Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
File: ElYBj-blOMQA9j_H4SHDpwHy3qk.mft (raw, json)
Hash identifier: 3d0GB9jT+UEGOFZdJLs6tnC+IdKmz0QpnkkmrPiwH04=
Subject key identifier: 3D:D8:15:EB:67:64:00:2D:C5:AB:E3:A1:06:19:77:A2:95:AE:3B:36
Authority key identifier: 12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9
Certificate issuer: /CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9
Certificate serial: 09C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
Manifest number: 09BA
Signing time: Fri 28 Mar 2025 20:15:16 +0000
Manifest this update: Fri 28 Mar 2025 20:15:15 +0000
Manifest next update: Fri 04 Apr 2025 20:15:15 +0000
Files and hashes: 1: ElYBj-blOMQA9j_H4SHDpwHy3qk.crl (hash: /XPfSal8LSRww9lLy5RCzEmieBpGiQVbyRPTyXT9wR8=)
2: 542CA96A0B1911EB92F1EB12C4F9AE02.roa (hash: cHN96rakiLMMTmY831Imo1GOZfeLTYfA5J/r8htgxsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00FC
Validity
Not Before: Mar 28 20:15:15 2025 GMT
Not After : Apr 4 20:15:15 2025 GMT
Subject: CN=67e70354-033c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:13:f4:15:3b:46:76:33:c9:84:b2:d7:ce:
65:f1:87:9a:11:17:95:37:27:a5:f1:60:9c:dd:0f:
06:ee:64:72:70:ba:d6:10:0e:2e:53:6a:f7:06:8c:
30:47:30:a0:a2:ec:8f:8e:6b:10:09:a5:a6:77:fa:
df:a4:36:2f:bd:bf:6c:37:8a:2c:ca:d6:22:10:e1:
91:56:17:a8:5e:9d:fa:30:fe:11:9d:f7:b1:00:dc:
56:f6:b3:a1:82:da:93:49:38:9d:02:35:a9:14:b3:
59:ec:a2:07:6f:ed:b0:76:df:a5:58:ba:0f:68:c0:
cd:7f:c6:f1:91:e3:2b:61:2b:2b:c6:20:aa:7f:9a:
2f:49:69:1e:72:b9:fb:31:b4:f1:52:57:9c:ef:22:
0a:ba:41:6d:a1:aa:8b:bb:25:13:93:0b:cb:54:c6:
35:53:97:2c:a9:f6:68:91:c7:d7:f0:70:37:28:fc:
b4:7f:35:90:45:66:8b:f7:3b:d7:74:00:9a:21:82:
de:b3:ae:8a:d2:0b:e6:52:0d:40:55:a7:eb:8e:ed:
42:4f:03:28:38:07:ad:18:2f:e8:15:a5:c9:c0:f6:
ba:af:3c:cd:32:70:38:cb:95:f5:38:d5:5f:3e:cc:
03:33:f8:e0:41:f6:58:6d:78:d1:26:b8:22:77:34:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D8:15:EB:67:64:00:2D:C5:AB:E3:A1:06:19:77:A2:95:AE:3B:36
X509v3 Authority Key Identifier:
keyid:12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f7:ee:97:d2:2c:e8:da:dd:8e:dd:0b:e0:3f:e6:8c:b9:c2:
89:b1:21:ef:5d:d4:54:51:e2:4b:7d:7a:51:bd:fd:e1:34:03:
54:4e:03:c2:4c:dc:a2:50:a0:39:e0:5f:0e:fa:7a:ab:db:8a:
06:1a:56:e4:b9:42:ec:68:5c:fa:90:05:ec:d6:73:29:0b:07:
59:54:7f:8a:40:10:30:5b:3f:89:eb:b7:49:11:9a:46:cc:e9:
4a:df:09:15:5b:16:6d:ba:93:e5:a8:10:58:08:96:f4:b4:a4:
45:d5:f2:a2:5e:db:a5:e0:f6:ce:e7:f6:6d:bf:39:c7:a5:61:
b2:18:6b:4d:60:f3:3d:74:b9:ac:c2:80:6f:2e:dc:7b:e7:5d:
14:57:ed:01:c7:d6:d8:0f:82:a1:dc:7e:1d:74:5e:82:18:d4:
64:3b:5d:b1:d4:0e:f4:0b:20:06:ff:af:a4:46:db:1a:20:68:
22:7b:4f:8d:b4:1e:d7:ab:ff:6a:77:88:f0:ed:e2:a9:90:0c:
0b:8f:3d:02:ba:fe:37:e0:d2:64:a7:11:51:9e:22:38:eb:81:
c7:1e:8b:35:97:1d:f4:4d:3f:63:90:86:9f:e6:c0:f9:21:56:
fb:8b:6c:2f:5c:c2:82:16:e4:63:26:e2:72:3f:e7:09:1e:88:
e4:bc:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:25:05 2025 by rpki-client