
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json)
Hash identifier: FvfhYkNpFcSjcL5vOdgxSpBmXw/yvobMXZUumZg4KhE=
Subject key identifier: F8:BB:D4:0E:91:6C:27:06:24:1C:A8:8C:E6:BF:F4:99:0F:BF:78:8F
Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
Manifest number: 0104
Signing time: Sat 29 Mar 2025 04:28:24 +0000
Manifest this update: Sat 29 Mar 2025 04:28:23 +0000
Manifest next update: Sat 05 Apr 2025 04:28:23 +0000
Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: ZsK7Oi8KQPmkHqkVYzvqqiP6sb6OqxeCC6Chz5fEi5c=)
2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: hp0cPGEFV/Gox4VqOM6s1YIVtMXxD5phyzvS1nTNTu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCDB3
Validity
Not Before: Mar 29 04:28:23 2025 GMT
Not After : Apr 5 04:28:23 2025 GMT
Subject: CN=67e776e7-8ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:16:d2:ff:9b:34:eb:7f:f2:dd:b5:cd:f6:
48:ff:b4:69:08:cd:1d:32:8d:e2:8b:a9:7c:84:43:
0c:24:cc:3a:61:20:57:4f:1a:42:6a:50:b7:78:9f:
2c:f2:18:57:14:85:6a:70:45:03:6b:d2:6e:fa:64:
9e:6b:54:00:14:33:4e:e1:2f:09:b8:73:a1:20:91:
6e:93:21:be:a7:34:4c:fe:74:8f:f4:ba:e4:f6:d3:
e6:03:e3:e6:fa:de:62:db:43:50:db:b8:ce:49:52:
eb:89:4b:cd:e5:93:c0:a0:e5:9a:40:b5:2d:40:6b:
51:3c:b0:da:62:93:b6:bf:ee:d7:be:6c:42:99:58:
17:e8:9b:00:28:db:21:cf:c8:e5:24:85:5b:8e:b4:
55:15:ef:94:e3:15:32:7d:e8:bb:57:b1:23:6e:7e:
e9:b4:90:cf:43:2c:97:79:d3:bf:ea:23:a8:49:7a:
13:f2:90:38:22:55:58:62:97:83:2f:b5:75:e8:09:
c3:5f:95:50:f7:f8:ba:79:30:24:f8:96:d1:42:cd:
1a:4d:87:ca:22:c0:ba:ca:70:24:a1:9a:33:3c:fb:
34:be:ce:c7:15:33:9f:1d:d9:81:25:8c:5d:df:92:
74:ff:48:49:07:cd:7e:c5:7e:0d:8d:12:13:ae:44:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:D4:0E:91:6C:27:06:24:1C:A8:8C:E6:BF:F4:99:0F:BF:78:8F
X509v3 Authority Key Identifier:
keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a4:7c:a5:41:be:f7:2f:c8:0e:c7:46:f7:6c:50:eb:8d:29:
cc:bd:a8:f1:64:75:21:58:83:b3:05:ec:46:0c:47:eb:f7:07:
f2:3b:3a:e7:d7:18:bb:9c:7f:13:37:d3:84:3e:d9:3e:5b:35:
e9:4d:b9:d3:18:69:fb:99:21:02:7b:08:89:2d:5b:4f:b5:25:
09:be:63:5b:c2:46:8b:bd:b4:8b:1b:a2:df:bf:9e:91:56:b1:
2d:1c:a6:c6:3a:50:ed:2e:de:07:ca:57:55:37:ff:7e:c2:d0:
a1:50:5f:ee:9f:e9:e9:7c:84:43:b4:68:55:0f:73:60:12:5d:
5c:ef:c9:22:06:b4:1a:6f:1d:6c:bf:82:ba:83:b0:ca:30:cc:
8e:30:ed:7d:fa:d0:59:4f:c0:58:a5:8e:df:d4:ac:8c:22:0d:
eb:ee:cd:c3:a7:74:85:f9:76:58:c9:7e:cf:d8:e4:53:74:91:
73:f3:8d:d2:a9:3c:18:d0:b8:1f:8d:36:7f:1f:d6:fc:fb:da:
81:ac:3a:92:46:b7:d1:43:9d:ec:b0:4a:0a:e9:88:0a:eb:8f:
51:29:a5:4e:32:6f:98:ec:e5:29:14:68:92:92:9f:1c:e1:0b:
cb:9f:3a:bc:44:2e:65:d5:b9:0b:63:e3:f5:03:c8:4f:23:a3:
e3:75:19:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:59 2025 by rpki-client