Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json)
Hash identifier: F6OJ5ml3q+cUmYFzwW4WJrVAktrKnh5aP1gjHEPixYI=
Subject key identifier: 3C:25:08:76:CA:E5:99:3E:AB:EB:8D:C8:E7:A5:85:4A:32:A5:22:67
Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Certificate issuer: /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Certificate serial: 06FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
Manifest number: 06F0
Signing time: Fri 28 Mar 2025 22:15:20 +0000
Manifest this update: Fri 28 Mar 2025 22:15:19 +0000
Manifest next update: Fri 04 Apr 2025 22:15:19 +0000
Files and hashes: 1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: 5b3LYxEWpsHSdbvOCxY7VMiPOisdzctDlsO801Z0ngY=)
2: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: QraXnZCET4DytM5/10lXcxYbwH8hmrtP3mDCaQ6jJXk=)
3: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: TJhxFRJSMHDZftvXajaD5yBRa7CxOx/OA+78HFtd2eM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1786 (0x6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB816
Validity
Not Before: Mar 28 22:15:19 2025 GMT
Not After : Apr 4 22:15:19 2025 GMT
Subject: CN=67e71f77-d155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:07:41:a1:9e:c8:e7:70:0d:8e:94:0c:ff:
77:ca:23:7b:e3:cf:95:c7:f7:82:48:14:9d:2d:94:
ec:55:d2:de:2b:76:d9:95:d5:f4:67:89:25:82:f8:
e9:51:58:85:01:04:31:4f:b0:b9:7c:c0:9f:b4:fe:
ce:9a:f8:9f:9f:80:62:c6:6f:23:76:b5:84:27:b2:
cf:d0:a3:56:01:04:f5:72:4f:10:14:74:98:e4:b9:
cd:23:81:d8:15:1c:27:5a:28:6e:0e:3d:4b:36:13:
af:d0:38:e7:7e:00:39:f2:e7:58:9d:fd:6a:48:b4:
6c:da:72:1f:00:be:54:e7:32:78:f4:c5:9f:0c:d9:
bc:c2:6e:b9:f9:cc:66:a9:af:8b:c9:c3:5a:b7:01:
25:4e:a3:3f:e4:a6:d2:6c:ec:c4:27:4a:ab:08:27:
7f:4a:5c:c9:6d:15:f2:96:10:3a:f2:cd:46:f2:c0:
06:00:35:47:51:64:ab:92:d0:c3:3f:da:6c:c7:2c:
a0:42:10:2d:cb:b8:6e:df:d1:8c:36:40:84:d0:de:
c6:45:5e:e9:7f:8f:87:9f:a1:ae:9c:df:b1:bd:84:
77:d2:d0:f8:59:75:4c:45:1c:11:cd:fe:e5:28:69:
69:40:a2:72:61:86:10:44:0b:dd:e7:15:8f:e4:ad:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:08:76:CA:E5:99:3E:AB:EB:8D:C8:E7:A5:85:4A:32:A5:22:67
X509v3 Authority Key Identifier:
keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:f2:bb:cd:56:de:1e:66:51:ab:15:85:a3:c5:3c:c8:2b:16:
ff:97:bd:af:20:ce:c8:9e:a7:5e:77:a8:23:95:6d:d9:1e:24:
56:70:25:eb:e8:1c:a3:f3:56:22:b7:ce:62:12:8e:8a:f2:f3:
d6:ff:df:4c:18:d5:c1:16:38:07:32:a7:f7:01:1a:b6:b1:51:
8b:0d:2e:a7:9e:d3:08:64:10:79:e7:66:ae:69:23:27:8f:c3:
ca:a0:f2:23:a7:5f:1b:4b:fc:0f:7b:8c:7f:ca:6f:60:09:e8:
af:25:80:5e:5c:c0:f5:69:0f:a6:11:8d:d3:0a:38:2c:59:36:
fc:35:86:68:6f:3b:6c:32:43:3b:97:c0:4c:6e:f4:9e:66:b7:
54:ff:5e:fc:b8:1e:dc:c8:f0:69:5c:1d:84:59:ba:27:fb:44:
5b:2b:1f:39:40:b7:10:3f:ec:c8:97:06:1d:ae:0a:fd:8b:ca:
e8:8f:1a:c5:d3:9e:1c:c4:88:37:f7:81:76:0a:34:02:63:ab:
b6:08:75:82:89:f9:a6:dd:c8:70:fc:76:53:5c:d2:f1:22:e4:
2f:25:2a:7a:84:60:3e:37:13:29:a5:e9:1c:21:db:22:a0:a4:
e3:6c:be:48:7f:bb:53:8a:ab:51:94:31:97:d7:6c:6c:ed:5c:
70:37:f1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:29:02 2025 by rpki-client