Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json)
Hash identifier: qv2ju8MRUzXI6fNIwP4ru+RZ3KCP6xVR0OvBFasvswo=
Subject key identifier: 83:64:E5:46:F1:43:3C:D6:A5:18:19:A9:AD:A6:C9:06:85:9D:2C:64
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial: 0811
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
Manifest number: 0809
Signing time: Fri 28 Mar 2025 21:08:16 +0000
Manifest this update: Fri 28 Mar 2025 21:08:15 +0000
Manifest next update: Fri 04 Apr 2025 21:08:15 +0000
Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: CRPq6Ol2+Kvjo9h2hB5rYwRDNpf5gVVn/5sogZ3VjGY=)
2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: OISPqX+sjE+FviBwbW316CZ6fba2RRqY67rA1yB66hs=)
3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: 7eZAVrRcBGBKFlQHZK9vBEWzwyr7ij0OTTCgEmnjTCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2065 (0x811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF77D
Validity
Not Before: Mar 28 21:08:15 2025 GMT
Not After : Apr 4 21:08:15 2025 GMT
Subject: CN=67e70fc0-77c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:e7:60:46:02:8b:07:e0:c2:72:f3:14:04:
82:18:05:c4:46:23:5f:56:af:7b:2a:e5:d8:c4:3a:
84:16:64:ae:28:72:cc:84:35:e5:02:75:8c:dd:88:
d6:d0:67:a5:a4:7e:8e:5c:60:6e:71:5b:7b:fc:f2:
b4:e1:f8:6e:63:74:44:d2:a8:65:84:94:18:48:ad:
3a:f8:9d:ad:81:5c:5c:50:9a:3d:3a:b2:02:e2:27:
f2:0e:a8:a5:d1:63:f9:01:ce:67:7e:0a:43:e2:ff:
bb:3c:da:63:fe:23:ee:98:1e:ec:2a:dc:30:3c:42:
d2:72:b1:85:0b:5a:d7:f0:30:6d:7f:62:1a:73:98:
33:1b:c7:c5:e2:9d:94:2b:36:17:6a:88:12:2a:06:
96:59:02:15:3a:43:ff:d0:c3:f5:8f:df:34:65:d1:
42:4b:de:51:21:fa:bb:ff:2e:2c:4d:dd:41:af:6f:
52:74:7e:5f:42:3d:f8:9e:b3:c5:dc:a7:9f:40:0b:
27:cf:3c:47:0c:a2:34:bf:db:2d:ad:01:d7:44:e0:
38:5a:cd:39:cf:51:6d:59:3d:50:ee:53:d7:bb:dc:
c5:d1:78:4e:9d:4f:fe:6a:5e:cc:34:9b:0a:53:5f:
dd:3c:00:cf:bd:cf:6c:7c:df:e7:ef:e0:84:c8:5e:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:64:E5:46:F1:43:3C:D6:A5:18:19:A9:AD:A6:C9:06:85:9D:2C:64
X509v3 Authority Key Identifier:
keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:46:1c:39:08:99:93:f0:00:c6:47:c8:f9:93:d1:7a:8f:27:
1f:05:b1:b3:04:ab:77:9e:85:27:39:60:cb:a2:e1:b6:11:64:
6d:66:46:54:31:50:90:e2:41:da:99:84:bc:92:78:63:2f:39:
21:f5:75:87:1d:dd:ea:22:d1:02:ca:68:4c:93:cc:86:50:c1:
c3:43:0c:66:ed:3f:ef:cd:d6:9b:ab:bc:08:76:bd:c2:1f:d6:
58:b2:2f:cf:67:f1:de:ed:46:0c:87:b5:ad:d7:de:cc:b6:29:
eb:80:fa:0f:9a:17:42:fe:3e:09:2b:3a:33:b1:78:45:be:05:
1b:0b:ee:6d:d7:a9:be:ca:02:2c:6a:dc:19:42:cb:6d:88:fc:
38:38:ba:a0:39:d5:d0:c1:ae:d5:e3:12:23:6b:f9:fa:17:1b:
5e:70:2f:2e:aa:3a:0e:ec:5b:63:9d:57:74:56:b3:d8:57:bf:
13:0b:83:3a:a6:51:46:4b:88:e0:9c:a8:24:8e:23:5a:54:fa:
4d:87:c4:75:68:2b:a7:5b:91:a4:08:a4:c2:7d:b4:74:91:44:
e2:7a:a4:0b:d0:69:43:62:87:83:49:22:db:73:0b:78:b2:b6:
69:64:0a:2b:81:1d:06:1d:35:6b:dd:8e:1b:d2:c8:6b:a5:5c:
76:6d:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:52:58 2025 by rpki-client