Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json)
Hash identifier: qdipBr7AR4gzmHl5fy4NqysH95bHQjHPjRsZr/k1By0=
Subject key identifier: 78:2E:12:CE:62:07:4E:BB:6B:7F:04:F4:B4:D7:8E:D9:2B:EE:B6:D1
Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC
Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC
Certificate serial: 14C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
Manifest number: 14BC
Signing time: Fri 28 Mar 2025 16:57:27 +0000
Manifest this update: Fri 28 Mar 2025 16:57:27 +0000
Manifest next update: Fri 04 Apr 2025 16:57:27 +0000
Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: SoiOIs2/L6XrTxGp5wc4+uuImr2G9QYnlVgSEzuMO4o=)
2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: XC7zxbxHdlAL0s8scJjof6sYByPifHkXs75rsYmLs/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5316 (0x14c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D599B
Validity
Not Before: Mar 28 16:57:27 2025 GMT
Not After : Apr 4 16:57:27 2025 GMT
Subject: CN=67e6d4f7-fa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:57:71:a5:3f:7c:35:99:0c:74:82:eb:30:
49:30:27:d9:d4:34:a9:fc:49:d2:d5:d7:3e:3c:e9:
50:37:3d:e4:3f:7f:3c:0c:17:e9:07:b7:9d:8f:d0:
94:af:af:d2:cc:52:c9:64:f9:cc:9e:0e:d0:0f:2d:
c3:58:03:23:ca:79:ce:15:31:7d:6e:d6:7c:ba:fb:
c7:30:c5:fc:38:cf:6c:95:4f:97:e6:bc:25:31:45:
b6:be:51:03:9f:53:6c:89:e0:91:aa:25:b3:87:5e:
f3:50:5e:99:8e:ca:25:d2:b4:6d:57:8e:a4:9f:ea:
e7:91:e1:83:3c:49:04:20:de:a4:5b:55:f5:97:66:
48:81:0f:be:30:aa:4f:cb:8c:e1:49:0b:88:37:4f:
5a:b3:39:fa:31:1c:83:0e:c7:7a:bf:8b:b2:00:91:
27:27:5d:82:6b:6a:70:85:4c:be:e9:2a:de:fb:89:
81:0f:71:8f:e4:67:eb:30:ed:10:b7:e0:70:6e:ba:
7a:5f:23:b5:37:e6:0b:65:b6:ea:4d:6c:9a:e9:75:
2e:29:1c:ce:56:b8:a2:22:71:c3:ea:ff:96:25:3e:
a7:6f:d9:5c:f2:01:5d:8f:71:f6:41:bb:8d:30:e8:
32:f0:33:b5:1e:55:22:74:78:98:ef:6e:d0:0f:c3:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2E:12:CE:62:07:4E:BB:6B:7F:04:F4:B4:D7:8E:D9:2B:EE:B6:D1
X509v3 Authority Key Identifier:
keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ac:d4:7c:8c:5b:db:8a:40:ad:9f:0b:01:82:74:e9:3c:b3:
40:bc:84:84:33:d6:ac:3d:46:70:14:31:5f:0f:2f:6a:5f:5c:
7a:4e:4d:41:90:fa:bb:1f:64:3a:ff:81:68:db:52:b0:ef:cb:
60:22:2f:a3:a7:28:51:41:61:00:56:1e:36:eb:e1:18:42:98:
f7:41:3b:35:21:cb:b1:7c:1e:34:50:c1:2a:9e:32:9b:5a:98:
0a:85:a4:c8:04:95:5c:40:14:10:5b:68:f6:2b:df:5f:c4:b2:
1d:96:6f:c7:7a:55:98:14:7f:70:f3:19:86:56:bf:cb:70:0f:
cb:84:85:bb:b8:0f:12:a0:e1:1e:ea:15:e2:05:22:dd:ac:59:
9b:c9:9e:6e:b9:2a:53:a3:a2:91:53:2f:c9:5a:4e:67:bb:46:
86:76:f3:08:5e:c6:8e:df:8f:11:55:5d:97:00:f9:7a:7f:18:
ad:c4:ca:8d:df:46:d2:f2:e1:db:78:98:05:c5:47:c9:64:5b:
39:c0:87:08:45:05:29:f9:72:45:c4:11:89:00:45:12:7e:8f:
d3:09:80:6d:d2:90:ea:dd:8c:0f:f5:ac:5d:df:5e:e4:af:8a:
4c:de:3d:1b:34:df:4c:1c:ed:4f:c6:6a:08:80:2a:6a:7c:8e:
99:fc:6e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:17 2025 by rpki-client