Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
File: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft (raw, json)
Hash identifier: aAOBimEowvwWevAC7pEOEr5nBKYfXGjA7uFqEYZOgfk=
Subject key identifier: B9:F7:82:11:EE:46:8F:57:59:C9:A0:1C:0A:05:C9:FD:E8:58:1E:08
Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
Certificate issuer: /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Certificate serial: 25F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
Manifest number: 25E2
Signing time: Fri 28 Mar 2025 15:47:39 +0000
Manifest this update: Fri 28 Mar 2025 15:47:39 +0000
Manifest next update: Fri 04 Apr 2025 15:47:39 +0000
Files and hashes: 1: Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl (hash: d07bjOT+nzotbVeC/3DBOqIcj3MGy4Y+nxV7IZtfrzA=)
2: E54E5FF6632311ED8D313442C4F9AE02.roa (hash: +bflLncVpUKisFQ3ZZUQI/J0k3+BOK9UN6bLx8p1G6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9719 (0x25f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC302
Validity
Not Before: Mar 28 15:47:39 2025 GMT
Not After : Apr 4 15:47:39 2025 GMT
Subject: CN=67e6c49b-b0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cd:70:98:b3:b3:18:a7:12:0c:4a:b9:2b:50:
d8:b1:e2:c3:1e:18:ad:04:87:e8:a9:8c:68:52:fc:
f9:0e:68:f8:69:94:bd:27:e7:a2:bb:b8:20:fc:37:
1f:a7:f0:8c:a0:46:ac:70:16:08:55:81:81:4a:8f:
1a:68:f2:1e:d2:27:3b:b1:7f:ce:48:6d:53:40:75:
e8:e1:0c:4f:9b:99:31:cb:66:d9:a6:f7:88:45:47:
f6:27:de:37:0f:98:44:57:97:64:4a:5a:06:5a:af:
65:4d:c2:b8:6f:e9:a7:bc:ed:c6:d8:7c:dc:b3:57:
3f:ea:f4:1f:3d:4a:78:6f:9b:8f:b6:3d:4e:c9:ad:
ea:82:1a:f4:f4:98:19:35:21:5f:3a:7e:b0:3d:e0:
b0:3c:77:99:5a:df:b6:3d:16:e0:6b:00:a2:9a:99:
1c:e7:77:64:ae:ab:6c:7a:a8:4b:8d:43:31:45:0f:
0c:9b:66:c7:83:57:4f:ab:e0:e0:0f:72:47:04:c7:
bc:91:e6:74:d3:04:fa:1b:65:58:24:67:28:ca:c2:
30:92:d5:05:60:be:fa:45:da:44:e2:96:04:fd:1c:
c9:85:ed:39:c7:25:6c:c3:f7:ce:dc:d2:49:bb:50:
b3:dc:20:3c:ce:c2:ce:8f:26:6f:f2:dd:c8:a7:b4:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F7:82:11:EE:46:8F:57:59:C9:A0:1C:0A:05:C9:FD:E8:58:1E:08
X509v3 Authority Key Identifier:
keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2d:a3:c1:d9:04:15:5f:a9:bb:9b:c4:1e:1c:55:0a:e1:88:
a7:c5:f7:2f:c4:4d:dd:e2:05:f4:f0:5b:d8:6f:42:21:ab:ea:
76:77:c4:b2:bc:bf:47:32:2c:b0:98:13:c8:dc:f6:a9:ce:5f:
62:ee:92:0b:7d:36:43:d5:49:cf:08:a4:13:2d:30:6c:96:6a:
b8:73:b0:19:23:01:5a:b4:81:e6:f5:e7:23:20:25:59:72:40:
6f:a6:51:b1:e8:2e:2f:d2:61:8d:88:1e:fc:a1:50:a5:69:b2:
77:5d:cd:33:c4:c2:66:bc:1f:77:bd:28:d5:5a:03:7e:51:6f:
e8:c8:e9:4f:bf:1c:96:ac:03:00:92:ea:63:bb:9f:d7:db:13:
3f:99:b7:7f:c1:2e:30:f4:3a:10:7a:74:73:73:9d:d9:a2:06:
d1:21:15:46:0e:7a:74:95:1a:e8:73:bc:23:e4:1e:f7:76:f4:
66:35:26:c5:79:4b:11:4d:06:8c:e8:ee:72:58:1b:d3:e4:c8:
68:1e:1d:53:66:ab:21:5e:eb:80:b6:c9:f3:aa:fb:ba:f6:2d:
61:42:03:58:81:0e:1f:cb:8b:6f:cd:cb:38:c0:5e:ef:37:27:
58:bb:46:00:07:22:d2:16:76:3e:1d:d3:bf:3d:8b:d7:25:d2:
5c:17:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:46:40 2025 by rpki-client