Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier: PSViX7FVPpmudv/XUoSembXgeoATtz86KaMFmLqkwmM=
Subject key identifier: 20:CE:6B:A6:30:64:0C:8D:A9:F8:C0:F4:20:01:03:45:F4:D9:FA:D7
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number: 011C
Signing time: Sat 29 Mar 2025 04:20:17 +0000
Manifest this update: Sat 29 Mar 2025 04:20:17 +0000
Manifest next update: Sat 05 Apr 2025 04:20:17 +0000
Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: lLrHuAW9e/YPBsrkRp6zmcd8P3wmgR+aPFq0aIZBrqg=)
2: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: J8+lxSFWmAdItoP7AGJ9n1czEhUKmEFacTRv8zqHb88=)
3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: mZ/f/kYNljSI/Y1NgwFenBb3960hqwOok7c22vWxduM=)
4: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: LjDyklpsY4tER3qyvIF/MVWeA44K8qWvTHC+14bUFS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9
Validity
Not Before: Mar 29 04:20:17 2025 GMT
Not After : Apr 5 04:20:17 2025 GMT
Subject: CN=67e77501-57ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:2d:03:05:67:5a:cd:a9:ee:f3:a7:5e:73:
27:30:1d:1b:53:87:3b:c9:27:d7:4f:dd:73:e7:31:
a4:86:30:80:17:b2:03:b2:75:6c:67:6a:8c:7a:4e:
4f:73:00:88:97:66:43:c3:d1:7e:32:66:fe:10:bd:
f9:63:59:f4:7b:a7:eb:9a:00:f8:54:ee:98:4f:fc:
19:2d:a7:fe:de:d2:86:28:17:a4:6a:a9:a6:61:89:
5c:76:c3:fd:7e:f3:14:bf:4a:1c:fe:5d:6c:82:15:
4c:bd:50:a5:86:56:d8:5d:1f:31:d0:05:e2:e2:6f:
03:83:ec:c1:c8:5e:8f:2c:58:ec:4f:a6:c8:df:3e:
bb:7d:02:ef:61:25:aa:5d:e2:14:a7:6f:35:ca:6a:
3e:dc:89:b8:00:11:f7:80:9d:8b:42:ee:9c:ab:fb:
72:0e:d1:37:8a:ad:95:e0:33:5e:02:92:31:f4:7a:
71:ed:fe:a0:9a:d1:a2:06:81:91:26:4e:68:9d:03:
47:c8:bc:33:0e:94:3e:8f:1a:67:1e:4e:6a:b8:de:
af:51:71:43:55:64:de:39:e1:23:89:9a:28:f8:31:
17:86:66:6c:84:72:ae:50:09:87:ee:99:b8:5d:58:
88:0f:87:14:7c:82:9f:68:8a:87:4c:e3:de:24:83:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:6B:A6:30:64:0C:8D:A9:F8:C0:F4:20:01:03:45:F4:D9:FA:D7
X509v3 Authority Key Identifier:
keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:50:75:15:e8:fa:5f:07:79:32:d7:4a:66:8f:bc:bc:d7:8e:
27:82:d8:b2:c4:62:cf:ea:d8:6b:3a:9d:8b:76:cc:3d:9e:2b:
36:e5:c1:f9:36:9e:1d:f2:3a:e7:6a:5c:09:41:98:9e:24:1f:
b3:37:94:77:5e:c0:66:35:5e:a2:06:8b:0b:09:39:6b:70:17:
f5:00:bc:bd:4b:42:b0:af:ec:c1:32:77:bb:90:ac:bc:70:9c:
3a:64:a5:0e:d8:b1:27:6d:96:45:69:57:dd:11:0d:1e:be:36:
f5:8f:e0:31:c1:2f:2e:04:6d:27:2c:44:6d:2a:d8:d5:e0:2e:
c3:a6:eb:6a:61:66:10:9b:c6:e3:c0:8f:00:26:8d:fc:6d:8a:
78:af:43:5f:48:83:df:4b:0c:bb:30:5f:92:82:1d:60:c4:14:
f3:df:c0:b1:ad:0c:d1:38:78:ba:1f:f9:81:07:75:84:73:e1:
5d:b6:07:ab:c4:84:cc:73:b2:34:5c:1a:2b:a3:20:99:3d:7f:
a5:ea:11:5f:15:ee:f0:c2:92:a6:26:4d:a0:43:b8:5d:17:75:
6d:37:cd:f5:5a:5f:0f:d1:13:63:01:e6:65:ad:d4:f5:be:e8:
f4:92:b9:b0:39:5a:e4:67:ce:2d:f4:94:81:07:e6:3b:6a:4e:
06:45:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:12:51 2025 by rpki-client