Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
File: 97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json)
Hash identifier: bOqi+7Z1EDrV7GViz+f0uQ8IYs0vgCQiAa5Vi7qLvRg=
Subject key identifier: C2:20:74:80:32:94:0B:93:4B:20:13:6D:89:76:BD:77:1A:BF:E7:DF
Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
Certificate issuer: /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
Manifest number: 01B9
Signing time: Sat 29 Mar 2025 02:41:20 +0000
Manifest this update: Sat 29 Mar 2025 02:41:19 +0000
Manifest next update: Sat 05 Apr 2025 02:41:19 +0000
Files and hashes: 1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: QmBkMsbFORDUi1RNmtpTdQST9vpL2cPcbFFVQO0f0Nc=)
2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: AIFISpe4UUSb102JMnJULUVmkKzdqcMZuRuO6tOo8G0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEDD3
Validity
Not Before: Mar 29 02:41:19 2025 GMT
Not After : Apr 5 02:41:19 2025 GMT
Subject: CN=67e75dd0-8ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:69:09:2e:08:b0:57:86:31:08:1f:fc:18:
dc:98:de:46:4e:ac:e6:2c:30:8e:d0:8f:fa:1e:0c:
bb:21:37:e0:56:9f:83:2b:1a:bb:0b:d9:f2:b7:22:
bb:8d:1b:ce:a8:0f:5b:69:2d:1f:b6:29:40:f4:6d:
59:77:09:4b:1c:b4:75:16:06:3c:9a:68:99:22:02:
b2:93:80:bb:69:fa:26:48:68:53:85:2e:0f:d9:9b:
06:f5:91:ee:4b:06:e5:7e:23:8e:28:24:97:21:59:
73:e6:b0:ee:bd:8b:ad:d4:9e:f2:f6:20:f9:bf:77:
16:53:02:42:a1:6d:e6:3b:4b:8f:ac:02:79:17:aa:
9f:20:39:22:82:17:37:2f:09:1f:5c:00:77:64:84:
2f:6a:39:d1:1c:a7:14:2d:6c:69:9c:22:9b:87:a0:
4e:57:df:56:bc:9f:bb:5e:47:e5:c8:e8:9c:61:c9:
d8:e1:3d:b7:d6:cb:16:4a:54:a5:de:94:b6:08:66:
85:ae:81:81:40:9a:fb:47:42:94:d9:1d:ab:fd:33:
cd:98:34:cb:2d:67:93:2c:47:b0:21:49:27:30:86:
e1:ed:b2:7c:82:67:a5:28:7c:85:89:d3:55:e8:e6:
56:5a:11:f6:65:73:d7:0c:ff:ca:f1:2b:8b:94:3c:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:74:80:32:94:0B:93:4B:20:13:6D:89:76:BD:77:1A:BF:E7:DF
X509v3 Authority Key Identifier:
keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:0c:cc:e3:ee:77:ec:23:7a:f5:af:72:b0:b9:9b:11:5f:4b:
67:e5:fe:64:8e:4b:53:f3:1d:d6:ca:27:41:8b:dd:97:5e:e6:
0a:02:f2:96:97:c3:6a:83:0e:d7:a9:dd:e2:cc:28:a5:18:31:
ec:32:79:d2:06:24:8b:10:90:b0:08:69:93:70:68:7f:ee:7a:
f4:03:9c:6d:42:20:e6:b9:97:55:e6:9d:42:76:31:63:ec:04:
57:85:b6:12:32:4e:33:89:6c:2d:23:5d:cf:9e:16:ff:c8:1d:
93:a1:16:1f:25:db:64:e6:e0:0b:0f:5b:d3:f6:89:69:1e:75:
7e:d0:3f:44:1e:5f:52:f8:bb:6b:c2:78:d8:4e:c1:c4:30:55:
60:ab:9c:8b:f7:16:47:6e:52:4d:9e:25:70:3f:a6:45:c3:aa:
a8:ee:65:f5:7b:ea:92:36:ad:28:c6:a3:b5:48:58:25:9f:43:
61:95:16:9a:4e:53:d7:fb:1a:ef:2f:42:3e:df:ab:88:eb:13:
09:21:f0:80:79:e0:be:34:00:0f:6b:96:42:f3:5f:d4:8c:2d:
7f:0a:83:6d:fb:6e:e9:99:c8:76:83:b0:ac:43:16:fe:28:86:
57:db:e2:ba:c6:4d:a6:a9:d8:2e:08:e4:80:83:66:cc:36:60:
ab:52:54:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:42:32 2025 by rpki-client