Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft
File: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json)
Hash identifier: g75zECwYtSqZuZBI4/9DaYxKTEJ9LHF8tVzSJkgGDFw=
Subject key identifier: CB:C6:30:10:F1:19:00:7F:C3:B3:1C:03:99:CA:7C:8B:32:23:96:C7
Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B
Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B
Certificate serial: 075D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft
Manifest number: 0748
Signing time: Fri 28 Mar 2025 22:00:16 +0000
Manifest this update: Fri 28 Mar 2025 22:00:16 +0000
Manifest next update: Fri 04 Apr 2025 22:00:16 +0000
Files and hashes: 1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: fhVs9ZI+uBVU1MQlP3QxrWnJedLVLsou6TgJcQkJLnU=)
2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: PfwMudypLXBG0l/8zURzPSjDmL/lqt08xsdYYn3A5t8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C744F
Validity
Not Before: Mar 28 22:00:16 2025 GMT
Not After : Apr 4 22:00:16 2025 GMT
Subject: CN=67e71bf0-ae40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:92:b9:1b:32:a8:16:94:9d:46:73:43:81:
13:fb:d1:2a:1a:83:64:21:99:9a:b0:40:1a:84:8e:
fb:d6:40:c8:92:18:a3:9b:2f:7e:82:54:f9:e1:6c:
a5:18:cd:d5:b1:56:f8:21:bf:31:9f:ac:a8:05:32:
a3:02:f4:ab:1b:75:e0:f6:a1:38:fe:74:7f:77:62:
60:07:d2:fb:ef:b9:22:30:56:19:c3:b2:ee:85:45:
ad:f4:20:61:8e:97:fd:3b:c5:3a:d0:c1:08:3e:7d:
72:5e:95:27:9e:53:3f:61:b7:e1:71:38:0c:30:7a:
8e:84:8a:da:91:16:cb:7c:d2:fc:05:8f:16:d6:5b:
9c:a2:ec:4b:ad:c3:c4:ae:34:74:e6:21:e2:b9:79:
c5:d5:20:bc:d9:b9:0a:1e:34:5e:1d:99:3b:55:cc:
84:06:c9:42:54:c0:0a:5a:17:7d:f2:d0:5a:89:65:
1e:c7:51:0b:cd:ae:5f:a4:84:ec:d6:f6:1c:8f:92:
10:01:8a:83:9e:af:77:19:dc:86:61:33:a1:f3:ae:
44:42:94:4e:f3:59:ab:25:bd:fe:c5:04:cf:be:aa:
05:91:6e:b9:0c:b1:cf:be:f3:6e:fe:84:fa:d7:57:
aa:6f:f7:96:67:6e:95:83:3a:4e:f7:e6:a0:9a:af:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C6:30:10:F1:19:00:7F:C3:B3:1C:03:99:CA:7C:8B:32:23:96:C7
X509v3 Authority Key Identifier:
keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:9d:60:ee:2f:e1:16:24:c1:54:02:93:9e:3a:a0:c6:d5:43:
d3:53:31:c4:f3:f1:53:32:a1:37:ad:58:b5:7e:de:5c:b8:dc:
e4:37:23:ce:4d:17:e0:d5:91:63:f9:dc:a8:8d:21:5d:c8:2b:
e5:e2:52:fa:40:0c:fd:ee:d4:5a:71:81:c4:c6:ac:42:5a:ed:
6f:c4:95:ec:7e:0e:e3:0e:6d:5a:32:20:27:b3:d6:48:92:53:
cd:5c:00:1b:86:9a:5a:3c:2b:a1:2f:8d:26:e5:88:68:25:29:
4e:89:79:c1:b6:10:c8:9a:b9:64:4b:6c:5b:a4:83:b6:2b:67:
ba:c9:1f:28:b2:b0:93:d0:73:db:76:df:cc:11:2f:3b:41:a2:
a1:0d:c5:25:d8:c8:fe:55:1a:dc:5e:49:75:63:47:1c:69:6a:
82:03:24:f3:a5:d5:f5:54:6d:2a:02:db:af:fc:18:1a:91:2f:
ef:9b:05:f5:66:6a:23:ba:e8:0d:0c:5f:bb:61:ab:76:1d:48:
c5:f5:b0:58:64:95:6f:98:53:b1:e8:d2:b8:74:3c:3e:d0:43:
3a:b3:89:a4:a3:e8:7c:5d:db:e3:19:98:b7:41:3f:0c:e8:aa:
48:9e:a8:b0:43:8d:fd:e1:0d:ae:35:b5:59:15:aa:4b:f2:29:
d3:e5:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:28:43 2025 by rpki-client