Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
File: a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json)
Hash identifier: 2Mm8wxbUPsMuQxgZey08Xv593wRAAjC7hAwTl/g9LHU=
Subject key identifier: 8A:52:11:CC:B4:46:85:7C:EF:6E:71:B1:B2:F1:A5:C6:C1:59:F2:F4
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial: 33E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
Manifest number: 33C9
Signing time: Fri 28 Mar 2025 15:26:56 +0000
Manifest this update: Fri 28 Mar 2025 15:26:56 +0000
Manifest next update: Fri 04 Apr 2025 15:26:56 +0000
Files and hashes: 1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: UGLl4wfKjXVkv5dl4ZLPsuGkV7NjcYT4fdphZDtoQsQ=)
2: 56C3DC822B0B11EF97C4A74AC4F9AE02.roa (hash: CVWZvuJMAyjtpzrMYgtcHwOIm2n01TzT8z4GiPVYHFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13286 (0x33e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D27
Validity
Not Before: Mar 28 15:26:56 2025 GMT
Not After : Apr 4 15:26:56 2025 GMT
Subject: CN=67e6bfc0-73f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:ad:ca:06:89:05:aa:c7:fd:61:89:c5:0a:
01:1a:5c:9c:81:c3:ea:9a:3d:41:62:3b:d9:1e:14:
46:a7:61:45:e8:96:c9:e1:63:ad:b5:9d:36:44:4c:
85:e5:4f:c0:bc:7d:ba:4a:c8:2f:2c:c9:06:3a:80:
09:0a:80:74:f2:c1:f0:8d:a7:ff:11:7e:e0:fc:e1:
f2:6a:da:aa:be:c2:7a:62:c8:cc:15:ea:96:9f:8e:
af:36:b3:bb:02:67:1a:bc:96:ca:f1:9b:26:da:2b:
11:99:93:27:0b:37:9e:3b:11:b6:62:1a:87:f3:41:
ee:a0:c9:54:cb:ee:18:05:9e:32:66:be:ef:e0:f9:
c2:05:71:a7:4c:ea:ee:e5:94:4a:13:c3:6a:cd:d4:
b8:a7:4e:ef:45:85:4f:90:52:c8:e5:32:a2:60:69:
3d:5d:ae:37:bf:ac:b4:13:b9:21:b6:e9:a0:cf:8d:
14:df:30:09:a1:3f:d0:8f:09:d9:e1:b4:65:22:80:
c7:8f:c0:71:a3:a0:2a:a9:f5:23:96:01:6b:c7:0c:
e8:38:86:83:c3:b8:e2:1d:56:ba:7f:c2:65:53:6b:
ab:86:76:55:47:f8:f2:22:d4:9d:ef:32:a0:69:96:
f5:b7:42:96:b6:99:9b:a1:fd:33:0f:74:ff:b1:ea:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:52:11:CC:B4:46:85:7C:EF:6E:71:B1:B2:F1:A5:C6:C1:59:F2:F4
X509v3 Authority Key Identifier:
keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:a2:fa:65:86:00:02:3c:45:1a:b8:60:81:5e:e5:fa:8f:1d:
e3:41:7d:93:2c:e0:48:88:a0:6f:d8:69:0a:1a:32:b3:db:4f:
a5:76:87:42:73:8a:f2:07:c8:b8:51:63:8d:8c:08:5d:41:8c:
25:c0:4b:36:22:2b:00:0b:6d:7c:36:29:9f:91:c6:e3:05:28:
32:eb:8a:30:f1:05:e5:f8:9d:01:eb:cf:61:8f:7f:e7:25:de:
32:d9:34:61:ec:78:0c:62:5c:47:5f:f0:f4:d4:fe:c8:c8:c9:
4e:cf:a4:07:1a:9c:a5:d4:9e:b0:00:76:6a:b2:00:a2:7c:72:
f3:21:4c:54:b0:53:db:bf:07:b2:7b:a3:e0:2c:17:dc:86:5c:
b9:b1:03:9a:7a:36:8e:8c:05:f9:86:a0:62:b6:98:e5:db:dd:
a8:ef:aa:c2:44:85:38:a9:37:ab:e0:21:cb:d4:21:08:6b:1a:
bd:69:03:e7:3f:23:02:1e:cf:fa:b7:1f:0f:5d:07:46:62:83:
b7:05:0c:22:4e:86:e1:fc:7c:ae:7d:ec:f1:14:6c:13:73:fd:
37:b9:fa:b4:13:53:a9:bb:39:8e:7d:67:37:44:b2:56:dd:46:
7a:f9:ae:d2:36:a4:fb:d5:37:8f:6a:af:68:f4:76:d0:21:1a:
f6:19:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:06:52 2025 by rpki-client