Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json)
Hash identifier: k3ymNDKXSI9ztZcJ2PzmfJKdPi18QH4FM1XDVYH72JM=
Subject key identifier: 27:F1:A4:87:EA:92:C6:11:4B:5F:30:06:FB:F0:DC:9E:58:21:45:1C
Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F
Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
Manifest number: 59
Signing time: Sat 29 Mar 2025 06:30:54 +0000
Manifest this update: Sat 29 Mar 2025 06:30:54 +0000
Manifest next update: Sat 05 Apr 2025 06:30:54 +0000
Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: Gc8aiIuOWjso/HEg8xcnDhsLPRAeL8eDlOVUiNbgSIg=)
2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: cHJy1BLtElHS3p1bo+4QsrHmfc/col4vczERE1sjyMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBF0C
Validity
Not Before: Mar 29 06:30:54 2025 GMT
Not After : Apr 5 06:30:54 2025 GMT
Subject: CN=67e7939e-5c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:3e:4e:de:f7:7f:ab:0c:15:86:44:83:ad:
c2:4f:c0:0b:e4:0b:6f:94:81:71:12:99:7f:c2:b6:
5c:b1:4a:0c:8f:93:37:cb:1d:ea:ec:42:ac:0c:02:
1a:85:a7:59:f9:7f:ec:63:74:7c:6a:87:e2:72:89:
27:14:fa:99:ea:22:22:e4:84:28:40:7e:13:e9:2f:
6b:2d:14:bf:2e:8f:21:5c:a5:fa:4b:3b:04:5f:28:
75:a2:84:7c:f6:b5:8d:fe:5c:a5:de:27:15:8a:ca:
1f:d8:ac:59:a6:85:a5:52:c9:b6:f9:2c:47:67:1c:
d7:84:44:91:8c:27:3c:33:88:ed:df:6c:1f:a4:88:
26:48:09:0a:97:a6:d1:8e:a8:05:dd:fb:7c:a4:55:
d1:6a:ab:91:24:15:03:8e:d3:8f:f8:57:78:e5:e6:
bd:c2:7f:6a:86:c9:d2:46:98:19:66:8b:dc:06:37:
ec:e5:a0:41:5d:41:d7:bb:6c:9b:85:4a:83:f8:8e:
91:ce:ab:a9:ed:67:ff:b7:09:98:46:a5:be:5e:b5:
95:4a:01:15:89:6d:c5:e1:c6:c7:53:ef:a7:72:1b:
84:b5:03:a5:d3:27:b9:c7:2e:a4:b3:77:9e:51:5c:
a3:1a:9a:61:ca:a2:4f:33:06:f1:f0:fe:b6:68:b9:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F1:A4:87:EA:92:C6:11:4B:5F:30:06:FB:F0:DC:9E:58:21:45:1C
X509v3 Authority Key Identifier:
keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:4f:70:1c:d9:a4:5f:eb:97:bf:cc:12:4e:9a:b1:6b:63:5c:
24:20:11:7a:19:15:47:d6:f6:5f:ca:b5:46:11:76:02:4b:d5:
5c:44:a4:23:11:7c:88:2f:63:27:eb:ee:f4:24:74:b5:b2:a9:
f8:f4:10:e7:fd:4d:fc:a0:c8:25:bc:cd:b9:f3:a4:62:91:bd:
c1:45:46:ff:58:0a:b4:b8:12:e1:9a:fe:0a:e6:c2:e7:81:fa:
1f:c5:cb:4c:e6:66:68:a5:74:9b:de:1d:e2:92:4b:7c:ce:1a:
73:c5:88:4b:c0:4d:72:81:6a:7f:2d:01:e7:dc:3c:72:07:b4:
fb:2a:d8:83:cf:bc:9d:f5:c0:c4:a0:0c:0a:3b:83:07:2d:c7:
be:04:14:48:e8:c7:19:16:f8:63:31:b5:03:2c:91:ab:c0:3e:
c1:b0:1b:ab:a4:d9:a1:e5:7f:82:a5:4b:15:52:97:6e:2b:36:
54:28:ee:ca:51:25:69:c7:98:c9:be:99:e0:73:b2:7b:bb:8b:
6b:bd:bf:a7:fa:40:22:79:14:75:9b:a0:55:bb:78:2d:ee:c7:
4f:9c:40:05:1b:3c:67:63:aa:47:81:47:eb:1b:f0:d1:e8:97:
d3:bd:5b:9e:c8:db:e8:cf:d0:84:b9:40:41:21:f5:e3:b8:e9:
5a:6f:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:52 2025 by rpki-client