Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
File: e8dWLzeFS9JjniQQ1nPld8v7MR8.mft (raw, json)
Hash identifier: rQqILGcM8jJgSrUtNFtG6Td23I9oj7MLVMSAIMGlzak=
Subject key identifier: 48:AA:15:44:E8:50:7E:79:A4:AC:2E:84:C1:91:FD:90:F4:69:C8:B7
Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F
Certificate issuer: /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
Manifest number: 1C
Signing time: Sat 29 Mar 2025 07:17:55 +0000
Manifest this update: Sat 29 Mar 2025 07:17:54 +0000
Manifest next update: Sat 05 Apr 2025 07:17:54 +0000
Files and hashes: 1: e8dWLzeFS9JjniQQ1nPld8v7MR8.crl (hash: p7TDa3+N9Ah0yGKmVYtxnOVETubX+Zdv3i/EL5gI38Q=)
2: C6D4BDF8ECFC11EF9447031DC4F9AE02.roa (hash: vKvGvc7f1ooIQwok9o5vzvjlKuAVRyu9TkNTlmBt1ZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C36C2
Validity
Not Before: Mar 29 07:17:54 2025 GMT
Not After : Apr 5 07:17:54 2025 GMT
Subject: CN=67e79ea2-3a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:64:0d:0c:8f:43:92:13:3a:37:84:bc:ca:
60:63:27:84:ed:0c:f3:93:a3:3c:99:22:bb:f3:53:
34:1f:47:45:10:05:e8:c8:ca:5e:27:0b:76:8c:a6:
74:55:05:53:2b:4b:1f:63:43:30:19:fd:1e:4e:7a:
30:f2:30:61:00:11:c5:ee:7a:9c:f8:9a:b3:53:1c:
cf:88:5e:fc:7b:cc:4a:68:88:22:5d:2d:f9:7b:43:
2e:e7:8c:99:b2:ff:56:50:e5:71:58:07:b5:21:97:
a7:8e:5d:57:1d:d5:88:37:f8:bb:dd:59:e9:cf:88:
ee:84:0f:f4:7b:f8:43:28:65:a3:b6:73:9c:f5:ae:
14:5c:ff:e2:76:e2:62:48:02:fc:a9:9f:11:50:db:
03:5f:93:b6:4a:7b:95:76:83:06:a9:36:7c:1b:83:
44:06:42:63:7a:9c:33:34:22:ae:49:c7:a6:75:68:
75:12:b9:e6:9a:91:a4:c5:71:93:14:de:4d:ae:53:
c4:b8:98:5f:28:e0:bb:da:01:22:00:19:50:c1:25:
df:a9:44:41:c2:8b:14:c8:c7:9a:3c:27:4b:d6:b4:
fb:08:5e:c4:6d:25:61:77:11:96:54:5a:a8:1a:86:
b8:73:12:70:01:5e:9d:a4:29:2f:c7:d9:91:dd:35:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AA:15:44:E8:50:7E:79:A4:AC:2E:84:C1:91:FD:90:F4:69:C8:B7
X509v3 Authority Key Identifier:
keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:36:30:1b:6e:73:23:fd:34:61:88:82:6b:62:5e:b0:f6:22:
93:f3:b3:78:2d:a1:99:b6:88:7f:99:db:b1:cd:1c:f0:c2:6a:
db:14:14:2a:68:12:82:74:66:cb:ac:0d:c7:d7:19:8f:c8:87:
09:17:00:7e:a5:9c:3a:26:2e:7f:cf:85:4f:1f:ba:d8:24:8d:
5f:73:56:9b:3f:53:de:2f:ab:93:2b:30:4a:34:b6:98:21:8f:
4b:c2:0c:af:8b:b3:98:a6:d1:57:53:b7:d7:b1:f3:21:50:a8:
59:db:90:1c:33:37:c7:86:29:4e:ea:26:b7:66:37:89:08:22:
e9:f5:8e:57:01:51:42:74:e9:56:1b:b6:91:50:dd:4f:a3:31:
ce:a9:1e:a1:a5:2f:e0:2e:51:f9:4c:cb:b3:a0:83:f6:5f:61:
13:44:af:36:7e:25:88:3e:7e:c4:c7:00:70:1e:4f:1a:4a:65:
18:c9:56:6e:fb:c2:f1:47:37:89:7c:14:ee:ab:d1:e7:53:77:
b2:4c:45:93:cf:15:57:c8:f8:40:04:f7:27:1e:07:48:28:5c:
a6:83:cf:d0:b4:4d:9f:7a:7f:d6:54:92:42:45:69:a7:d0:85:
13:e8:f0:94:ea:89:1f:a5:65:7a:d3:26:ce:3d:22:df:8c:66:
6e:cc:eb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:39:33 2025 by rpki-client