Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json)
Hash identifier: 3IqskNsu880so4fQjAAMK/Sirqoa54JMIXUsgwWf05o=
Subject key identifier: F8:C4:64:D1:9A:23:02:5F:4C:0C:45:F7:8E:A1:10:EC:43:DC:81:1F
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial: 1425
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
Manifest number: 1409
Signing time: Fri 28 Mar 2025 17:03:29 +0000
Manifest this update: Fri 28 Mar 2025 17:03:28 +0000
Manifest next update: Fri 04 Apr 2025 17:03:28 +0000
Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: OBQynJAbyQoLMmgYulRvcRY29cpZEJv6FKVC+zjBvV0=)
2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: dEUjWtTlj2rNYIxixfb1q7kgTimYlRGEihBrx/cv4cU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5157 (0x1425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E76B8
Validity
Not Before: Mar 28 17:03:28 2025 GMT
Not After : Apr 4 17:03:28 2025 GMT
Subject: CN=67e6d660-7f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:0f:27:de:c6:57:43:41:d6:0e:7d:ca:da:
74:70:42:e3:26:f9:1e:a3:54:18:12:a8:d0:7f:6e:
db:55:dc:38:e5:12:65:b6:9b:18:2b:51:fe:df:f7:
f7:35:7e:2e:03:fc:8a:41:ba:9b:33:36:19:a6:f5:
a4:84:44:9f:1d:4f:c4:c7:f0:75:ff:2b:ca:f0:84:
80:04:ed:61:d2:f6:f1:16:af:c0:ec:73:ac:0a:42:
2b:eb:d4:8d:4f:1a:f9:a2:c7:93:38:dd:ee:82:49:
dc:fd:9c:07:ed:21:aa:77:22:54:ec:f9:8d:c9:71:
05:2b:b3:c1:9c:39:08:d2:ce:33:ed:34:3f:4d:f6:
f1:7a:cc:7c:e3:e6:ea:30:99:4e:f1:0f:b9:71:71:
25:6c:b2:33:62:02:c4:0b:39:22:07:5a:c2:12:3e:
2f:eb:a5:ae:1a:70:28:ec:b8:49:09:03:34:ca:f8:
e1:36:31:88:bb:03:9f:22:10:1b:63:d0:e9:5e:a0:
9a:b2:94:4b:9a:2f:ca:cb:80:0d:6e:38:5b:41:6a:
3a:06:4f:4e:6e:63:ef:b8:45:15:66:cf:a7:64:04:
c3:04:73:3a:9e:12:ca:e2:23:fa:37:84:b4:34:5d:
aa:40:51:6b:04:c9:a0:c8:7b:19:db:1b:8a:33:af:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C4:64:D1:9A:23:02:5F:4C:0C:45:F7:8E:A1:10:EC:43:DC:81:1F
X509v3 Authority Key Identifier:
keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:10:3a:5e:54:81:17:12:94:25:29:99:e3:15:0e:d4:9e:80:
97:3f:da:a1:f7:1d:23:8c:2e:3a:03:03:24:4e:e1:da:c8:0a:
cd:71:f0:91:9a:76:17:cc:bc:6e:7e:aa:41:10:c0:c6:30:39:
9d:30:91:95:65:99:17:7f:96:f1:3b:6d:2b:cd:c7:3e:94:ea:
13:ce:9d:42:38:f1:f4:dc:8b:ec:64:e7:17:56:4f:e0:c2:4b:
58:f5:13:f7:18:12:4d:1c:e0:ee:2a:2f:c3:e6:62:08:47:7e:
75:0e:ff:42:7c:02:41:5a:c0:d1:a0:53:b1:b3:30:77:c0:96:
11:1e:92:2f:2a:d9:f9:27:5d:36:67:88:10:3b:48:0e:ce:d1:
5b:2f:89:7a:cc:9f:0e:ab:b5:e5:f5:3d:73:f3:cc:7a:e5:f3:
1f:a6:6a:c7:2a:21:57:57:0e:e3:41:28:30:07:52:73:bd:93:
86:5c:6f:5a:49:ad:1e:cc:9a:8c:02:40:06:64:fa:08:a9:65:
01:87:05:db:2f:1b:e0:2d:bd:db:13:9b:81:a9:e2:a7:84:8e:
5c:17:08:c6:78:63:cd:49:7d:b1:e1:b8:cc:37:ec:8c:f0:12:
40:34:64:5d:b3:ba:84:73:cd:cc:f4:4b:56:f4:ec:1e:cd:e3:
89:ac:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:40:55 2025 by rpki-client