Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json)
Hash identifier: 9mVN0JR6UkHWPZvJonqOwa+XyrSPIHjV7wPS5oWfRFY=
Subject key identifier: 8B:70:0C:52:21:76:DE:1D:49:88:ED:54:D9:26:8B:32:C1:D0:C3:78
Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3
Certificate serial: 0661
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
Manifest number: 11A3
Signing time: Fri 28 Mar 2025 17:17:25 +0000
Manifest this update: Fri 28 Mar 2025 17:17:24 +0000
Manifest next update: Fri 04 Apr 2025 17:17:24 +0000
Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: wTUGLf+U4m6LyZlpaW7n3fFHVBs45s3Qvyt6gFhK8Vw=)
2: E4BB55347C4E11EBB889AF7EC4F9AE02.roa (hash: j4Rp5D2+LCtQywvaF1YDJd+cLnUdbw+y2x0d8ZW0p8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1633 (0x661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5A9F
Validity
Not Before: Mar 28 17:17:24 2025 GMT
Not After : Apr 4 17:17:24 2025 GMT
Subject: CN=67e6d9a5-bc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:7e:fa:bf:5b:9e:75:6a:d5:ba:2c:f6:a9:
46:4a:be:0c:a8:94:9c:64:2c:53:96:c8:c3:05:2b:
95:e9:11:3f:c8:d4:a7:b3:17:5b:40:d1:5b:d0:ee:
d2:fc:e1:2c:a0:3c:be:03:52:87:71:7e:d4:4b:2a:
73:86:db:02:b1:8c:8b:bd:f2:39:f0:04:f1:29:f5:
17:9a:c8:cc:3d:46:78:46:c4:1a:21:8d:7b:be:10:
65:a4:c7:20:50:1f:fb:97:3d:50:37:02:79:89:6a:
a0:33:69:df:66:cd:33:ca:d3:04:b2:70:fd:1d:01:
35:e1:35:db:03:73:a8:b3:6d:9a:ed:26:56:2b:4c:
a1:bf:fb:6d:58:56:58:22:62:ca:5d:8a:48:ca:cc:
5c:93:72:fe:29:a2:2c:4f:36:00:95:0b:12:d1:04:
5a:87:2c:48:81:24:79:64:ac:ac:36:85:31:1c:c0:
a0:74:ed:88:9a:77:73:af:e8:4a:16:d5:cb:62:ba:
d8:e5:34:76:d5:61:e6:db:db:e3:b1:55:91:9b:dc:
d8:1a:36:30:5b:dc:2f:b7:12:3d:df:11:06:3f:7c:
39:7f:5b:4b:a1:f4:43:50:db:f1:47:7b:5d:0e:38:
4e:af:34:a2:e8:5e:6d:a2:6f:c2:40:bc:94:20:d3:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:70:0C:52:21:76:DE:1D:49:88:ED:54:D9:26:8B:32:C1:D0:C3:78
X509v3 Authority Key Identifier:
keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e5:f2:fb:c2:35:b9:83:22:ac:c0:96:af:50:c9:9f:ef:c7:
89:95:83:46:f8:66:9a:37:ad:4b:16:a5:64:c6:2a:42:0b:25:
60:54:49:30:ac:e5:10:69:0f:32:e9:29:3b:ac:7b:19:fa:00:
c6:d5:13:88:39:a6:1a:6a:0b:a7:55:8f:48:18:4b:58:fa:40:
2b:41:5c:c1:e1:17:2e:9f:66:cc:22:17:28:e9:5b:61:84:ed:
87:a5:1a:c0:a5:29:2b:e9:04:b4:fc:3b:3d:6b:75:fb:a4:9a:
64:f9:3c:88:bd:c1:ad:1c:56:23:ad:d9:7e:17:ac:bf:b1:f9:
f0:8c:bb:d3:81:ee:f4:1d:b7:44:8a:9e:f7:c5:58:99:d6:64:
dd:4f:10:29:b7:53:ee:f5:25:d6:d0:6b:3e:1f:14:be:53:6d:
15:65:a0:20:28:c7:72:1b:47:75:d1:5c:e9:64:b6:7f:98:a8:
a0:e8:b3:55:62:18:d7:1a:51:84:4f:21:2b:e8:21:c1:2a:d7:
b1:d8:53:2d:da:b7:d1:6e:b5:53:08:c9:6d:41:5a:bb:1d:2d:
4d:5f:1f:96:23:ca:cb:9d:02:2e:72:25:05:3f:50:d2:cc:75:
7c:00:44:40:e6:a8:f1:09:b1:38:be:a2:02:a3:c4:7f:88:2c:
bf:35:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:51:18 2025 by rpki-client