Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json)
Hash identifier: AzGb3GhiIsSNk0DUBjjN71qLxqCWEHJYApG3K7Jn384=
Subject key identifier: 59:89:3E:8B:55:A2:D2:09:83:4D:92:17:ED:8D:9D:7E:BA:CE:B9:35
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
Manifest number: 83
Signing time: Sat 29 Mar 2025 05:54:34 +0000
Manifest this update: Sat 29 Mar 2025 05:54:33 +0000
Manifest next update: Sat 05 Apr 2025 05:54:33 +0000
Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: zgENLoGa5qo5DMynmOEbySd80aB6PZ4vzHx9YRdshd8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D260A
Validity
Not Before: Mar 29 05:54:33 2025 GMT
Not After : Apr 5 05:54:33 2025 GMT
Subject: CN=67e78b1a-3a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:d0:78:98:36:86:a4:28:cd:ff:c4:d5:4a:
e3:b0:43:3b:03:93:b5:3c:02:95:d9:84:ac:2f:e0:
e5:37:15:da:25:a3:25:c5:dc:eb:ef:5a:81:77:65:
42:f6:1a:d4:ac:0f:e6:53:28:55:51:97:66:62:26:
c0:06:73:36:da:31:51:e5:e6:35:14:e8:bd:73:5a:
c5:fb:bf:42:f7:f2:53:92:c4:3b:64:a4:fe:be:e7:
b6:ab:53:b3:97:70:fc:0e:23:da:28:ef:22:25:09:
7c:5b:38:05:18:99:5e:43:5d:d9:17:9d:cb:4c:f9:
68:06:62:f6:58:eb:c2:0b:40:57:d6:05:b1:1b:70:
a0:83:56:61:de:e2:05:4a:c1:2c:eb:99:4b:39:c7:
bf:58:5d:ef:f7:a8:ee:fc:1b:97:7d:67:56:15:5a:
16:55:f8:55:b5:8a:49:c5:15:7d:a5:f9:e1:cd:cf:
80:d6:e4:84:5f:57:19:58:14:40:3e:21:c6:0b:c3:
5e:2b:3f:f3:a3:ea:32:55:dd:b2:f1:39:1f:aa:43:
46:a0:f6:89:1d:3c:fb:27:dc:df:4a:81:1b:d3:8a:
f3:58:73:08:9a:89:24:1a:4e:53:30:0a:0b:8c:18:
44:29:73:8c:45:96:c2:5f:4f:6d:9b:bb:52:f3:d6:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:3E:8B:55:A2:D2:09:83:4D:92:17:ED:8D:9D:7E:BA:CE:B9:35
X509v3 Authority Key Identifier:
keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:4f:27:ab:6b:ab:17:c2:d2:d7:91:2a:0f:56:47:f1:6a:1d:
2e:db:c9:90:c0:8d:42:e0:1e:65:ef:c8:40:8e:95:d8:e5:a9:
34:d3:be:43:ef:df:78:25:a2:dc:f8:d0:71:02:70:b5:c8:6a:
c7:e5:f7:13:c1:f8:c0:ae:9f:b5:ce:a6:37:33:51:ca:b6:e8:
56:93:a0:84:35:2c:bf:05:9f:18:75:03:e1:20:1e:91:d6:ed:
76:61:c9:97:14:ae:12:78:3e:04:5a:1f:7d:b2:5e:71:46:0d:
23:b4:39:0e:68:c1:14:34:c5:02:38:7b:cd:a7:1a:13:60:ba:
e9:35:be:58:9b:42:22:e9:fc:2a:3a:2d:3f:fa:58:be:3e:23:
69:dc:a8:ba:2d:2a:80:34:df:d6:f8:58:aa:b9:75:6e:d4:dc:
7c:97:8c:2e:6b:a5:7b:d0:dd:c0:81:c4:3c:88:b5:20:73:dd:
55:2f:1e:43:61:1a:55:09:7e:f7:6a:58:02:f5:83:37:ae:80:
1a:ba:91:9f:fb:5d:a0:62:bd:95:9d:71:42:39:44:dd:7b:65:
ec:14:2a:2e:17:f3:d7:5e:ff:fa:9d:2e:74:bd:68:3e:12:9e:
92:cd:18:54:f1:2a:f2:0d:ad:39:d8:8d:c9:a3:af:5c:26:1a:
ec:09:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:25 2025 by rpki-client