Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft
File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json)
Hash identifier: fNFU/Bk/tYKg1gfXDZcN9B1Jv23jlNryCgEBVzyR2Ns=
Subject key identifier: EB:CF:DF:7A:96:DB:0A:48:4C:35:86:80:B5:C7:5E:BC:A4:0B:81:A6
Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47
Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147
Certificate serial: 08E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft
Manifest number: 08DA
Signing time: Fri 28 Mar 2025 20:40:52 +0000
Manifest this update: Fri 28 Mar 2025 20:40:51 +0000
Manifest next update: Fri 04 Apr 2025 20:40:51 +0000
Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: VMdfzZ+8gSuHclnlFrgm3pc32UC7+50kEzkvb6/9kXY=)
2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: uVDqEWvFSoFCutjWZ+pfrsUVRlgkPu0drLynarAKc08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273 (0x8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8E33
Validity
Not Before: Mar 28 20:40:51 2025 GMT
Not After : Apr 4 20:40:51 2025 GMT
Subject: CN=67e70953-6557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:71:96:a3:1c:30:d8:69:68:a5:7c:32:a8:
93:a6:8f:9a:98:c4:91:89:e1:08:d9:44:15:5d:38:
e7:ce:e0:a5:fd:38:09:29:3e:86:0f:6a:95:01:12:
37:40:77:da:e2:3d:5e:30:b8:3e:b9:28:9b:96:1e:
50:a7:9a:27:b1:3f:07:80:f0:47:25:ad:84:26:a1:
f7:3e:74:d0:ac:30:8c:8a:a6:32:88:a7:c8:b8:c7:
37:1b:7a:89:6b:bb:bd:e0:75:fc:b4:77:3d:a4:eb:
9a:50:95:36:40:b3:92:ae:fb:87:ad:d7:bd:7a:44:
f1:a7:99:42:6a:00:ac:1a:41:18:78:3b:17:a0:fb:
32:07:1e:a9:a5:6f:3d:ed:6a:d1:14:c2:db:ba:c1:
ab:c6:3e:01:de:76:e8:9e:ef:f6:6c:7c:98:b0:db:
10:4d:14:f6:e1:72:f9:a3:df:5a:4f:68:bd:6b:81:
59:e2:60:52:41:57:7c:01:d0:62:c0:16:c0:64:ce:
e7:9a:96:4b:4f:48:03:2f:d9:62:fa:8b:25:e0:ed:
00:cb:05:88:2d:d2:99:64:20:8f:6a:51:0a:1d:ca:
db:85:33:e5:d3:cb:63:29:33:3e:a1:99:97:f7:28:
bf:6e:3e:32:0b:36:00:36:4f:ba:97:a2:a2:e9:62:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:DF:7A:96:DB:0A:48:4C:35:86:80:B5:C7:5E:BC:A4:0B:81:A6
X509v3 Authority Key Identifier:
keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ca:64:57:c7:a3:1a:ec:72:3b:08:10:06:8d:c5:6b:1d:e4:
e0:f4:6d:09:05:85:81:30:2d:4c:68:e7:a2:b4:16:71:93:58:
90:93:84:b1:13:2d:ab:24:c3:d5:e3:de:10:69:7f:1d:f9:e8:
8a:67:af:ec:62:53:e0:d7:e6:c5:fa:84:06:ea:8e:87:aa:55:
ff:be:e7:3a:0d:f8:5a:6a:e7:a9:b0:82:9d:86:2d:0f:cc:31:
e7:1a:a5:bc:6e:c3:53:a4:0d:9d:ea:44:e9:9b:fa:32:ad:f3:
05:48:08:01:c9:bc:21:b4:ac:38:d1:e1:95:4c:80:a5:f2:3f:
1d:f4:e2:e8:e0:da:cf:ef:f8:d4:02:e7:a8:20:c2:2b:41:e0:
7e:fd:41:23:7d:a8:88:76:de:d2:dc:26:03:48:7a:53:02:a7:
8d:21:70:22:63:eb:62:3e:6e:19:e5:9e:c7:2d:fd:8c:a7:19:
2b:63:89:4f:c1:8f:e8:5c:c1:c4:28:86:a8:42:72:eb:11:94:
5c:ae:6c:2a:ef:b3:13:fd:39:16:db:f6:fc:b3:22:7a:ab:43:
71:66:0f:c9:05:fc:35:71:2e:f3:eb:47:2c:6a:ab:e5:cf:e4:
2e:09:21:c8:07:37:38:82:f7:e2:29:08:94:e7:b9:fe:a7:22:
64:82:4d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:54:34 2025 by rpki-client