Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
File: MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json)
Hash identifier: +andaYn/8JcK3JnOS41Zfr6/W8HQFvTuFYqZc11SMsI=
Subject key identifier: D6:98:6D:45:72:4C:28:CF:E0:78:F9:F7:B0:35:5E:18:2C:BD:F5:AF
Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC
Certificate issuer: /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
Certificate serial: 18F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
Manifest number: 18E7
Signing time: Fri 28 Mar 2025 16:33:21 +0000
Manifest this update: Fri 28 Mar 2025 16:33:21 +0000
Manifest next update: Fri 04 Apr 2025 16:33:21 +0000
Files and hashes: 1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: kaQvjT9DU69uZRUSwe3scOTDZ6ie9sxCSW0iAgrKeD4=)
2: AE929D88823711E782F9A440C4F9AE02.roa (hash: sKS3rMJ6It6/rpeTWZ/r67AylRsKXL//6e7PLZw6fXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6385 (0x18f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC5E3
Validity
Not Before: Mar 28 16:33:21 2025 GMT
Not After : Apr 4 16:33:21 2025 GMT
Subject: CN=67e6cf51-99b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:9d:b8:66:c9:52:1a:8b:60:aa:33:8d:b5:
3f:b5:ce:87:da:fd:47:4c:0c:5f:43:db:55:cc:b6:
8b:38:7e:69:99:df:1c:66:42:31:64:64:17:5f:60:
e4:9d:66:6c:71:ff:16:2d:91:eb:19:a3:b5:54:50:
96:d2:7a:37:e2:f0:6d:bc:9e:f0:24:f4:d0:d8:98:
3b:81:8d:ca:7a:05:8c:fb:a5:03:1b:02:5b:69:fb:
34:cf:57:02:ba:31:e7:9b:bf:8d:1f:06:e9:fe:7d:
b8:00:f9:7b:a4:5e:86:c1:c3:55:53:fc:44:89:98:
dd:31:72:a7:83:20:7c:ce:bd:4d:ed:b8:da:71:49:
7d:a9:8c:91:7e:2b:01:50:26:88:69:38:41:5d:78:
dc:6a:4a:46:67:19:02:60:a4:01:76:dd:6e:70:8e:
5b:51:41:0e:98:90:44:9c:34:6c:64:9e:26:58:d5:
91:83:b9:2b:82:86:a6:d1:5f:98:7c:31:0f:ef:87:
21:b7:74:2e:3d:a9:1b:f5:09:7f:37:cb:2f:73:22:
35:02:c4:9a:1e:36:d6:73:fc:b0:6f:87:c0:2b:96:
dd:ce:ea:60:f8:80:f5:1f:11:8a:55:80:7d:ed:34:
64:4b:c3:11:20:29:91:63:56:3d:8d:e4:b2:53:e8:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:6D:45:72:4C:28:CF:E0:78:F9:F7:B0:35:5E:18:2C:BD:F5:AF
X509v3 Authority Key Identifier:
keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b4:42:92:41:09:e9:2e:02:dc:dd:0c:fa:39:e3:d0:59:5e:
81:84:a7:ce:64:6f:8c:e3:c8:12:65:5c:ba:2f:45:1f:06:53:
52:33:40:da:cc:50:44:ec:b0:fe:07:db:7b:da:21:c5:08:33:
3b:b5:5b:35:3a:1f:3c:2e:81:aa:37:0b:bb:ee:0a:d6:2d:a3:
20:23:48:d1:86:8e:a9:11:79:b8:83:1f:9c:63:94:e0:8b:c8:
55:78:79:2e:b8:db:79:b2:db:90:a7:ff:26:85:9b:d4:11:0b:
4e:18:19:c4:b7:79:f9:15:22:e4:de:28:3e:a9:fc:aa:61:a2:
3f:d8:a9:25:05:23:d9:c7:8d:62:09:be:7b:fe:d9:8c:e4:82:
72:61:91:43:8b:3b:70:7e:8b:80:41:2a:d0:1f:9b:49:11:da:
75:90:54:e2:c8:b5:7b:a1:66:58:1e:12:f2:39:83:b4:e4:74:
30:a7:fd:0c:93:56:a7:d1:8b:52:7b:58:6e:5f:64:41:5a:58:
b9:a2:87:a0:71:fc:d3:bd:c1:be:9c:b1:2b:45:8e:75:5e:ca:
1f:f7:26:97:4b:dd:41:e5:94:ea:61:84:6b:f8:d8:b3:09:b6:
f3:ae:f4:9d:85:02:41:a7:97:0e:50:36:ae:0b:2f:de:f3:25:
94:06:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:17:26 2025 by rpki-client