Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
File: u99YzWESke9boarLayzE7VCwEVc.mft (raw, json)
Hash identifier: DQDvMSK7Ol/dKSiHiUxn/GnrqkwyvLDf1WebEFmvc8M=
Subject key identifier: AF:52:7F:F3:F5:60:C7:F4:0D:AD:53:53:00:B4:54:69:99:F1:43:2A
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial: 0412
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
Manifest number: 03F9
Signing time: Sat 29 Mar 2025 00:48:29 +0000
Manifest this update: Sat 29 Mar 2025 00:48:29 +0000
Manifest next update: Sat 05 Apr 2025 00:48:29 +0000
Files and hashes: 1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: +9rAuLLPfk4QnurQzAed4RExePY3HEFx3Y5gDvyHXvw=)
2: 08241A166B1111EE99759439C4F9AE02.roa (hash: ySASg3k7OY7oJkXL5Ws/83THPGLSCp+zucNat555hyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1042 (0x412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D46FD
Validity
Not Before: Mar 29 00:48:29 2025 GMT
Not After : Apr 5 00:48:29 2025 GMT
Subject: CN=67e7435d-4a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:1e:e9:8d:aa:1a:83:4d:1e:04:37:10:f7:
b2:b7:92:61:d8:dd:a4:6a:fb:20:09:c4:1f:d9:86:
3d:46:15:5a:fc:b1:64:35:af:43:a6:15:93:b0:35:
4b:7d:47:5e:d8:a1:f5:cb:ba:28:dc:4d:df:c0:5f:
2f:95:13:e8:9a:75:0d:c5:cc:22:3c:f6:41:77:02:
fd:83:e8:05:89:94:47:3a:7d:10:9d:65:86:af:f3:
8e:7b:62:89:c5:04:20:66:ee:79:99:6e:93:43:3d:
93:5b:f4:b0:0b:95:12:32:8f:d3:0c:cb:92:2f:1b:
94:c5:de:8a:03:91:52:e3:eb:be:e1:e5:88:dd:a2:
00:d6:d1:86:bb:5c:8f:9f:19:f6:f6:24:0b:0a:5b:
ee:e9:67:30:fc:e6:f3:7c:71:fc:28:ee:62:28:36:
4c:68:05:02:d7:b2:ac:b0:52:c3:e5:a5:1c:35:1e:
ec:ed:0f:f6:1a:02:92:97:ac:a9:d2:79:06:28:3d:
ba:b2:f7:eb:95:09:48:c4:05:06:0d:58:e7:0b:99:
cf:58:45:8d:d7:6d:c5:c5:3e:03:ef:1f:96:41:28:
04:4d:e6:2d:88:78:ab:b9:53:a2:1a:2e:ee:7e:ab:
3b:1c:2f:86:ce:5a:a0:04:b5:e2:62:46:74:d3:15:
0f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:52:7F:F3:F5:60:C7:F4:0D:AD:53:53:00:B4:54:69:99:F1:43:2A
X509v3 Authority Key Identifier:
keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:fb:b8:01:b2:c5:5a:bf:7e:26:fb:42:72:c6:44:6d:e1:25:
52:01:47:fe:e5:74:be:52:26:21:49:00:bb:df:df:51:65:60:
a4:e2:5b:f2:c8:2f:8a:7a:24:93:17:a4:5c:a3:56:51:0a:f7:
b3:dd:80:e6:af:80:69:af:d6:95:21:12:2b:a5:4a:68:66:9f:
ee:34:0f:b6:e1:9d:88:6c:c3:5e:06:b4:3a:85:ad:d6:fc:3a:
b4:8a:1b:46:bb:75:42:fa:5a:d8:7f:5a:cc:9e:d1:db:7f:a2:
6e:28:07:71:bc:3d:8c:2b:ef:56:5d:35:cb:d3:e5:f6:94:ef:
32:9d:0d:41:48:34:64:03:41:6d:bd:50:eb:61:db:61:23:c8:
8e:94:49:0f:97:1a:47:a2:44:ea:ad:9b:54:67:9f:07:66:80:
70:7c:2c:13:a0:b1:b7:14:24:0f:59:00:50:d2:ce:aa:c5:07:
5b:cf:e9:e0:8d:8d:2e:c5:19:79:2b:b2:3a:7b:e5:d2:53:32:
a7:ae:e5:36:3a:9c:cf:e6:b8:8a:d7:e3:66:42:19:7f:4a:d3:
b3:0b:3a:55:ee:df:db:29:0d:ed:08:12:79:bc:59:29:b1:4f:
98:28:6b:72:f2:28:ef:a1:b3:08:9f:23:ba:56:bf:bc:a9:82:
5d:1d:97:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:48 2025 by rpki-client