Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
File: jVurNwypLk9f14n8InMxD5rqOPY.mft (raw, json)
Hash identifier: R5yPM15Iio9vqH78Pf3VYxc1ynbalyJItg+d7UmmIss=
Subject key identifier: C4:AD:48:D2:B5:D2:3B:30:7F:55:C3:AA:90:72:AE:34:83:1F:4D:42
Authority key identifier: 8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6
Certificate issuer: /CN=A91E7290/serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
Certificate serial: 0516
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
Manifest number: 0506
Signing time: Fri 28 Mar 2025 23:59:50 +0000
Manifest this update: Fri 28 Mar 2025 23:59:49 +0000
Manifest next update: Fri 04 Apr 2025 23:59:49 +0000
Files and hashes: 1: jVurNwypLk9f14n8InMxD5rqOPY.crl (hash: gwK4JJIZfztgmSqueuxgzJeOa6UWj73Rlp7KOlax60M=)
2: 4F3ABD0EE1BE11EFBB23912EC4F9AE02.roa (hash: dz/S8eDbHmndjXTOuJkGfGiQYc10aVqQzusp0F+1yvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1302 (0x516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7290
Validity
Not Before: Mar 28 23:59:49 2025 GMT
Not After : Apr 4 23:59:49 2025 GMT
Subject: CN=67e737f6-722c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:10:45:92:a8:a0:43:9a:6f:9b:73:98:d1:
2f:61:59:b1:29:c7:86:44:6a:6e:aa:c9:31:47:40:
36:9b:dd:a0:94:80:e0:66:2d:b7:c8:59:fe:2c:c0:
c8:e7:eb:61:6b:fc:36:68:33:65:e2:b3:5f:59:3b:
eb:c5:3d:95:b3:bd:66:3e:57:ad:35:de:46:b0:53:
6b:f1:98:16:ea:96:9a:f6:e3:7e:1a:d2:54:02:06:
a8:6b:c6:21:d6:53:e6:4e:cf:d0:43:86:4a:fb:18:
7f:1b:f4:ee:f0:08:80:8b:c2:ae:a6:7f:72:d7:15:
bc:69:30:a8:f1:dd:ef:65:4a:12:65:4b:8d:f3:27:
f4:d7:74:94:97:77:54:12:b4:66:25:fb:52:1b:1b:
0d:b8:f1:42:f6:85:a4:84:23:1a:c0:d8:f7:7b:92:
28:85:37:be:53:d5:86:ac:05:30:96:a6:91:0b:d7:
22:01:93:85:75:9b:0c:9f:4c:0d:f3:01:e0:6e:90:
1e:ac:ac:81:5e:14:1b:c9:b9:3c:f9:af:2d:cf:39:
0e:74:eb:33:f8:0f:52:7e:61:0a:6c:92:16:f7:98:
d0:70:94:25:89:22:5d:d6:35:93:83:9a:be:33:eb:
d8:76:10:c9:b2:e7:7a:ab:de:35:12:43:ec:e2:5b:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AD:48:D2:B5:D2:3B:30:7F:55:C3:AA:90:72:AE:34:83:1F:4D:42
X509v3 Authority Key Identifier:
keyid:8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:75:cc:2c:bd:8e:4a:31:9f:2e:dc:e7:12:78:e0:aa:c0:c8:
10:8c:e9:ca:2d:ec:e1:1d:77:b8:c1:05:af:e7:fc:0c:e2:66:
05:85:82:a3:1c:7c:88:b2:da:13:f9:e6:82:c7:92:5a:9b:d7:
5e:84:e5:b1:11:80:0c:88:c0:7a:71:68:aa:a9:40:19:00:d6:
e1:d8:5a:8f:1f:78:05:68:1a:7a:f3:22:bc:00:3d:f1:20:05:
f3:5b:25:26:33:a6:a0:0e:6f:d4:dc:ea:e3:6e:52:7a:0d:e1:
b6:96:18:c6:7e:35:e5:4f:e2:bd:b7:6e:72:ea:bf:9c:09:85:
c3:36:4e:fa:61:ba:2b:3b:27:b4:62:5d:d1:6b:89:af:7e:e5:
2e:55:f3:6b:b4:8b:ec:92:28:4b:a8:92:03:99:d8:0b:8d:31:
c9:00:98:27:4d:47:6a:c5:ca:c5:0f:65:0d:03:a0:15:2f:1d:
aa:9b:44:29:07:c5:7a:45:bb:68:bf:ef:9f:ad:f8:b9:8a:29:
58:b9:94:ec:2f:c7:21:d2:98:30:0d:c3:dd:f4:87:74:56:3b:
0b:f0:0d:5b:81:86:2b:3f:7e:ca:79:0e:35:32:62:41:e1:40:
33:4e:b2:2e:2b:fa:c0:14:36:26:19:96:ba:7c:53:20:44:01:
39:cf:76:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:00:26 2025 by rpki-client