Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json)
Hash identifier: EHCJhA9Tei/hD8fpME4e8Pjp62gZ42Ilj+nX8OjDiuQ=
Subject key identifier: D1:55:21:6A:E0:01:A8:DB:F4:4E:47:9B:A1:DB:63:47:D7:4F:64:DB
Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Certificate serial: 09DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
Manifest number: 09B9
Signing time: Fri 28 Mar 2025 20:15:39 +0000
Manifest this update: Fri 28 Mar 2025 20:15:39 +0000
Manifest next update: Fri 04 Apr 2025 20:15:39 +0000
Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: Cf6VnQ3seLsXTCEXN//3X3JYGZGCYNtn++4nHEuARwk=)
2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: yfdf5Mv/GJ9tUDZNlDnmM6hHiINUq2OvlkNbS0rVles=)
3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: qU5SgxuYfj9EbloGsgp5NlU+LGZow7QsAYGZSye/EIM=)
4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: PgZPVHxtNUmnyrhnnwVcg3kijll4dZA2GpurrS7x078=)
5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: mCrr4AsBoN0UqBzrLZ/+kB+0BpCUxnU7wJAUdq4LZdc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2524 (0x9dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9580
Validity
Not Before: Mar 28 20:15:39 2025 GMT
Not After : Apr 4 20:15:39 2025 GMT
Subject: CN=67e7036b-2f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:fe:df:b4:d7:d8:9f:d8:0f:40:39:d5:52:
80:58:24:d4:56:7c:48:04:14:65:b2:0a:13:36:0b:
8b:3d:89:6e:7e:54:0b:a6:9b:18:6e:f1:85:6a:c6:
87:b5:0a:9d:d6:2d:8d:c3:1d:96:0c:93:b6:49:dc:
39:94:71:b5:f6:f5:19:9b:88:1b:04:d2:df:42:70:
2a:3d:b1:40:e1:3b:c8:1a:6e:c9:dc:d0:4e:5f:42:
2f:18:84:13:e3:c9:77:fd:bb:07:ed:78:7d:8f:ff:
63:a9:0c:9b:68:8a:c9:ee:57:30:53:5b:c4:7c:d9:
2e:a9:54:02:35:6c:79:a6:6a:2d:82:dd:e9:de:c9:
ca:6f:d7:0f:69:73:34:eb:2d:d8:c5:c3:c4:9f:ce:
00:28:a9:0e:7c:60:4e:f1:90:8d:fc:f0:72:8c:f3:
a3:dc:47:9f:75:82:ba:7f:17:d4:c9:f9:b4:6a:2d:
d6:1f:14:63:77:66:3d:8e:bb:a3:1d:99:40:22:ee:
c8:0f:32:30:57:f0:ba:e1:44:75:b7:4d:53:83:d1:
e8:4e:b6:1d:0b:e2:07:63:8a:a3:2d:8d:51:b0:d9:
ee:c9:6c:bd:61:5a:2d:70:4b:0d:21:03:ba:40:2a:
99:4e:65:28:01:7d:34:90:06:d4:4e:22:e2:4d:fe:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:55:21:6A:E0:01:A8:DB:F4:4E:47:9B:A1:DB:63:47:D7:4F:64:DB
X509v3 Authority Key Identifier:
keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bb:20:d5:cb:42:80:f4:ca:a6:99:c8:f0:3d:f3:df:70:ab:
4a:0f:6b:13:d0:f9:07:77:aa:31:ed:24:7e:f0:d7:ef:48:c9:
45:eb:f9:d8:41:31:32:d4:a6:d5:a1:d0:cc:6e:24:d3:60:4f:
df:a3:7c:fd:11:7f:7f:a5:56:64:11:10:d4:3b:11:db:a2:6b:
e3:a0:d1:65:01:b8:93:ee:ea:e7:40:74:b2:97:9f:09:47:6b:
39:66:b5:48:ad:5c:76:c6:9c:53:3a:7a:63:b9:e8:dc:d9:a2:
dd:b1:ba:59:64:9d:2e:5c:67:89:cb:9e:58:a1:2e:00:b9:9a:
14:45:5b:50:6b:52:c1:30:2a:b8:b6:8f:6b:88:27:cb:4d:1a:
ee:96:92:4b:82:6b:b3:7f:52:ae:ce:08:b5:2c:1f:8d:46:96:
43:f8:00:88:a5:89:75:61:5a:2a:6d:29:33:41:d1:2c:db:56:
fd:42:ee:d4:a1:39:25:dd:40:0a:1c:24:96:f7:a3:d6:71:78:
d5:c4:44:4d:a0:73:a1:5f:72:ec:c5:6f:db:fc:09:06:d7:4e:
03:91:aa:d2:57:12:3d:ed:65:89:43:8b:02:00:9e:41:bb:08:
a7:d7:ef:98:b2:1b:e2:62:a3:41:b3:5f:94:35:18:1a:34:f2:
95:b2:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:14 2025 by rpki-client