Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
File: m2fIchTtmWVAcRkL688LjZ-hr04.mft (raw, json)
Hash identifier: xcQ9m0uK/nAONnNuJz1B4r6qrTCFOO8nby7TqaJwM+Q=
Subject key identifier: 1D:8A:79:A7:69:C0:40:21:FC:34:75:8E:DF:68:10:CA:26:8A:73:3E
Authority key identifier: 9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E
Certificate issuer: /CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E
Certificate serial: 0BE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
Manifest number: 0BCD
Signing time: Fri 28 Mar 2025 19:02:42 +0000
Manifest this update: Fri 28 Mar 2025 19:02:42 +0000
Manifest next update: Fri 04 Apr 2025 19:02:42 +0000
Files and hashes: 1: m2fIchTtmWVAcRkL688LjZ-hr04.crl (hash: EUY9Zdz9xM4FmO7pbFAV7aN/EkOntDqRPND84488GyY=)
2: 39F4FA3EC28011EFA15F7983C4F9AE02.roa (hash: Tv0EkNRvl6HwjRZU1kGmTPF818bqvfwzUYMD5mrfPL8=)
3: 38717B38C28011EFA15F7983C4F9AE02.roa (hash: 5iv6gdKQPAZFSlAANGZthkjck4esnk4Jjld1SsnV+1w=)
4: 10BAC44C646511EFBC52E778C4F9AE02.roa (hash: Z67/J9vff1oW6NI34pKliaQWv/9nuKIHlmULd9ZQaKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3042 (0xbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBDC8
Validity
Not Before: Mar 28 19:02:42 2025 GMT
Not After : Apr 4 19:02:42 2025 GMT
Subject: CN=67e6f252-2c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:0b:21:52:95:ce:02:62:85:69:26:2a:39:
d8:18:c8:db:dd:7b:1d:dd:8f:b5:d3:1c:e7:f9:0b:
7d:9e:e1:06:32:97:9e:6c:de:1e:ee:b2:e1:16:ff:
20:19:93:84:94:f4:76:94:3d:02:49:d6:d6:42:ef:
3d:e8:07:18:c5:49:92:4c:28:fa:9d:5e:8f:7c:8b:
49:1f:72:dd:50:77:d4:5b:2b:8f:0d:28:fe:71:6c:
ca:57:0e:3e:42:c3:16:15:7c:ef:ba:f8:b6:5e:e7:
37:d9:51:a4:c8:87:49:42:fa:62:27:25:86:3c:44:
e9:38:89:12:4f:24:8e:fa:8d:72:f2:e2:20:70:84:
dc:1e:38:c4:76:62:1f:b2:3d:d9:0f:9c:79:e2:3f:
8e:e1:7e:92:ce:12:59:9c:76:e5:76:b1:4c:a1:e4:
ca:08:45:2d:c4:a0:10:62:8b:43:20:25:99:bc:98:
b8:e4:16:36:21:cd:92:1d:e7:0b:a9:ba:b9:e4:c7:
3d:eb:46:82:c7:17:ea:93:f5:22:90:7f:f2:54:6c:
31:0d:29:3b:63:de:1e:0e:97:08:46:88:ad:d9:ba:
01:cb:f8:a7:64:6e:d9:73:d9:ae:ea:7f:5c:61:f0:
d5:94:e5:1a:2f:d2:bf:85:57:eb:2c:69:a7:27:e1:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8A:79:A7:69:C0:40:21:FC:34:75:8E:DF:68:10:CA:26:8A:73:3E
X509v3 Authority Key Identifier:
keyid:9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6b:71:c6:e5:51:37:f0:70:fd:b1:64:de:19:ee:8c:c2:65:
f2:8d:d3:fb:e7:ad:bb:25:65:05:59:01:2c:c5:1b:22:8b:42:
15:d6:0e:09:5b:94:f6:6a:e6:75:f1:d1:3d:90:2f:0f:af:70:
76:1c:e4:66:8a:de:46:29:dd:e1:7a:00:a8:3b:25:c0:0b:fb:
6d:5b:d0:88:39:0d:cd:ea:6c:47:f8:89:3b:5c:ad:85:6e:c4:
f0:ed:7f:0a:69:a8:93:4c:3c:c7:3f:2c:fd:8f:08:42:ed:e1:
32:af:3e:53:80:64:e1:20:f8:e4:c8:96:9d:ac:45:9a:d1:cc:
7e:b1:83:57:98:3b:b3:15:23:72:20:f7:a3:23:27:d0:77:18:
63:e9:37:93:f0:5f:df:a4:ff:a4:ec:bd:94:36:f8:bc:8c:f8:
12:4c:ff:ca:a8:20:86:0e:44:3f:d7:d1:39:3e:77:35:65:cf:
69:cd:3d:69:8f:29:31:ab:01:81:e7:05:ea:d0:2c:3c:0c:72:
31:de:8e:8b:75:d8:83:27:41:45:18:b7:02:4e:e5:7d:24:87:
86:4f:f3:5e:01:02:eb:84:b0:f4:d0:fa:c0:a3:c3:57:3f:34:
73:a1:c1:5c:37:4d:e7:8a:aa:41:44:82:76:f4:10:cc:3a:4b:
d3:3d:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:17:17 2025 by rpki-client