
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
File: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft (raw, json)
Hash identifier: 6lDddfNujOCZZy8IcFQahBuH2qowO1g6DDhxyz77Y9I=
Subject key identifier: AC:26:35:58:75:41:28:B5:6D:DA:0F:0B:2F:AF:10:78:F1:E7:28:A8
Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC
Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC
Certificate serial: 02A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
Manifest number: 02A0
Signing time: Sat 29 Mar 2025 01:47:05 +0000
Manifest this update: Sat 29 Mar 2025 01:47:05 +0000
Manifest next update: Sat 05 Apr 2025 01:47:05 +0000
Files and hashes: 1: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl (hash: 2sOpsmmnd6kx72D5odBfg8xBVU+IisZ9xHBWK2oe9sQ=)
2: A98754E2F1D011ECA4B56760C4F9AE02.roa (hash: dMqJTsYzp1pmPIaM1/eJLOhl+l3EGAIHqHSSCk8rEN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676 (0x2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D415B
Validity
Not Before: Mar 29 01:47:05 2025 GMT
Not After : Apr 5 01:47:05 2025 GMT
Subject: CN=67e75119-cad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3b:9a:f8:0e:6a:b1:05:f9:76:ac:dd:7a:a7:
48:4c:00:a6:d9:ac:65:9b:75:f0:4e:07:c3:94:bc:
f7:18:64:79:2b:5b:35:ec:c3:87:39:01:f8:14:d5:
14:e8:fa:7d:98:27:9c:4c:37:d1:b8:ba:da:6f:0d:
91:4e:72:03:24:6f:6c:5b:12:3d:39:22:bf:65:e9:
4e:be:8c:4f:9a:7a:f0:9f:dc:dd:41:e0:7d:e9:3b:
a8:90:24:6b:d7:93:0b:dc:d1:5e:19:19:7d:b3:84:
c3:20:0b:df:e2:23:40:18:b3:7a:3b:7d:77:2c:ca:
16:7e:39:0d:3e:8e:37:ef:5d:5d:5a:02:d2:f7:39:
7b:40:4a:ef:46:65:dc:b0:c4:2c:d5:2e:b7:a0:98:
33:fd:3e:13:b4:6d:44:66:fd:34:c7:5c:76:f2:6d:
d2:12:0c:55:f7:cc:40:17:1b:98:2a:b7:a8:22:64:
a6:e1:03:db:e8:76:b7:c2:49:7a:07:bc:b3:8e:b6:
43:93:d8:28:b7:f2:9a:c2:f7:21:bc:25:8c:2c:3f:
3d:ba:2d:2c:a8:ec:49:5c:78:a1:4d:50:d3:ca:1d:
66:e8:21:98:50:42:86:5f:ed:58:57:07:0a:11:2b:
eb:4d:f1:7a:b0:6a:26:d5:52:21:7f:a3:1b:8e:96:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:26:35:58:75:41:28:B5:6D:DA:0F:0B:2F:AF:10:78:F1:E7:28:A8
X509v3 Authority Key Identifier:
keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:0c:05:a9:9f:fa:a4:2a:31:50:8b:98:9b:40:96:35:d6:77:
e2:7a:d8:22:9e:ac:8f:8e:0b:92:14:16:99:15:a0:e5:53:a0:
6c:68:6a:47:ce:a6:9e:bd:9a:89:cd:29:7f:8a:e8:d2:8e:92:
e6:79:d8:ef:48:03:1b:27:c5:7f:69:52:a0:75:58:cd:e3:16:
5a:06:9f:77:89:a7:28:31:09:78:7d:a0:e7:90:fa:fc:ac:3c:
2d:de:ff:60:50:20:6f:c8:5d:26:c8:90:5d:1e:7f:a0:f7:db:
9d:47:9c:8e:b0:0f:bc:d4:b1:73:a5:16:d3:55:39:2e:42:b5:
e4:8d:7d:d0:90:3a:ab:e9:67:80:6d:a5:29:25:00:ae:e9:4d:
fe:66:43:75:98:b1:28:56:0a:99:3c:a9:ce:88:97:80:67:e3:
be:7c:45:94:6f:33:3d:56:9e:06:a0:0c:8e:49:a9:fb:82:14:
53:ac:bd:af:eb:d5:61:84:2e:4b:68:a5:2e:d6:93:fb:b6:8b:
52:d3:5e:f8:88:f5:ba:96:ad:34:e9:08:ce:40:b2:43:3f:f0:
73:9a:3a:42:8a:cf:48:1a:19:a8:aa:20:a6:c1:2b:6c:dd:aa:
bd:2e:07:f6:46:ee:d4:ee:85:6a:05:fc:5b:1f:ba:e1:12:8e:
cb:ec:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:50:48 2025 by rpki-client