Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier: AteQhB99aJL0Y1F+1tZ6l6XBcmkt0odX9wmyBG69//E=
Subject key identifier: 3D:14:80:1D:E8:3E:FE:7F:25:0C:ED:84:F0:1F:91:3E:8C:89:B8:33
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial: 08F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number: 08EA
Signing time: Fri 28 Mar 2025 20:39:16 +0000
Manifest this update: Fri 28 Mar 2025 20:39:15 +0000
Manifest next update: Fri 04 Apr 2025 20:39:15 +0000
Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: txESkRxTUf+3FZZdF3iYEVCL5sBrGFNh65fJaubVF4M=)
2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: 9fYoRLuvAE3GnGPowVCGSoqu6QzF0dUDca3PyP5zjdg=)
3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: /+hXj2B+GgaDbKZ5BK9B4X/m6qkH66B+b+D/QNmlbQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2291 (0x8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D615F
Validity
Not Before: Mar 28 20:39:15 2025 GMT
Not After : Apr 4 20:39:15 2025 GMT
Subject: CN=67e708f3-0d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:86:12:b5:54:a5:d8:84:f9:9f:eb:78:b7:
16:38:06:d0:eb:a1:cb:cc:7c:32:2a:0c:20:62:91:
c1:99:de:06:a3:35:14:ac:f4:7b:f3:49:c1:d7:58:
eb:10:48:e9:a3:f3:6b:ca:2e:94:ba:79:c5:01:f9:
b2:45:a7:9a:95:5b:05:25:23:7d:03:13:69:9a:46:
53:7c:4f:30:bf:6b:1e:b7:1f:7c:f8:53:90:bf:09:
60:81:f1:b0:10:41:70:81:5b:30:45:0f:69:b5:cc:
b3:a4:20:80:e6:bb:b4:97:a2:83:81:5a:78:71:96:
9b:1f:c1:c0:96:14:1a:8c:00:19:c0:46:e0:72:dc:
a0:d0:5e:5c:ee:8c:51:43:27:75:d0:88:37:bd:8e:
57:23:1d:5d:d6:91:2c:84:b4:44:50:b1:3f:62:3f:
b9:5f:10:32:04:71:30:c4:45:06:e6:7b:3c:96:a7:
4c:fe:7e:36:c7:0b:db:cc:8a:68:31:6f:92:3a:04:
44:9e:cc:c5:b5:96:c4:19:4b:dc:d3:ef:0f:28:57:
bf:7c:ff:c0:2c:1b:f2:8e:6a:93:fd:ae:8d:a5:de:
08:cb:ef:95:ac:b0:53:a4:c0:92:3a:6a:30:df:25:
4e:8c:96:9d:2e:69:16:11:f3:fb:79:0a:6c:c6:35:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:14:80:1D:E8:3E:FE:7F:25:0C:ED:84:F0:1F:91:3E:8C:89:B8:33
X509v3 Authority Key Identifier:
keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8e:af:dd:58:a6:36:a1:f5:74:25:3b:2b:70:3b:71:88:a8:
10:d4:dd:91:3b:cc:60:94:04:76:f8:83:9c:5b:56:e5:bf:81:
a4:07:bb:95:b4:ab:b8:f2:2c:37:53:1f:c4:f8:0f:7f:f7:c2:
cd:5b:a6:b7:b3:29:31:47:f0:67:21:0e:d9:8e:11:c6:45:1c:
1d:7e:97:76:77:40:e5:0d:61:af:0a:74:39:49:4a:7b:79:da:
dd:51:ac:48:14:70:f6:7d:2f:6c:b8:a7:06:8d:30:7a:d7:b0:
08:43:6d:c3:87:7a:85:ee:71:ff:85:02:e2:2b:78:99:47:65:
56:1c:b2:54:99:44:8c:d4:f4:32:2e:10:54:83:cb:5a:83:96:
34:0c:88:23:34:12:5a:7c:58:ba:80:63:d5:7b:10:bd:34:f6:
6b:19:70:02:50:a9:a5:20:f8:5c:14:2f:c4:52:73:73:2f:2b:
e7:eb:b3:7e:6b:de:eb:0c:ab:ad:1b:d6:70:b3:e2:a3:b0:3f:
df:a4:32:b9:3e:39:65:97:b1:77:31:ef:bc:5f:c5:99:9c:cb:
bb:c5:b4:55:5c:28:5b:7f:0d:98:1e:08:97:12:45:cf:1a:a9:
93:20:b3:0b:da:b1:ea:1f:36:63:72:63:ad:87:3a:dc:f2:ab:
84:52:99:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:49:33 2025 by rpki-client