Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
File: DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json)
Hash identifier: lcG3aRjNzZ6qNnZZDDQXKWk94OpsVIx3+igj28e9G1E=
Subject key identifier: 51:A0:6C:C0:6B:87:91:20:BF:26:46:BC:09:25:9C:B6:34:38:E4:7F
Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA
Certificate issuer: /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
Certificate serial: 0838
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
Manifest number: 082F
Signing time: Fri 28 Mar 2025 21:03:46 +0000
Manifest this update: Fri 28 Mar 2025 21:03:46 +0000
Manifest next update: Fri 04 Apr 2025 21:03:46 +0000
Files and hashes: 1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: z/aQj3vo5QpOay6nbtj9GnZ6UWb/R9VfW7go1isZcGA=)
2: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: UBw2PoTevAndZcrQq8icn0bOX1+H9RUk7B/v/OivD1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBF0D
Validity
Not Before: Mar 28 21:03:46 2025 GMT
Not After : Apr 4 21:03:46 2025 GMT
Subject: CN=67e70eb2-1a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:1b:0a:c6:64:cc:48:7f:ca:36:f6:78:2b:
cf:84:d4:71:af:a2:70:84:29:62:99:91:58:a4:6c:
82:59:82:84:d5:c3:22:4c:f0:5e:1c:7e:cd:ea:e3:
8b:8f:12:6d:1d:11:8f:34:2b:e5:15:7a:a5:34:e1:
15:8c:22:14:4d:a4:e0:e9:4f:0e:10:19:e0:8f:5e:
2b:b3:b2:5c:42:44:dd:4a:c9:b1:58:a8:d3:fb:0a:
31:0c:0f:1e:9e:7e:1c:34:f8:81:a7:15:9f:45:fc:
df:bd:77:58:a1:75:6b:3d:cd:e8:06:b2:2a:2c:64:
02:04:d9:10:94:07:36:52:24:fa:4e:f2:e6:a0:c0:
51:a3:25:70:7e:e3:22:f9:7c:d2:94:f1:1d:b2:d4:
23:7a:83:c4:e1:81:8b:5d:62:b1:6a:ed:7c:a8:19:
d6:8b:c2:b4:b6:ad:49:f9:2e:d4:0e:bf:93:56:69:
08:b9:a6:a2:c4:1a:25:76:06:5c:0f:b5:3e:a3:33:
ab:1f:ff:01:bd:1b:74:1c:d3:27:8f:aa:47:b8:0b:
a4:79:7e:c3:6e:8b:2f:63:bd:21:47:5a:63:1e:41:
09:fb:1e:0a:89:b2:57:a1:f6:60:93:fd:79:6a:32:
c7:ae:5e:ee:97:9e:98:a0:8a:b8:9f:1c:55:2a:9d:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A0:6C:C0:6B:87:91:20:BF:26:46:BC:09:25:9C:B6:34:38:E4:7F
X509v3 Authority Key Identifier:
keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2e:6a:13:39:96:40:2e:dd:b1:52:dd:30:75:b3:22:8c:58:
82:e3:d6:83:1f:20:22:5f:72:be:72:20:f0:13:6c:d9:e5:5c:
d6:55:6d:e6:cd:48:f6:b9:da:ba:22:72:e0:43:ec:16:e3:cd:
a4:8f:98:23:63:39:6b:cb:43:75:1d:f1:f6:6d:06:62:d1:1c:
1b:e5:52:94:8d:75:4d:6d:08:30:5b:0e:78:c4:a3:89:09:99:
cf:ad:72:07:a6:27:4d:7b:08:ea:4e:73:18:e8:3b:40:5d:2c:
10:b4:b2:25:22:fb:25:a5:e0:40:ab:3a:66:22:41:78:5f:d0:
78:75:2e:9e:80:39:cd:de:19:4f:ae:32:55:8b:de:88:40:7e:
47:6c:7e:9f:fb:5b:7a:55:cd:fa:a8:90:05:3a:a7:90:18:c4:
7e:57:36:3e:40:71:13:f9:d5:bc:ef:57:08:98:ad:21:02:f1:
8c:9e:46:c3:b4:49:01:51:38:c7:0f:5c:d3:07:ba:ab:44:3b:
5f:38:72:9c:da:78:86:1e:6e:95:27:ee:94:68:d8:e4:eb:b6:
49:d3:a0:d9:7a:62:bc:2a:80:b6:06:de:32:a8:3d:79:2d:b4:
ed:c6:4b:28:33:07:30:a5:fd:ea:16:13:f5:a8:9c:5a:ba:c6:
ab:c0:52:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:41 2025 by rpki-client