Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
File: sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json)
Hash identifier: 9mNW+uxFB6oSaaZ7csdD9d8nuKQ4v8TWLSzX3cbXBVA=
Subject key identifier: 2D:97:19:C3:6A:6D:41:04:83:05:C3:42:3E:6C:08:FC:3E:C5:33:9E
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial: 0763
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
Manifest number: 075B
Signing time: Fri 28 Mar 2025 21:53:15 +0000
Manifest this update: Fri 28 Mar 2025 21:53:15 +0000
Manifest next update: Fri 04 Apr 2025 21:53:15 +0000
Files and hashes: 1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: NRwBJhlQNccj/8ElTcGUXaJ/5v4UFUKJWIK+iQaHCX4=)
2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: 1PaL5t22VHHOGdbUhH+qGnaUlXQ1MvnbAc80idZHNIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E77A1
Validity
Not Before: Mar 28 21:53:15 2025 GMT
Not After : Apr 4 21:53:15 2025 GMT
Subject: CN=67e71a4b-7f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:26:26:3a:ea:3c:7f:7a:01:f5:86:19:ba:
7f:8b:d6:f4:9d:f1:e6:8d:f6:a8:ee:f7:63:e2:b4:
b1:ca:62:87:61:ac:f6:1e:72:2e:c4:09:11:90:87:
ce:85:78:7d:fb:38:62:2c:bf:7f:f4:4a:51:21:90:
8f:e4:f7:8b:d0:2e:c0:3d:6c:fa:5b:60:e6:ce:16:
4c:5c:14:a1:36:3d:c5:65:08:aa:0b:51:3a:9d:50:
f3:57:3b:34:ca:9b:e0:b3:46:3a:63:70:e4:47:64:
84:8f:8f:76:f7:b7:36:42:58:69:35:09:9f:78:7b:
bc:82:87:a2:08:29:ef:9b:18:d6:d4:62:9c:6c:69:
14:d8:45:c9:75:16:af:cb:3e:f1:e3:90:b3:75:58:
21:33:17:b4:ee:23:4d:a5:7f:09:98:ef:ca:c3:0a:
e1:89:2b:09:ad:9c:21:12:e9:88:3a:74:84:ea:c3:
16:2a:b5:6f:12:d5:7c:38:ec:0d:7a:c4:a9:6e:ec:
90:fe:43:51:77:e7:37:43:22:5c:18:2c:05:f5:6c:
d8:c6:14:b6:98:d1:e9:ac:64:ce:5e:48:3e:3b:f4:
c9:4a:84:d8:0c:dc:2f:ba:78:3b:de:58:ae:6d:f3:
5f:66:b1:d8:d6:92:a1:86:5b:d4:9e:0e:0f:e4:a2:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:97:19:C3:6A:6D:41:04:83:05:C3:42:3E:6C:08:FC:3E:C5:33:9E
X509v3 Authority Key Identifier:
keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:a5:27:8c:10:aa:87:f6:e9:6b:dc:ed:9f:47:ff:c3:04:0f:
34:3e:23:91:a1:23:6e:e8:a7:f6:00:b6:90:46:d4:8e:e4:3c:
1f:60:f5:f1:3b:da:c0:dd:ce:dc:03:67:f9:0a:4a:0b:1d:00:
4d:7f:aa:73:f8:05:a9:8a:a1:7b:4e:6c:67:ce:ac:6e:f3:a5:
ff:ba:3a:2c:8e:b3:37:3b:b3:1a:7d:26:83:51:ee:5a:5f:bf:
d3:40:05:bb:cf:0d:a8:88:e8:f8:ef:17:de:8a:e1:ec:74:51:
3e:bb:5b:3f:a6:26:9f:62:03:c4:d4:9f:d0:2e:f3:0e:25:91:
5f:4a:f5:a6:46:34:88:55:7c:2e:cb:53:7e:82:2d:53:cd:84:
a8:00:c9:94:8f:66:6b:f4:ca:b4:94:52:e1:f7:76:16:0b:5d:
d6:3f:ba:76:e8:1a:f9:d4:84:b5:92:a2:b1:50:61:1e:88:2e:
94:31:39:6d:8f:70:06:6e:7c:ad:65:f3:77:56:f4:4e:8c:22:
27:09:bf:28:91:f4:47:52:9f:e4:4d:7a:0b:b1:f8:5f:2c:ce:
f6:83:81:35:23:e6:8d:28:da:ac:55:fd:45:3f:c6:21:2f:2e:
3f:07:52:3e:4a:19:6c:44:5b:5d:39:75:7e:f9:22:95:e1:99:
b4:a5:e6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:01:56 2025 by rpki-client