Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
File: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft (raw, json)
Hash identifier: Gw4WiRGOzD99lYDg0yt+UcWmactk6pwuVQ/tOey42Gw=
Subject key identifier: 2A:73:98:2C:20:1F:ED:A3:99:3C:63:FD:9F:E5:6F:A7:E1:1E:06:1E
Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C
Certificate issuer: /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
Manifest number: 0109
Signing time: Sat 29 Mar 2025 04:26:35 +0000
Manifest this update: Sat 29 Mar 2025 04:26:35 +0000
Manifest next update: Sat 05 Apr 2025 04:26:35 +0000
Files and hashes: 1: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl (hash: HwrNoMd38y63mmYMiCe0jPtl/f86fhu3cLcUeBUfoug=)
2: 18066BD682CD11EE82EA6452C4F9AE02.roa (hash: Qq2SAGpjgK4uluR309YS8e5suVCymWeDT3qQa1R/qak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB916
Validity
Not Before: Mar 29 04:26:35 2025 GMT
Not After : Apr 5 04:26:35 2025 GMT
Subject: CN=67e7767b-9ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:3e:f0:65:42:25:77:1b:2e:09:8f:db:68:
c7:c0:9e:da:97:29:fe:2d:c1:ec:d1:3f:01:a8:c0:
a3:58:85:55:e8:12:80:36:9c:7c:97:78:36:40:ba:
c9:64:53:bf:d9:71:f0:a0:8f:41:25:d4:fb:8e:6a:
96:e1:a6:9b:16:4b:a7:ad:54:5f:84:90:00:e8:65:
5c:7d:60:40:07:cd:f7:80:fa:fc:33:b7:19:b0:c7:
47:ad:d8:ce:07:5f:fd:db:35:44:98:c3:0e:9b:5b:
11:67:57:fb:c5:8f:1f:48:c6:da:fe:9b:23:0c:a8:
55:69:3b:78:46:a6:c5:ed:1e:14:7d:3d:31:56:0f:
14:3f:2b:a5:47:c3:f9:76:4e:23:eb:5a:e5:a4:5b:
1a:f9:09:73:a7:b5:d7:b9:4f:4a:4a:b7:48:f4:ff:
66:42:3d:f9:45:2c:4a:ba:27:ba:4b:0b:78:43:5b:
58:04:53:5b:f9:a7:91:fa:2a:06:75:e2:18:1b:58:
3c:b3:f0:b4:89:d4:be:ce:d4:7c:47:cb:7f:b6:2f:
73:e7:dc:a9:c0:a8:b2:f9:14:f3:90:f6:ac:86:44:
ee:99:5b:3a:46:c3:d0:81:4c:66:22:96:83:0c:ed:
7c:6e:9c:66:50:7b:3a:c0:55:76:31:11:a0:2b:d2:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:98:2C:20:1F:ED:A3:99:3C:63:FD:9F:E5:6F:A7:E1:1E:06:1E
X509v3 Authority Key Identifier:
keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:52:65:67:cc:36:fd:65:f2:85:ed:1d:08:fc:46:85:8f:d1:
72:3d:7f:03:35:93:e1:69:e9:b9:a6:ca:8f:9c:f4:46:7c:7a:
ad:a6:e7:4c:46:88:7f:f4:f6:01:f8:ef:48:2a:ca:d4:91:5c:
67:c4:66:a4:ca:73:0f:56:16:a2:e3:52:cd:0e:41:01:7c:8a:
74:8e:4f:55:25:0a:e3:69:e3:11:4c:b3:d0:1b:fe:75:24:15:
25:a7:da:6c:4b:a3:97:b3:6a:6a:b7:54:45:15:39:8c:e9:45:
53:7f:90:db:76:de:3a:da:eb:86:28:66:7d:b1:b4:81:d6:05:
2b:5e:5b:92:6e:0b:bb:68:27:30:0f:53:2b:87:cd:98:d1:5a:
05:74:9f:2a:39:14:8b:5e:5b:60:c1:6c:f3:6a:79:08:e7:bc:
3d:c9:b9:3c:81:1d:6a:23:66:2a:7b:99:1d:19:8a:11:9e:fd:
90:ca:0d:69:82:a1:7e:cb:bc:59:2d:68:80:f1:8d:4c:9f:bf:
d9:33:2c:5e:61:d8:79:aa:0f:58:4c:78:29:ae:7c:33:62:f9:
b3:e3:fa:48:65:58:84:40:a9:c6:df:7d:9a:5f:30:21:9f:66:
03:4f:b4:a8:56:87:eb:b6:05:3a:c2:ab:d0:f1:bd:d1:24:d5:
5c:ad:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:32:49 2025 by rpki-client