Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
File: eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json)
Hash identifier: 6DPBdZzghoOWyzO0bSdDt4QWf6zzQpbyMFfGPkW6wx8=
Subject key identifier: 74:6C:13:9A:07:6C:2C:B9:61:A1:80:2B:75:9A:3B:7B:52:54:37:D2
Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
Certificate serial: 109C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
Manifest number: 1091
Signing time: Fri 28 Mar 2025 17:27:28 +0000
Manifest this update: Fri 28 Mar 2025 17:27:27 +0000
Manifest next update: Fri 04 Apr 2025 17:27:27 +0000
Files and hashes: 1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: LcOsL0uKFVLxumfVbJMM7oCRKJKOeoRl/Cb5+BB1AOk=)
2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4252 (0x109c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CE9
Validity
Not Before: Mar 28 17:27:27 2025 GMT
Not After : Apr 4 17:27:27 2025 GMT
Subject: CN=67e6dbff-4b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:96:83:05:c5:10:23:0f:af:ca:80:d2:ef:
78:a1:4c:03:08:3a:ca:40:66:40:e2:13:26:f1:23:
26:cc:62:e0:02:a1:7b:0e:56:17:b8:5d:44:c1:08:
e0:af:1c:9b:b6:71:78:0a:0e:ff:72:79:66:0b:0a:
97:13:ec:ce:5f:15:a6:d3:42:33:a4:f2:84:a6:fe:
84:e1:df:e8:4d:fe:c4:95:cd:54:97:9d:7e:1c:89:
13:78:30:99:ac:54:b1:4f:32:d3:63:d0:7a:dd:44:
3c:f5:d9:21:6f:b5:e7:ef:8f:33:1c:5e:0f:df:64:
2b:e7:4e:c2:9b:27:92:b0:de:42:cd:fa:47:fd:92:
6a:26:31:f7:1d:ac:6c:5e:b8:6c:5c:f8:4e:69:08:
31:1d:83:d5:bf:6e:b9:93:fd:2b:a3:c3:32:5c:53:
12:74:0f:ee:32:b6:3e:67:bf:8f:dd:48:ad:f4:a1:
e7:98:b3:39:52:35:39:4d:d4:de:bf:74:b1:95:23:
58:78:9f:14:ae:c3:0c:ce:30:ba:36:c6:eb:6b:fa:
f6:0b:77:90:d8:15:15:43:2d:40:1a:b2:73:2b:46:
a3:e1:2d:7d:70:1e:d8:5b:aa:9c:38:f6:ff:64:b9:
db:2b:26:66:70:64:54:76:9e:36:22:38:9b:c0:bc:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:13:9A:07:6C:2C:B9:61:A1:80:2B:75:9A:3B:7B:52:54:37:D2
X509v3 Authority Key Identifier:
keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:26:a8:2f:07:77:0e:fd:d9:cc:f3:3b:11:21:f7:84:a5:
61:32:e6:8e:2e:7e:74:a6:fb:59:1b:f5:00:ad:f6:29:71:0a:
63:29:d5:5c:6b:4a:ab:0c:d4:c2:f2:e9:24:57:7b:ac:a2:c3:
b5:d2:c7:c0:21:c7:f6:0f:d5:a0:86:36:fd:da:4f:58:6d:65:
0d:72:3f:ec:42:ee:f3:74:59:f4:df:69:71:69:be:d0:e6:85:
8a:70:31:74:aa:19:73:e3:66:09:a1:65:9d:57:8f:53:b2:f8:
18:6f:d4:27:e6:d1:a0:e2:c8:5a:a1:38:db:46:38:65:7c:18:
0e:20:ca:a4:3b:aa:61:e8:e2:8b:c8:ca:a9:bf:b5:55:8e:d5:
a9:1d:cf:e5:2a:cf:72:34:be:83:19:fe:47:a6:ae:06:df:d7:
4e:f7:57:66:b4:47:13:b6:5a:a4:4b:7c:a1:4e:78:83:ca:9e:
67:6f:99:d8:21:97:41:56:6e:22:46:c2:ef:47:fd:5e:ed:8c:
a4:71:e4:b6:80:41:1f:b1:79:48:8d:ae:08:3e:df:9a:1f:e2:
f4:c1:9b:73:6e:f6:61:f7:dc:e7:f5:e1:f1:48:38:32:bc:eb:
85:65:75:d6:11:da:2e:1f:72:46:9c:43:93:a8:2e:7c:80:da:
b7:14:55:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:59:27 2025 by rpki-client