Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json)
Hash identifier: Gu1+j9D4m8QId5aclebdHoTyGTb/oVXRA23JEw9ZKaQ=
Subject key identifier: F9:93:5E:A6:7A:8C:3B:95:DA:1D:15:C1:24:CD:6B:E4:D0:C5:6F:64
Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
Certificate serial: 03F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
Manifest number: 03E2
Signing time: Sat 29 Mar 2025 00:52:30 +0000
Manifest this update: Sat 29 Mar 2025 00:52:29 +0000
Manifest next update: Sat 05 Apr 2025 00:52:29 +0000
Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: 6z1qPYMxAauCrQc7rktTTlskaCDZV0ph7NzzTAwksHc=)
2: 0D9F5398F5BC11EFBAC15C37C4F9AE02.roa (hash: O3bzfF4OFv/ZMImyiqgoUlbfFWkJTmzpCAAUfvbAzzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1014 (0x3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD4A6
Validity
Not Before: Mar 29 00:52:29 2025 GMT
Not After : Apr 5 00:52:29 2025 GMT
Subject: CN=67e7444d-2067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:52:6a:ae:67:23:e6:34:8d:9b:63:b7:fd:
33:50:ba:32:72:9e:35:00:90:1b:b3:ac:4a:0b:10:
e4:8a:ce:74:3e:15:b2:00:b7:06:f7:0b:69:55:4b:
44:af:3f:da:f3:48:3e:36:a3:ee:0f:6d:37:ce:27:
ad:af:da:77:7a:f2:40:2c:12:42:1d:b4:38:80:10:
7f:d4:9b:4e:89:00:81:f7:9e:1b:82:6e:7f:25:36:
c2:a2:39:a8:01:30:69:86:29:0b:16:3d:c2:ad:28:
9d:c0:be:60:3a:51:58:f4:13:52:a9:5f:1d:76:a5:
a1:e7:a1:31:d7:43:80:89:ee:6f:57:42:6d:25:15:
79:54:1d:d7:f3:2a:28:3f:d4:59:cd:a0:e7:cb:7a:
41:5a:bc:14:e7:bb:de:c3:57:07:85:38:9b:cb:03:
a9:4c:e1:e4:90:9b:45:c5:24:18:a8:3f:1b:3b:a1:
98:4e:79:53:97:5d:30:59:2c:71:59:6b:55:5d:a3:
1c:8b:c5:b7:77:73:11:0c:57:1c:97:05:8c:de:f4:
0c:05:4e:3c:24:56:1f:ce:7a:fc:3b:3c:b3:8a:b3:
65:b5:32:57:ea:c8:3e:5e:66:a8:21:b3:ca:7a:c7:
8b:a3:fc:f7:3d:23:60:26:f5:1b:02:8e:71:87:0d:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:93:5E:A6:7A:8C:3B:95:DA:1D:15:C1:24:CD:6B:E4:D0:C5:6F:64
X509v3 Authority Key Identifier:
keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e9:e4:fe:b8:ba:4f:a4:9f:61:d5:cd:0e:a6:98:3a:b4:ae:
09:32:be:db:fd:84:4e:71:2b:a5:61:af:01:33:ad:b5:ae:3b:
ec:b3:e4:69:31:bc:67:61:71:f7:63:ad:8d:15:95:a2:ba:b0:
a9:8b:cf:dd:94:81:c2:67:ba:85:68:d0:57:73:b6:1d:d4:cf:
7a:cf:4c:e5:33:84:01:81:99:f1:ef:d2:86:a3:17:20:ef:de:
9d:d7:c2:c1:a5:34:ef:c0:3d:ff:5e:a6:43:23:fa:e8:29:93:
be:e1:19:7d:be:37:43:a8:4c:2c:19:7b:4f:a9:dc:31:c4:93:
f0:ad:de:25:50:a8:72:ee:bb:e1:c7:5b:9e:d5:1a:f7:7e:b0:
44:cb:34:62:44:09:94:4a:09:cf:e3:61:3c:8a:e2:63:9d:8f:
34:24:22:3b:b9:13:a4:90:0c:1e:57:dd:3c:37:70:fd:54:91:
f8:49:31:f5:10:15:54:7b:26:01:d8:af:82:1c:f7:16:ac:c7:
e7:5a:5f:fe:9a:ee:da:c6:8f:ea:80:30:22:57:45:69:40:49:
f9:f5:8a:fa:2a:c2:a6:90:03:9b:e0:0e:80:44:ff:31:0e:3f:
25:d8:73:51:56:9a:92:40:4d:d0:d9:e9:7e:20:37:48:b5:e3:
67:86:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:32:36 2025 by rpki-client