Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft
File: eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft (raw, json)
Hash identifier: GKbQQDmkSVLXACyd85gCcRGdS1p2bZG/f0nVGLzdrAI=
Subject key identifier: 00:8B:45:67:20:CD:2D:B2:73:BF:DD:D2:EA:19:07:83:FB:D0:1D:CB
Authority key identifier: 7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98
Certificate issuer: /CN=A91D0C18/serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft
Manifest number: 6F
Signing time: Sat 29 Mar 2025 06:11:03 +0000
Manifest this update: Sat 29 Mar 2025 06:11:03 +0000
Manifest next update: Sat 05 Apr 2025 06:11:03 +0000
Files and hashes: 1: eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl (hash: uYE4S6TccOd5K3OaMVODTgH1Iq78eE70wu1bzF22oLA=)
2: EF57F4D0646611EFA25D167EC4F9AE02.roa (hash: gGUuQZoCHoMxpbX892LJTwciHDZLV1IrcZ8alBZ8Tvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C18
Validity
Not Before: Mar 29 06:11:03 2025 GMT
Not After : Apr 5 06:11:03 2025 GMT
Subject: CN=67e78ef7-4f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:10:15:37:76:82:9b:68:e3:8f:d0:44:ce:
3b:d5:1c:b5:84:20:53:f9:77:dd:9e:0b:84:67:b2:
e5:22:1a:6a:8f:4f:1f:b9:78:f2:10:39:a6:08:f9:
eb:41:f6:df:61:01:e1:ae:cf:03:fb:96:ea:4e:7f:
f3:a1:c2:2d:33:fe:76:d0:35:4c:6b:4c:c0:f6:37:
e7:cd:e0:b4:3c:1d:fd:13:a4:64:05:78:32:c6:89:
12:4b:e3:27:e3:71:9c:a7:8c:1b:b7:91:78:47:08:
33:cf:fb:b4:db:ed:17:3d:f7:0c:8c:e3:ca:ad:6f:
34:f8:53:70:9e:6a:1b:23:45:71:55:42:4c:b9:e8:
a3:10:0a:24:56:b3:0f:b6:7f:a0:b8:cb:fe:ec:ac:
c6:df:41:b4:cc:b0:e8:f7:2e:b6:5a:c3:c5:3d:aa:
98:e5:94:f7:28:04:61:3d:a3:4a:85:e1:a7:8b:e5:
13:08:19:25:a6:2f:03:de:fe:2e:45:02:7e:3a:6b:
14:36:ea:42:ed:37:4b:47:06:b5:36:fa:8a:28:60:
af:12:1d:86:ab:4e:18:d1:26:27:cd:b4:1f:03:a0:
44:b4:7c:9e:ce:e9:45:5d:9c:68:a6:c9:76:d4:3f:
c5:8e:a6:44:aa:3a:03:bc:3a:21:d1:29:7a:7a:71:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:45:67:20:CD:2D:B2:73:BF:DD:D2:EA:19:07:83:FB:D0:1D:CB
X509v3 Authority Key Identifier:
keyid:7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:c5:7e:9a:fa:da:76:7b:5d:26:93:45:ec:1f:ad:2c:3a:2a:
95:28:b3:a6:5c:e6:8d:01:7a:ed:23:f4:17:9a:41:36:ef:4a:
d0:25:34:85:42:ae:88:0d:9f:15:84:9a:41:e5:e0:55:e4:e2:
05:e2:2f:65:7d:0c:17:2e:79:00:84:f4:cf:56:09:c9:bd:2d:
62:dd:fe:29:6f:c8:29:e2:5b:eb:d9:44:9b:c7:cb:e5:1c:31:
48:87:5a:13:b3:aa:6a:7b:69:b7:e1:19:b4:b2:ab:a8:6a:63:
50:51:99:19:7e:35:86:31:6c:45:93:32:83:6b:70:fa:82:43:
81:f5:39:d5:d4:90:2e:e7:72:9c:50:35:7e:47:c8:9a:f7:6b:
f3:22:0e:18:92:0c:7f:26:4d:34:c4:dd:3c:b6:ee:e0:1a:e2:
8e:21:71:68:87:25:b6:72:6c:93:07:ba:63:5a:25:ba:20:a5:
f2:b1:29:dd:f5:ec:b4:1d:96:26:52:18:64:53:79:c7:22:0a:
ee:76:c4:4d:f6:da:d8:d1:2e:53:58:51:67:8d:e5:bb:ac:f3:
f1:6c:30:a9:14:7b:9a:96:9a:4a:20:e9:a2:5e:ad:85:18:0c:
31:9a:09:ce:d1:66:d4:52:f4:f8:67:6e:44:9a:f0:48:b0:41:
e0:13:df:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:52:27 2025 by rpki-client