Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
File: 71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json)
Hash identifier: 5yYIjbLgXyFi1QEvyOo1GKYhW+cJLSwHdE8zObFOg/k=
Subject key identifier: 97:13:26:6F:70:51:EF:95:4B:B5:82:70:F9:5A:8E:A0:47:E7:97:E1
Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
Certificate issuer: /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
Certificate serial: 0545
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
Manifest number: 053B
Signing time: Fri 28 Mar 2025 23:45:34 +0000
Manifest this update: Fri 28 Mar 2025 23:45:33 +0000
Manifest next update: Fri 04 Apr 2025 23:45:33 +0000
Files and hashes: 1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: BXMnck3EnDls8IfJ8Ka+2IN/XinBKXRRqdVXdayv6ds=)
2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: QKEbNflHaMtrKPpklQ7n3QZ+8DscnEW1cfHLjHUSUv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1349 (0x545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0E19
Validity
Not Before: Mar 28 23:45:33 2025 GMT
Not After : Apr 4 23:45:33 2025 GMT
Subject: CN=67e7349d-5e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:a0:89:14:38:d8:ad:66:75:4b:ed:33:ac:
54:37:d7:f0:6a:1b:e0:86:84:9c:28:b0:e4:18:39:
6b:6c:d9:46:5f:61:2e:0b:c3:8d:a4:e3:8a:e7:7c:
ce:68:6a:93:ed:72:8b:4c:c9:d5:e9:bd:62:79:a9:
76:b3:47:ca:7a:82:31:ad:78:34:4e:41:33:54:65:
12:ec:ec:d1:d6:de:fc:bc:44:ab:88:30:aa:70:be:
d0:3b:70:27:4b:e8:27:f8:8b:89:0e:5a:38:9d:6d:
d5:3b:69:e4:7f:94:9a:8f:b3:ba:45:1b:9a:ae:16:
8e:bc:39:83:6c:1c:a7:d9:a6:a7:a7:6f:31:1e:49:
da:11:70:89:9e:43:04:8a:91:c4:c4:fa:8e:06:03:
f0:8e:74:47:55:8e:39:b6:4f:63:ad:f9:76:b9:24:
fc:7b:6e:b5:9e:c2:70:9e:db:e2:ef:8a:34:ea:70:
77:81:9a:8d:e5:18:a2:ca:08:59:1a:56:1b:c2:9e:
23:2a:8b:09:cf:3e:b9:46:84:cc:0a:88:aa:8b:47:
24:7f:68:98:c7:b2:01:42:b5:a1:15:92:8f:c4:81:
19:54:b1:b5:b8:1c:9e:ee:33:df:c0:c3:f8:18:1c:
63:59:58:89:90:c0:d9:df:2d:9a:48:85:c4:09:f9:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:13:26:6F:70:51:EF:95:4B:B5:82:70:F9:5A:8E:A0:47:E7:97:E1
X509v3 Authority Key Identifier:
keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3a:28:1a:b9:57:f9:54:de:a3:1d:06:87:b0:d0:5d:4d:1e:
a1:9e:91:0b:80:0d:5d:6d:3b:02:a8:14:0f:de:a1:a0:bf:73:
75:4c:94:3b:c4:30:1f:5b:d9:f0:09:c2:8d:0b:05:b7:b2:b2:
65:46:e2:22:74:b7:50:8d:9a:e3:7b:2b:3c:c8:74:2a:07:5b:
ad:b3:f7:22:3d:23:1f:47:c6:ee:69:76:8a:9a:d2:d1:57:9e:
61:f4:d5:af:97:87:2b:fc:72:5f:26:18:55:27:82:c2:fc:dc:
78:7d:62:af:40:fd:64:54:f9:9d:1a:31:62:80:81:52:aa:ad:
20:d4:ab:b5:26:17:8d:6b:e3:4b:e0:d2:91:b1:2f:87:29:b0:
46:e9:61:6c:75:79:36:47:51:10:7c:ba:1d:be:06:83:ae:de:
8a:c5:af:1d:3a:f3:ca:74:3a:8a:3f:85:4c:f7:04:19:d5:96:
71:ca:8a:54:1f:57:65:63:2f:41:af:90:2a:e4:f7:d3:07:5e:
c9:5b:67:bf:1d:a2:d4:15:d0:c6:79:1a:49:42:61:67:6f:01:
25:fc:ce:73:40:d4:1c:e4:be:a0:7c:95:be:c1:15:10:1f:65:
f4:2b:ab:7e:74:14:60:ef:b8:3e:8b:4b:9c:d5:08:fc:6f:6b:
9d:d0:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:53:29 2025 by rpki-client