Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json)
Hash identifier: RPdDM+26+uLA1SXwKRu3rwVqG6lw4cqeT2qqvLOg+xw=
Subject key identifier: B6:C6:3E:F2:C5:FD:C7:07:EB:C4:4C:F1:D8:25:C7:0E:D4:1B:A2:7A
Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25
Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
Manifest number: DC
Signing time: Sat 29 Mar 2025 04:55:36 +0000
Manifest this update: Sat 29 Mar 2025 04:55:35 +0000
Manifest next update: Sat 05 Apr 2025 04:55:35 +0000
Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: qZMwkvmrkJ7lccc7V+wA2wMypOE73sRInJCSXup0KzA=)
2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: MIezaCLRmB7MpFx/jUjpAPwBUBrtrJzYZ3rrcNVQqC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9F31
Validity
Not Before: Mar 29 04:55:35 2025 GMT
Not After : Apr 5 04:55:35 2025 GMT
Subject: CN=67e77d47-aa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:ae:4f:dc:4a:81:43:07:c4:0c:b6:49:d9:
6a:7d:9a:47:ef:b8:d9:c8:39:63:0b:46:1f:52:95:
7d:fa:6e:42:27:7f:17:5c:1c:b1:e6:a0:0e:ea:c0:
a2:83:14:fe:66:20:ca:2f:02:dd:ec:c7:3c:3f:24:
cf:cc:ea:ca:95:c7:9b:c1:4d:07:fd:f1:bd:50:48:
75:fa:81:81:7e:09:b1:b6:0b:22:94:d1:35:9a:9d:
00:bd:66:dc:5b:21:08:39:8f:44:3d:3e:27:5a:72:
e1:5b:74:41:93:44:e0:8e:54:8a:a5:e9:4b:1c:5a:
f6:56:06:26:f9:52:39:59:b7:3a:91:53:d5:19:4a:
c7:9a:cd:97:9b:79:f6:d0:ab:89:c2:fd:a0:6d:2a:
3d:49:e5:c3:43:ab:47:1e:fa:06:62:01:a3:9d:2b:
1c:37:e6:39:13:82:4e:52:5c:d9:a0:7b:c0:b3:f7:
b6:71:d1:ae:8f:55:0a:b2:fa:d8:79:71:e1:9d:27:
fe:14:1d:63:f4:0a:3e:65:8f:d3:d2:80:30:52:de:
2e:0b:ef:7e:7e:62:d6:67:03:13:1e:36:f2:50:6c:
42:95:42:d1:b7:f8:26:64:5f:3f:ea:3c:26:97:3b:
0f:f6:af:d8:c1:b5:38:2f:63:a5:d5:6a:9f:b6:0d:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C6:3E:F2:C5:FD:C7:07:EB:C4:4C:F1:D8:25:C7:0E:D4:1B:A2:7A
X509v3 Authority Key Identifier:
keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1e:77:41:a5:f9:27:8e:25:3d:7d:38:c9:06:9d:c4:f7:5c:
6c:73:26:b7:4b:81:99:38:83:a3:0e:e9:95:4b:79:4f:d3:a2:
4f:a8:0a:14:9f:50:01:f8:6f:ef:75:6a:fb:41:86:b3:09:b9:
9e:5b:3d:d9:46:cf:53:42:40:4e:47:45:28:d4:88:02:8d:c7:
e7:e2:0c:65:eb:fb:5f:16:c1:87:47:99:fd:3c:c1:d7:52:01:
9a:fa:b9:09:80:75:31:93:13:60:e0:55:d0:1d:6c:97:01:7b:
6b:1d:59:a6:0c:1d:fe:71:b6:3a:b9:5e:12:22:0e:0a:f2:aa:
c6:a3:74:ca:93:1d:af:01:09:5b:38:21:c5:5d:b1:2f:90:da:
a4:6c:94:8d:f0:55:69:56:c0:ed:25:01:51:eb:8b:93:bb:94:
d7:6d:da:4e:ff:63:67:66:14:af:20:7e:0c:de:49:b2:cc:c5:
1c:3e:2d:49:9b:fe:54:18:96:1e:c5:e3:f3:cd:7c:69:a9:7e:
f6:74:66:9f:5f:72:54:e9:7b:0e:90:3f:c1:28:5a:11:a1:4a:
97:5d:93:b1:28:70:a6:75:9e:4e:9a:17:70:00:46:79:d9:f7:
0b:5d:92:70:12:b4:47:7c:18:cc:19:03:dc:fc:c8:3f:0c:ab:
91:03:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:15:50 2025 by rpki-client