fd:7c:41:6e:56:62:dd:92:
be:f7:5e:96:c1:9c:06:26:da:7b:0a:65:18:c7:01:ab:b2:b8:
b9:1e:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:46 2025 by rpki-client