Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json)
Hash identifier: 0ZjMNZwfbyPaBjUI5+7nBVHopP1xPTQRVSSvxiyj1/0=
Subject key identifier: 38:F0:DF:B8:87:E0:E7:00:B9:E0:F5:79:4F:1F:21:E1:BB:3A:CD:12
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
Manifest number: 73
Signing time: Sat 29 Mar 2025 06:09:56 +0000
Manifest this update: Sat 29 Mar 2025 06:09:56 +0000
Manifest next update: Sat 05 Apr 2025 06:09:56 +0000
Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: pdpokHaIKsPSSflnGp2MWAJeoD7xZqb3cHTxCiOwCrk=)
2: 58CA0E62615111EFACF30C14C4F9AE02.roa (hash: n/H7m4JyEx7dcVifKMlTV7vtmvQ/Ig1JHl4d6IW0aVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B9A
Validity
Not Before: Mar 29 06:09:56 2025 GMT
Not After : Apr 5 06:09:56 2025 GMT
Subject: CN=67e78eb4-9c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:21:85:35:5d:c8:62:32:00:d4:56:3c:5f:
76:fc:9b:96:df:32:e2:a1:f0:fb:e1:05:fb:9b:3c:
c3:f9:78:5b:b3:81:bb:3e:ad:01:68:e4:90:c5:59:
da:62:30:b6:0c:cd:ce:b4:94:6f:c7:02:e3:b4:0e:
a9:52:12:4a:74:cb:96:94:b4:ee:63:49:e3:4b:47:
92:53:2d:cf:5d:7e:9f:98:16:4f:c7:07:c8:92:bb:
47:d0:6d:2e:51:81:ac:d6:f8:0e:35:a4:dd:35:52:
e7:90:bd:fd:9f:f0:52:6f:36:89:91:1a:6c:e7:3e:
79:37:3d:5b:fb:3c:30:10:e7:66:20:d3:02:e4:c4:
48:ae:28:73:fd:50:21:1a:c3:25:17:73:76:68:d0:
34:49:3c:e8:a4:13:49:7d:cf:c9:b4:70:64:cb:0c:
3d:80:a9:06:53:44:2e:ab:8e:da:0e:b8:a4:3f:24:
97:02:44:b6:60:47:89:63:fa:c7:3c:ce:bd:95:cc:
3a:a7:33:b6:db:9d:30:01:e9:8f:c9:39:a1:ae:76:
f1:49:a6:30:ef:39:fb:87:46:df:42:ee:50:e5:7f:
e1:3e:ca:e7:5d:dd:0e:9f:04:3b:1e:0f:5b:39:f7:
11:d3:e0:b1:fc:35:21:6a:b4:d3:6d:0c:18:86:c6:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F0:DF:B8:87:E0:E7:00:B9:E0:F5:79:4F:1F:21:E1:BB:3A:CD:12
X509v3 Authority Key Identifier:
keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c0:5c:78:11:3d:f1:45:b9:1f:f5:a6:1b:5c:21:ac:c5:ca:
83:01:c7:1c:d3:ea:64:df:e5:ca:78:a1:9d:29:53:b3:26:b0:
04:b6:6a:a1:38:4a:60:b6:d2:0d:ce:f8:76:b4:b9:27:ab:2d:
0d:65:18:1d:a0:f4:a0:95:7b:64:10:9e:d1:f5:18:88:2c:a0:
e3:f0:49:3b:e5:73:f8:80:8a:6a:35:28:43:a8:62:13:f1:3c:
b8:1b:ba:c1:04:25:9d:7c:d7:e0:07:26:0d:a5:56:57:1f:84:
82:30:85:90:42:ba:d1:6d:2e:3f:8c:c9:22:ed:71:cf:2f:24:
43:f1:a2:05:a8:40:bb:4d:53:f2:27:27:8d:fb:0f:c5:da:d4:
2c:60:f0:a8:a9:8a:e0:6d:43:02:30:60:d5:ed:47:5e:f1:5e:
76:a8:d0:85:1f:69:98:49:6c:19:91:42:2a:7d:55:c0:15:2d:
a8:54:01:76:7a:2f:ce:ea:e6:e6:e9:62:78:65:7d:af:78:84:
67:93:dc:58:16:24:02:14:ef:df:0a:56:da:06:c9:53:10:e0:
76:96:30:2a:79:24:51:23:51:80:b0:2b:87:e1:a4:01:2f:9f:
23:75:5a:3e:f2:2e:4b:44:a9:79:2b:f5:22:8c:eb:2b:cc:b1:
8d:61:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:36:58 2025 by rpki-client