Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json)
Hash identifier: vRy6D2Mhp9tjjyVbG0qHcq1vouQntp/j4138+s5eD4c=
Subject key identifier: 77:B6:37:34:9F:86:41:06:79:AE:4D:EF:6D:9D:02:90:A2:5B:29:04
Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Certificate serial: 0C5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
Manifest number: 0C4A
Signing time: Fri 28 Mar 2025 18:32:39 +0000
Manifest this update: Fri 28 Mar 2025 18:32:38 +0000
Manifest next update: Fri 04 Apr 2025 18:32:38 +0000
Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: b83+c/Ecch65N/7YMZiBQg8rnZVeNGLzgZuzbAhXHMg=)
2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: IFWas/rgHa7uSrgJAOPof+Srn7iqSkG+8jyeDB/7tHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3164 (0xc5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9888
Validity
Not Before: Mar 28 18:32:38 2025 GMT
Not After : Apr 4 18:32:38 2025 GMT
Subject: CN=67e6eb47-562f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:1c:d7:65:d9:aa:54:10:50:dc:de:5f:fa:
51:13:38:ff:24:76:a6:3c:1f:cc:ef:26:33:a7:f6:
0f:91:3c:1d:cd:cc:4d:d0:40:e1:8e:a4:b6:55:ce:
5c:fb:5f:ea:e4:90:2b:62:d9:52:10:d0:a7:39:09:
60:30:b2:07:27:a4:91:13:52:e5:45:34:b7:bc:76:
c6:71:29:ca:48:81:c8:f7:cb:ad:07:fa:4b:c8:b7:
1c:b5:38:c6:b7:7a:a5:0f:cf:06:68:ee:53:0d:34:
21:5e:34:6a:67:33:70:59:30:79:48:8f:e3:aa:0c:
60:35:c1:e4:b0:be:b8:da:08:03:b3:d3:8b:c3:9e:
b5:a8:c9:5c:06:2d:dc:9a:45:7f:91:9f:1f:01:d0:
60:86:f9:eb:d8:9e:17:8d:a6:64:da:95:d8:e6:d1:
80:60:44:10:8c:4d:b3:e0:c6:f3:26:ef:2b:b4:9b:
06:a1:ea:e5:9b:19:0b:cd:07:03:56:f5:66:4d:0a:
b4:4c:0a:3d:f4:65:5f:f6:b7:80:90:09:fe:5a:28:
d3:b9:69:de:3b:02:65:f8:3b:15:62:29:d9:10:07:
50:41:7d:08:dc:09:7d:25:b1:6f:0c:f9:b9:e3:c8:
4b:64:41:f5:b6:7b:fc:ec:2b:14:6f:52:d4:2a:93:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B6:37:34:9F:86:41:06:79:AE:4D:EF:6D:9D:02:90:A2:5B:29:04
X509v3 Authority Key Identifier:
keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3f:61:0b:2c:a3:5b:8c:5a:4e:37:9c:c8:68:57:20:dd:02:
13:ae:f3:09:83:45:30:d0:88:df:1b:00:10:36:55:e5:2b:42:
9a:7e:ad:4e:ee:fb:cd:64:4d:69:12:82:e3:e4:46:34:f9:e9:
13:2d:98:da:cc:44:78:26:74:36:34:8e:53:7c:e6:de:ce:2f:
6c:3a:8b:6b:44:75:c3:41:36:68:42:84:bb:95:d1:92:eb:95:
26:6c:b0:ca:9c:1f:37:cc:8b:a5:eb:b9:c8:d5:d1:b8:bd:52:
6b:02:04:24:39:78:94:ae:6c:ae:5d:28:01:53:49:a6:79:f5:
7a:37:42:a3:73:a8:c5:01:86:d2:25:6e:5c:c7:76:0d:79:9d:
fb:04:ad:39:79:e5:c1:0c:ca:61:7c:e0:c8:4b:a4:83:90:3c:
7e:94:dc:f9:0e:c8:19:ce:bd:0b:3e:71:39:4c:8f:c4:b8:b8:
9c:d5:c9:57:ac:29:dc:c1:75:19:6c:7d:62:c6:19:44:05:10:
5f:51:14:22:50:f6:b5:6f:05:03:55:11:15:6b:23:1e:67:21:
62:98:c3:95:6b:09:1f:de:ee:3e:fe:b4:1a:21:98:06:b4:7b:
f9:4f:de:e5:0c:6a:7a:d7:17:ee:7b:d6:fc:2e:00:49:19:bd:
0d:fa:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:52:10 2025 by rpki-client