Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json)
Hash identifier: NdVVwjqMt+1IoCxYm7RHs0sEGoyTKkE/JshrMwl40cM=
Subject key identifier: AA:09:76:19:46:4C:8A:0B:BF:DB:C9:BB:A6:73:01:D3:CD:DB:78:2A
Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D
Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D
Certificate serial: 0B94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
Manifest number: 0B8E
Signing time: Fri 28 Mar 2025 19:10:56 +0000
Manifest this update: Fri 28 Mar 2025 19:10:55 +0000
Manifest next update: Fri 04 Apr 2025 19:10:55 +0000
Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: bsyHABHP7GYXvkYVfUUocD3OMa9bcjlJcB7WCn5C5bk=)
2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: ygQ6vfqXgCOjWaI/M9+8sSQcLe6CReohgnbLpV4rvKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2964 (0xb94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3CA
Validity
Not Before: Mar 28 19:10:55 2025 GMT
Not After : Apr 4 19:10:55 2025 GMT
Subject: CN=67e6f43f-ccc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:7f:56:30:5c:57:13:9c:48:3b:56:ec:e5:
ec:56:9c:c3:64:67:56:ec:51:a8:57:a0:3d:4b:44:
9f:44:fa:cc:c7:c0:d0:21:07:38:9e:e7:02:08:2b:
ff:c7:20:06:6e:30:99:d5:04:8e:5c:03:95:00:f3:
4f:0d:1c:5b:3c:7b:8f:b6:7e:b2:34:84:15:93:2c:
0d:c9:ed:09:40:40:3f:3a:38:ea:ba:fb:70:7b:5a:
bb:50:0b:7e:f0:4a:56:5b:1d:fa:c3:c8:57:c5:e7:
e0:73:f2:ec:80:ca:d8:e2:25:97:3a:64:4c:4c:4c:
04:57:09:05:42:8f:47:78:c9:15:fc:de:e5:f1:9b:
2c:b4:24:eb:b0:f4:b6:55:6b:10:1d:a4:ec:fa:3a:
2e:ef:4e:da:48:ed:9e:cf:c4:85:b7:20:28:66:89:
2d:3f:0a:5e:54:13:91:10:32:b3:69:11:07:b1:34:
37:13:8c:14:19:0f:b8:d5:26:36:a4:67:7d:1e:ee:
64:b7:7a:8a:aa:f6:26:44:e4:47:20:06:6c:fe:9e:
42:ed:2f:78:36:05:c6:1e:9d:42:36:06:2f:33:91:
87:5f:cc:c5:2f:68:f3:24:17:22:86:ac:f2:97:a1:
58:28:33:da:37:f1:fa:87:61:41:c4:76:93:bc:50:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:09:76:19:46:4C:8A:0B:BF:DB:C9:BB:A6:73:01:D3:CD:DB:78:2A
X509v3 Authority Key Identifier:
keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:62:e2:3b:2b:0e:05:6a:9e:57:19:f4:13:b8:69:94:11:bd:
74:3f:1e:1f:9f:1c:50:c2:79:ba:30:34:fd:c2:c9:9c:09:1c:
df:e8:83:97:53:4d:01:8d:98:4e:78:a1:37:05:8a:27:49:0c:
8d:b6:4e:5f:97:42:ad:a6:93:9c:d2:62:a5:24:2e:5d:a5:e1:
31:fc:74:bc:4f:db:b7:3a:0f:39:65:95:ec:41:0a:86:ff:9c:
19:2a:13:ff:45:02:1f:31:f9:4d:f2:83:79:41:ba:26:63:93:
10:ad:69:a3:c3:32:1e:d0:99:44:35:29:10:f3:17:f9:72:73:
2e:45:bc:de:b9:37:1d:3f:7c:24:14:85:de:f5:e3:b0:d1:35:
fe:1d:53:8c:a3:fa:1e:09:53:41:36:eb:ec:04:ca:a9:e5:23:
df:1f:14:e7:b4:d3:b6:21:15:2a:87:5c:7f:c5:03:61:ac:6e:
9e:0b:dd:50:09:ed:bb:d5:f7:0c:a2:ac:1a:44:8b:99:f6:82:
6b:fb:88:b4:ac:5a:eb:b4:24:3e:cd:4d:22:7c:85:c2:a4:b5:
49:95:db:8a:9a:8c:40:40:97:d6:ef:47:35:44:26:f2:0a:a3:
f3:98:84:41:7a:b4:b9:cd:5a:60:ce:e1:63:01:72:e8:69:80:
49:ec:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:41:30 2025 by rpki-client