Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json)
Hash identifier: K2m2tC1dJvtZp6zTeZxfckMXcDRmtHeig28Dt/0Z9GI=
Subject key identifier: C7:1A:5B:CB:22:E6:B0:67:3C:45:53:5D:B4:6A:6D:D2:99:51:F8:F4
Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00
Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
Manifest number: F4
Signing time: Sat 29 Mar 2025 04:40:53 +0000
Manifest this update: Sat 29 Mar 2025 04:40:53 +0000
Manifest next update: Sat 05 Apr 2025 04:40:53 +0000
Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: YD3ttDcQKwiBcaDAhUhuiyzgAOQJm+Mbc89MNQ/3MCA=)
2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: W3PBLvmUcdE3zAX7FZy5vyT9kW67f//Ujbv+JZHmvZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28E1
Validity
Not Before: Mar 29 04:40:53 2025 GMT
Not After : Apr 5 04:40:53 2025 GMT
Subject: CN=67e779d5-72db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a8:b5:dc:40:22:6a:ec:88:56:22:41:d8:6e:
37:32:45:92:d9:b2:7a:69:a9:d3:0e:3b:3c:20:27:
30:1f:16:23:07:70:2b:7c:ef:e8:ec:cd:66:a4:df:
e5:49:db:e6:bf:a5:87:47:30:b6:2e:13:f7:19:80:
21:4c:a6:41:97:e9:8d:dd:54:a8:1f:12:cf:08:3e:
b7:2b:45:e1:7f:05:99:4e:65:bc:e6:2e:0e:48:c9:
c4:a8:fd:7f:11:51:05:50:de:cc:bc:0a:22:71:b0:
8f:e0:3b:d4:c2:c3:9d:de:43:e6:e2:ac:fd:b1:05:
f4:b0:19:62:8d:0f:e2:89:a8:a1:a1:c1:3c:89:e1:
fc:5a:30:15:d1:15:40:a1:ca:71:a7:03:5e:9b:e6:
53:1e:53:61:55:ea:66:af:da:47:8f:23:90:5a:ba:
62:2e:6c:f8:26:4f:e1:bd:e7:1f:48:67:4f:2a:d7:
49:85:f4:e8:99:84:0c:cb:4c:6f:c6:3a:73:0d:3b:
be:15:83:58:74:1d:c1:df:d4:f9:e4:99:91:43:9d:
98:f2:1d:1c:b7:2e:66:9c:ee:38:c7:5e:59:af:1d:
ba:df:5d:48:ff:57:dc:11:f2:f3:70:3d:43:fb:fd:
e2:58:cd:86:2a:67:2f:ca:0c:0b:a9:95:84:7d:f1:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:5B:CB:22:E6:B0:67:3C:45:53:5D:B4:6A:6D:D2:99:51:F8:F4
X509v3 Authority Key Identifier:
keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:e7:44:db:f1:09:41:fb:78:56:19:1d:66:ae:96:69:78:a8:
2c:8a:8c:b7:a8:9e:09:8f:98:af:ed:89:b6:8b:c8:30:a6:5a:
76:99:33:d8:ce:42:fd:6e:e9:60:9f:a3:b4:b9:92:0f:06:ca:
b6:b4:8f:4f:90:73:6e:d9:50:3d:4a:da:72:e6:91:c6:01:2a:
4e:1d:c6:07:3e:13:41:f9:e1:de:1a:eb:41:43:76:1c:38:04:
da:7b:11:af:8a:df:e9:fc:68:5a:e9:2a:4e:79:99:b1:e1:64:
a9:41:cc:ff:2a:cf:45:fa:46:1b:b4:a1:bb:0f:34:cd:03:42:
30:70:4c:fe:02:b4:72:ec:d8:21:52:ab:4b:63:a0:fa:57:20:
1a:0b:e1:c8:d0:ad:da:3f:fa:00:d3:41:8d:a4:e6:1b:56:3d:
d5:71:78:a3:3e:0f:d3:1c:5d:f1:4d:98:93:80:a9:1a:1f:17:
32:4d:5e:31:d1:d8:58:9a:cf:0e:50:f2:b6:c6:55:76:a6:70:
fc:8d:d5:f2:52:89:d0:20:ca:e2:cc:7f:25:45:16:df:95:de:
fd:3b:56:df:39:00:76:0b:25:ba:05:5b:2d:1a:5d:c2:d0:ba:
ad:15:6e:a6:c3:81:e5:44:2e:b3:b9:87:a9:01:89:38:55:fc:
4a:a6:a4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:20 2025 by rpki-client