Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier: +1zy1x7qqHaaE8npJm8aTYF13sLdXIXAzPFDN9CtVCk=
Subject key identifier: E9:2E:46:00:80:A0:31:DF:82:E6:FF:53:55:17:EE:41:C6:15:A7:8F
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial: 097C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest number: 0975
Signing time: Fri 28 Mar 2025 20:24:38 +0000
Manifest this update: Fri 28 Mar 2025 20:24:38 +0000
Manifest next update: Fri 04 Apr 2025 20:24:38 +0000
Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: SThf/hnfCmLU8Rwx5r7xdQ7hBpczdjo5uRMHZhD8XOI=)
2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: 5OuJk3wuVixq/unKPrRmS/rEXR6rqWNJ7lk0q2nqJD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D83B3
Validity
Not Before: Mar 28 20:24:38 2025 GMT
Not After : Apr 4 20:24:38 2025 GMT
Subject: CN=67e70586-766c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:a1:3e:6d:3e:3c:0b:56:42:73:e0:6c:70:
d1:38:d3:d9:f5:03:2f:56:fe:21:84:4e:67:9a:8a:
f0:f9:9f:51:98:a0:ca:bc:67:89:08:c6:cf:d1:49:
2b:d8:68:12:07:9b:d5:9b:2b:3c:a2:49:3c:fa:3b:
ac:e6:bd:97:8f:c9:2a:0b:71:99:6f:37:68:3a:4c:
88:eb:a2:04:5b:10:80:89:1d:63:ab:ad:5a:a9:a8:
da:cf:ab:3c:f3:86:26:b6:da:a6:20:fd:d3:cb:35:
09:2d:50:8a:2c:40:c9:de:43:c8:7f:1a:59:f9:40:
57:83:2e:28:b0:99:f9:fb:87:c4:a8:90:02:dc:1e:
82:e5:3f:14:21:82:2e:a6:a5:5f:76:c8:51:c9:16:
c1:9e:36:5b:55:37:8e:e1:5c:f6:54:6f:2c:7e:a2:
86:2a:69:c7:f8:77:7b:93:21:60:d9:bf:b8:6f:32:
ab:1c:7b:f7:da:58:ac:15:40:30:97:7a:c3:a6:51:
2f:2f:d4:e9:87:1a:ae:fe:9e:f2:91:f0:5c:4d:e6:
95:a3:a2:55:59:23:31:1b:86:5b:86:00:d5:81:e3:
15:df:15:6d:b3:64:14:cd:82:87:ab:6b:67:e0:fc:
cd:50:a7:dc:56:c6:ae:a5:7f:1d:df:1d:a0:e7:56:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2E:46:00:80:A0:31:DF:82:E6:FF:53:55:17:EE:41:C6:15:A7:8F
X509v3 Authority Key Identifier:
keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:7d:2b:41:5b:1a:53:37:c5:cf:b4:aa:26:7b:d4:6e:7d:f1:
08:64:1f:51:ea:25:a0:2f:a1:f2:5c:b2:f7:17:dd:69:15:9b:
3b:7c:9d:30:1a:ed:f5:49:2f:bb:fe:72:d5:79:bc:5d:7d:25:
23:ec:85:ed:b6:54:ae:64:c2:a7:41:55:53:5b:41:61:fd:d2:
35:8f:7b:45:b7:21:05:1c:64:b8:f3:46:fa:85:4d:86:cf:c0:
08:ca:a9:bc:bb:b6:b5:32:43:f5:41:ed:0e:a6:43:d6:20:72:
f6:43:fe:1f:7f:48:7b:91:e1:d0:41:2d:45:21:34:38:40:b9:
46:3a:8c:59:b8:d0:44:85:ec:6e:f5:30:0a:15:a4:d9:b6:da:
22:2a:99:2b:0c:b6:77:eb:26:14:0f:f9:fb:47:5b:22:c9:6a:
8a:21:d6:c3:cf:58:62:ea:de:a2:f9:18:e7:93:20:c5:9f:b6:
13:a3:fe:b4:46:12:e9:cf:a7:6c:f5:ed:b0:39:27:f1:af:1d:
a6:66:6c:46:17:1a:c9:38:18:d0:af:1e:32:ed:26:f4:1e:4b:
71:2a:9b:dc:6b:66:12:6f:fd:a7:a1:25:06:3c:f1:a2:48:b5:
54:af:be:c3:a4:f1:20:d5:c0:fc:33:d9:fb:a6:ae:37:eb:be:
8c:69:06:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:53:55 2025 by rpki-client