Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json)
Hash identifier: ciLt4c9pkPAQg3FVCz4SYlsN8BRtuCT66PXOjda6vVw=
Subject key identifier: AC:72:D3:B8:74:C0:84:F6:8F:36:77:01:37:F9:9A:81:97:2B:46:3D
Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514
Certificate serial: 0316
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
Manifest number: 0310
Signing time: Sat 29 Mar 2025 01:27:37 +0000
Manifest this update: Sat 29 Mar 2025 01:27:36 +0000
Manifest next update: Sat 05 Apr 2025 01:27:36 +0000
Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: xMOVuOtiZqkAKOkLBA2mYSLEWqqWvfzX76rYwWMtDCc=)
2: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: YDV59vkDGMUjv69JwCXS0TevAXxNgXIE57WFOFZhJBo=)
3: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: bm0eX3arzl/Vd2cVSRTEVj0uPXCCRL3I0GcsJSw9xWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD00C
Validity
Not Before: Mar 29 01:27:36 2025 GMT
Not After : Apr 5 01:27:36 2025 GMT
Subject: CN=67e74c89-904e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:aa:a6:ef:0e:95:1e:04:c7:d9:13:ea:f0:
55:e5:e9:31:61:5d:0d:88:7e:f0:46:86:53:55:e9:
25:68:60:8d:c2:af:63:77:95:35:26:b0:d2:9e:15:
93:43:eb:87:9a:3c:49:0b:ca:03:6f:ba:65:53:03:
d8:27:df:1b:40:e3:0f:5d:fa:7e:ad:f9:0b:52:ce:
99:41:14:90:e7:9e:83:e3:45:80:8c:55:23:f3:6b:
a3:bb:5d:f0:bd:1f:74:8f:e9:bf:60:56:1c:5c:99:
da:a3:27:1a:41:40:a2:3c:66:33:1a:56:94:91:a9:
2a:a5:72:b5:9a:2c:90:d8:3e:fb:ac:84:2f:86:71:
b6:f9:83:6e:75:17:40:7a:4e:c8:fa:41:0e:65:ac:
17:e2:86:8a:70:60:3d:a8:bb:90:4b:d2:0a:16:b9:
a3:85:55:0f:82:67:59:7c:f6:bd:7b:e9:46:c9:dd:
9a:c4:c9:90:3a:c7:2e:70:9c:16:dd:a6:78:ee:c6:
8d:d6:1f:df:45:26:64:88:5f:f8:b0:88:bb:c1:a9:
60:4f:13:ef:c6:86:69:bc:e3:ae:96:b2:2f:b7:0c:
5c:63:80:db:43:2f:65:57:90:4a:00:51:4d:7a:dc:
80:a9:a8:53:a7:5a:bf:bd:36:17:48:f2:69:a0:be:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:72:D3:B8:74:C0:84:F6:8F:36:77:01:37:F9:9A:81:97:2B:46:3D
X509v3 Authority Key Identifier:
keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:08:d2:cd:cd:0b:c0:6c:ff:14:cf:10:54:f6:9d:a4:2b:9a:
4e:c9:f3:f8:dd:f8:f9:74:f9:06:8c:f3:a2:00:90:23:07:a9:
20:f6:73:19:46:3e:2b:3e:0f:2f:cb:c3:31:a7:f4:ba:59:93:
6a:f7:8a:1f:70:97:8a:c5:da:07:ac:52:6f:d7:55:76:9d:9e:
fe:1a:2e:b2:fa:a0:0e:c8:b9:bd:6e:3d:2c:56:db:10:ac:34:
ec:9a:d7:95:9d:ef:58:35:8a:69:46:3a:f7:11:d9:09:bf:16:
80:7e:6e:a7:53:29:e8:5d:d9:61:73:45:8e:bb:83:58:b3:fd:
de:18:92:63:c0:e5:64:2e:45:55:e0:16:a0:b9:75:0c:35:ca:
13:3d:27:e2:85:7a:95:89:91:df:02:55:51:ca:1c:81:77:d5:
e2:2c:7a:51:b0:8d:cf:b2:c5:49:f9:33:8e:ab:50:77:8b:49:
58:56:ce:0f:29:9e:e2:6f:16:f3:72:2e:27:a8:38:bc:ca:d3:
e4:f3:38:cb:3e:8b:e8:58:ae:7b:43:9e:33:87:99:e3:db:55:
67:d6:e2:10:a4:b4:a4:d5:c2:1a:d9:36:0b:c7:20:10:3b:8b:
12:40:b6:c6:d3:9a:49:25:87:0b:04:40:bc:8a:c9:a9:eb:b2:
65:77:0b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:51:34 2025 by rpki-client