Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
File: X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft (raw, json)
Hash identifier: B9rrPSn9Yp3rWsJgW41xxywfRGUnDx4lB7XHX/TW8wk=
Subject key identifier: FB:E9:E2:3D:18:ED:EA:0C:82:72:BC:8E:2C:71:91:8C:DF:25:A5:A1
Authority key identifier: 5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3
Certificate issuer: /CN=A91C5413/serialNumber=5F9999CDA64A2A1A662E54E61A1D5798C688CCC3
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
Manifest number: 07B0
Signing time: Fri 28 Mar 2025 22:43:16 +0000
Manifest this update: Fri 28 Mar 2025 22:43:16 +0000
Manifest next update: Fri 04 Apr 2025 22:43:16 +0000
Files and hashes: 1: X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl (hash: RaHgqxyV9WjgX8xhflpU8ks6jiLxLaSOVvRZg0Df1tQ=)
2: 5C925054E06811EF895B471EC4F9AE02.roa (hash: 8CrFRNgJH37C5OagvUvXSdKLU66lJIBPcXhUUvO4gzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5413
Validity
Not Before: Mar 28 22:43:16 2025 GMT
Not After : Apr 4 22:43:16 2025 GMT
Subject: CN=67e72604-10f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:07:66:89:85:cb:a3:5b:02:62:1e:3a:1c:
3f:6b:27:ca:7e:10:25:db:7f:de:36:f8:bd:5e:2d:
07:82:07:53:8f:2a:c9:31:ea:a4:be:fb:22:cd:e5:
00:de:3d:56:1d:19:90:27:4f:f0:d7:8d:88:81:b0:
e8:6f:76:d1:f3:1a:3b:e4:f1:47:7b:21:1c:a1:a7:
c9:8f:5a:ee:85:b7:a0:44:3b:f0:f7:0b:79:04:7d:
d8:a9:be:ca:c1:d1:e3:c5:69:a7:a4:6a:8d:d2:33:
59:64:ca:93:d9:f2:5d:ee:a6:80:2a:9e:8a:7c:b1:
f0:77:44:1c:5a:d6:46:ef:cf:78:fc:df:f2:54:a3:
63:10:1f:cd:95:0b:da:fe:2d:60:46:59:09:89:8e:
1b:95:67:06:8c:c4:cd:4a:5f:ab:2f:fb:5c:6b:76:
b5:04:ea:4d:70:1f:bb:a8:44:be:14:29:b8:93:d3:
b3:7d:be:27:c7:3c:2d:22:c1:5d:54:c7:3d:b2:55:
0b:39:7d:d3:dc:a6:e6:f8:99:4d:89:3a:d3:d1:b7:
e2:99:f2:c1:fb:dd:89:0a:7f:77:e6:0e:88:06:57:
28:9a:3c:18:8c:e4:d1:00:7c:2f:f5:f1:8f:a5:3a:
d8:2b:a3:2a:ec:c2:38:ea:37:3e:da:ca:91:20:15:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E9:E2:3D:18:ED:EA:0C:82:72:BC:8E:2C:71:91:8C:DF:25:A5:A1
X509v3 Authority Key Identifier:
keyid:5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:7f:38:10:8d:58:e3:7a:9c:4c:d1:b1:21:0f:8e:64:7f:9e:
bf:1a:06:87:8b:be:86:94:d1:3a:22:92:35:61:9f:e9:64:a1:
ab:39:80:af:47:7d:56:12:7e:69:9b:28:15:d4:2a:88:92:16:
98:3d:ce:3d:38:42:d6:81:1c:02:11:07:1b:49:4e:a0:6e:bf:
cb:a7:41:0e:95:99:d8:2d:75:0e:20:fa:f3:0f:b6:23:7b:a9:
2c:0c:a0:f4:eb:f8:8c:98:e0:ad:aa:fe:24:42:b9:01:32:8d:
e7:d7:74:93:04:23:7b:0d:a5:b5:bb:d2:4c:ad:4b:c7:94:80:
36:5e:d3:7c:9d:0c:b0:a6:13:ce:73:07:ef:9e:5d:a0:01:5a:
c5:b6:7c:99:de:a6:0b:18:0f:d2:64:50:82:e2:62:29:14:f8:
40:70:94:2e:08:6e:78:5c:8d:6a:9a:47:94:8a:b6:93:57:42:
12:9b:ca:fe:36:92:26:8a:d3:3a:da:19:af:b7:2e:07:07:d2:
98:6c:0b:f1:3f:a7:d6:b2:11:f6:a7:57:d0:9c:94:2f:6f:b6:
02:23:94:5e:1b:f9:0c:f1:4c:8d:7e:f9:5d:cd:8c:10:ca:b9:
6f:71:5b:e9:08:45:1f:00:2f:92:bc:af:fd:06:70:de:13:12:
8c:64:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:34:12 2025 by rpki-client