Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
File: XK9B9ks3Umh5jipdqgwUAADNdHM.mft (raw, json)
Hash identifier: tXmMlzZUuCXf20WXpFmhjv4Y9o2YT+FD/aWOT9GGpLE=
Subject key identifier: 6C:2B:A0:85:0A:99:CA:47:36:5B:84:25:C1:9D:14:FA:4B:9A:D9:4D
Authority key identifier: 5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73
Certificate issuer: /CN=A91ED73E/serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
Certificate serial: 13C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
Manifest number: 13B5
Signing time: Fri 28 Mar 2025 17:04:08 +0000
Manifest this update: Fri 28 Mar 2025 17:04:08 +0000
Manifest next update: Fri 04 Apr 2025 17:04:08 +0000
Files and hashes: 1: XK9B9ks3Umh5jipdqgwUAADNdHM.crl (hash: nx+MbpKceiDwGAdQwbYdch9bWBJ458q+CwPFshyuPTw=)
2: 1983150A3BB911EEB0CA4809C4F9AE02.roa (hash: dlJ7zH1d3oXPs3S0YirZQi1hSZzUrfDhpzP6MZkDSDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5056 (0x13c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED73E
Validity
Not Before: Mar 28 17:04:08 2025 GMT
Not After : Apr 4 17:04:08 2025 GMT
Subject: CN=67e6d688-92ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:14:8d:cd:1e:40:d7:b6:31:74:77:3a:39:
c0:9f:79:1d:0e:d2:00:af:79:67:d6:c1:3d:c5:5b:
d7:a9:32:76:97:4a:ba:2a:2a:f9:e1:a8:f8:d7:b7:
f2:e8:37:6d:e1:b0:d3:cd:7d:fa:35:d1:bf:66:c9:
2f:4f:cf:f3:48:76:0e:6d:8a:0a:fc:50:13:6b:30:
4d:61:21:a1:7d:ea:a3:26:9a:4d:22:56:c5:32:10:
bf:f7:1f:0d:ec:18:a6:c9:a0:96:d1:be:b7:ac:8e:
cd:63:3b:40:89:db:09:80:9f:22:df:ec:39:a2:dd:
cd:1f:5c:fc:02:8b:83:27:2e:4a:33:ad:3c:39:55:
61:b0:67:f8:f8:be:5d:90:0d:9f:8a:51:a6:4d:f9:
58:52:44:7c:26:c0:49:5d:12:82:54:9a:16:01:d3:
d7:d8:d6:43:97:74:9d:bd:04:03:61:c2:71:ac:ee:
f6:1a:19:f1:27:02:24:de:1f:da:0f:52:f7:7c:23:
cc:a2:24:99:55:63:b9:50:82:5d:f4:e2:eb:3c:b9:
5a:aa:8c:1d:63:8c:fb:0d:ca:98:80:cf:73:67:a1:
f4:d5:e5:ee:e6:23:23:b2:86:51:9f:b3:1b:fc:70:
32:88:cf:67:62:51:01:db:03:d4:db:34:59:db:3e:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2B:A0:85:0A:99:CA:47:36:5B:84:25:C1:9D:14:FA:4B:9A:D9:4D
X509v3 Authority Key Identifier:
keyid:5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:73:31:da:3a:10:f7:a1:7d:56:bc:eb:ee:5a:6f:5c:6a:96:
b9:e6:52:b1:7a:c3:c6:fb:87:cc:1a:c3:e8:61:3b:cf:1c:c4:
ce:78:4b:5c:97:cd:19:c3:34:37:92:41:4b:88:58:59:c3:1f:
c5:c0:46:ef:3a:60:b4:02:d8:fc:28:99:1c:7e:ff:33:ce:3b:
71:de:23:0d:8c:10:de:f4:cf:82:24:90:34:a9:1b:69:42:05:
de:8a:7e:e0:1e:5e:c0:16:a2:f3:fb:30:af:88:74:ad:a2:3d:
76:f1:82:c6:c7:79:05:d0:5b:b3:8d:56:89:d4:c3:b5:41:f4:
a3:30:9c:e5:cc:6d:6e:6a:36:f8:8a:67:1c:44:6e:8f:08:f3:
4a:51:ef:5c:9b:40:71:2d:2b:29:fa:02:f1:8f:e9:3f:7b:6e:
8f:96:6d:41:55:77:5e:04:7e:e2:eb:4d:74:02:88:2a:1f:92:
63:5b:1a:23:58:d1:f3:0d:61:21:f8:06:aa:9b:64:5f:19:12:
68:5e:0e:ed:d1:ec:5d:a1:ed:81:0d:d2:c5:e0:66:28:d7:93:
6f:9a:52:bc:8b:cd:ba:8b:7e:f3:df:53:4a:bd:eb:ac:29:41:
a0:26:77:7e:b0:81:ee:66:a4:6a:51:92:f5:b9:2e:13:f9:1a:
f4:38:40:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:17:02 2025 by rpki-client