Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json)
Hash identifier: vZGOsFh/RYWsAkcIaGLVgxcktl5nybIJ7U/6j+ZD1oU=
Subject key identifier: F5:7F:20:FC:BA:6A:B4:5A:34:14:8F:50:2D:64:36:61:1E:17:E6:9E
Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Certificate serial: 117C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
Manifest number: 1173
Signing time: Fri 28 Mar 2025 17:20:28 +0000
Manifest this update: Fri 28 Mar 2025 17:20:28 +0000
Manifest next update: Fri 04 Apr 2025 17:20:28 +0000
Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: jsE/06tW+L2Ty8pj4jhvF0UMXYa04IhT9p1O2lcwBu8=)
2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: M4Uy68TNp94xFF+NcUEXpxwPGkJfanh0Twj3I7FRSFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4476 (0x117c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C85E9
Validity
Not Before: Mar 28 17:20:28 2025 GMT
Not After : Apr 4 17:20:28 2025 GMT
Subject: CN=67e6da5c-0c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:59:b9:89:ee:27:4f:30:8b:07:e5:d9:9f:
6d:b8:e5:f6:62:7a:d8:f7:46:de:a0:db:a8:0f:ec:
3e:62:0b:87:6c:dd:09:f8:89:37:4a:d2:ba:7e:91:
e3:5b:f4:d5:bd:56:82:75:8e:9f:45:0e:be:ed:1a:
03:56:01:3c:77:2a:ad:96:5c:31:0a:17:83:58:77:
2b:e1:cd:1a:e7:b7:84:a7:ad:5d:66:ca:b1:6d:3c:
a1:3d:02:b3:f0:11:4b:51:ac:ce:36:8e:7f:83:b1:
ff:18:08:20:3e:03:d4:40:b3:c8:51:54:9f:aa:66:
ce:ac:f4:db:f0:07:fa:ec:5d:d6:21:15:a7:89:7f:
be:fe:3d:ef:e4:82:a8:1b:64:2b:ae:2a:6c:f7:3b:
4f:2a:d8:a3:0e:e2:62:ee:55:ee:dc:de:3a:27:cb:
71:25:e3:b9:b5:1a:73:46:4b:77:a6:a3:d5:df:e5:
5e:2e:f5:69:81:f6:71:e0:f8:22:7f:ed:9c:ba:4c:
db:c7:fc:ec:d5:4e:37:df:9b:5d:fd:9a:c9:29:92:
c2:ca:1c:ca:88:a5:4a:95:02:28:72:a9:fc:46:7a:
be:90:ba:d4:7b:35:cc:35:27:9b:f2:18:25:5a:ae:
97:a0:49:d5:03:11:87:1a:e3:63:5e:17:42:59:29:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7F:20:FC:BA:6A:B4:5A:34:14:8F:50:2D:64:36:61:1E:17:E6:9E
X509v3 Authority Key Identifier:
keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a9:3b:4b:1a:53:8f:d5:f1:3d:71:00:27:39:c7:44:39:84:
52:6f:41:82:4f:d2:d8:05:be:77:3a:bc:e8:18:35:11:e4:e1:
af:7f:13:09:54:b7:14:1f:d8:3a:3f:e6:a2:47:cb:64:66:82:
c2:30:49:f8:10:b2:37:73:83:c7:22:62:5a:6d:31:41:ac:59:
4e:80:26:d7:80:ca:e3:77:0b:3a:85:6e:d0:db:b6:2e:63:6e:
cd:c9:ba:e8:22:01:57:9a:0a:af:82:58:71:48:6d:84:db:7c:
f7:cc:fd:f7:a5:c2:32:20:cb:0f:93:bb:6e:6d:80:7c:f4:90:
56:d1:df:92:de:4f:78:62:33:b3:6d:c9:f0:50:d8:07:3c:a8:
75:8c:f7:2d:96:7e:57:0a:63:a9:b6:ec:94:ec:2e:77:8a:6e:
88:a6:0d:20:52:be:5f:df:02:88:d3:f8:10:49:e6:f4:85:c0:
08:5a:1f:17:db:09:a5:8a:c4:8d:2b:48:d8:4b:12:83:f4:43:
03:4e:6c:be:0e:5e:b8:8e:c6:dc:74:95:ab:77:4f:59:c6:e5:
73:47:f6:4a:17:ce:ed:74:26:11:f9:28:84:4e:1f:51:a4:c4:
63:0f:2a:4b:b1:2f:cb:2f:28:54:f3:ad:ca:4e:fb:21:9f:d0:
47:17:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:38:04 2025 by rpki-client