Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
File: 1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json)
Hash identifier: UNs1ujT4/MYiPalrzO6vbh+gXN7Ab1zR6KU9orP6Edk=
Subject key identifier: 5D:A8:BD:91:3A:6D:B3:28:ED:F7:49:CE:0D:07:77:E3:E7:49:30:9A
Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Certificate serial: 1B2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
Manifest number: 1B21
Signing time: Fri 28 Mar 2025 16:24:12 +0000
Manifest this update: Fri 28 Mar 2025 16:24:12 +0000
Manifest next update: Fri 04 Apr 2025 16:24:12 +0000
Files and hashes: 1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: 4nuA/TvQJ4goUvfU4hhFCX8ALn64KOODETqFmB9tdHw=)
2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: N/QKwYU99zSxNpR5M+QspbIb1HfEPDfTD2V5TEy4RLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6954 (0x1b2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD5
Validity
Not Before: Mar 28 16:24:12 2025 GMT
Not After : Apr 4 16:24:12 2025 GMT
Subject: CN=67e6cd2c-5ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:d7:bd:a0:58:38:32:08:d5:dd:bf:a0:71:
ca:d0:64:d6:40:7b:29:ff:4d:89:8c:73:2c:3f:46:
5b:cb:5b:22:18:e1:55:18:e0:53:2a:7b:11:18:13:
00:fe:f2:83:44:9e:0b:fc:93:b6:98:19:ff:aa:57:
3c:d9:04:70:86:ae:f9:e4:b5:39:f6:62:8b:bc:f5:
63:d7:b6:5e:ee:25:3c:0c:14:f4:fd:16:6f:2e:b7:
ca:ff:ed:64:a7:6f:fb:91:bd:f0:5d:92:b8:8a:1d:
26:15:57:6e:9d:1f:23:77:3c:40:ec:b2:06:9f:a7:
04:45:35:ab:b2:26:a8:80:e7:d5:ec:a7:bf:11:7d:
cf:3e:30:a6:da:f9:b8:10:f9:02:d0:cd:3a:1c:c0:
c4:52:aa:23:a0:60:fd:1b:62:48:33:90:6b:7e:43:
77:5b:61:04:6b:bb:51:d9:36:5a:32:e2:cf:2d:fe:
b4:21:61:e9:93:f1:9f:b0:c4:f9:0b:11:af:8a:1c:
e6:5d:b3:51:39:e3:61:4a:84:e9:78:9c:cd:89:b5:
95:57:0f:ad:f3:11:0a:cf:8c:20:41:f2:d8:d8:45:
d0:89:0e:94:25:93:4f:f2:26:84:0a:3c:d1:68:52:
e9:61:e3:ee:be:3b:47:47:a1:66:3a:06:56:e0:49:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A8:BD:91:3A:6D:B3:28:ED:F7:49:CE:0D:07:77:E3:E7:49:30:9A
X509v3 Authority Key Identifier:
keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5b:9b:93:1f:2a:98:b5:51:8e:0f:34:46:15:50:2c:7a:51:
02:fe:cf:d4:57:5f:d9:ff:15:94:56:e3:f5:ce:00:28:12:31:
d8:18:88:f1:9c:1c:06:8f:9a:4f:ef:10:b5:5b:ac:4b:d4:ab:
32:bc:5e:fe:fc:d2:18:3b:7f:3f:3f:dd:67:98:4b:83:24:0d:
6f:e2:80:30:b4:44:f7:f8:85:62:f9:fd:aa:b3:1b:cf:ae:23:
99:64:72:7d:52:93:e8:99:60:ec:54:5a:9f:2f:d9:9f:b9:a9:
cd:c1:e0:72:f3:7d:4f:6b:cd:6b:2f:6d:08:0b:4c:61:65:59:
19:41:56:ee:08:fd:e6:ce:5d:71:a7:b6:be:9e:10:5b:1f:e3:
d9:38:5f:69:9d:ee:c6:b8:08:74:54:af:bf:6f:b4:1c:82:3f:
86:3e:53:b9:eb:21:b2:19:d7:67:a2:0c:39:e4:55:d5:02:34:
33:c3:f6:4b:6a:10:2e:62:97:cb:0e:df:7b:e2:c2:33:29:92:
3d:14:82:88:e8:b9:77:08:34:a7:50:40:f1:a8:09:c9:97:92:
b2:f4:23:5e:37:ef:15:ad:46:03:fd:e7:b9:55:bf:97:92:f1:
55:95:2d:a7:fc:72:54:9b:88:35:a0:02:f1:d1:85:df:36:c9:
31:80:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:40:07 2025 by rpki-client