Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json)
Hash identifier: XCrmVTJOkeKGVA05r7JSN75/PV1Qqo8NT2CPethiKOA=
Subject key identifier: 89:E1:4F:DE:81:03:B7:E6:3B:2F:69:1E:78:B4:3A:2D:44:4C:95:84
Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E
Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
Manifest number: 65
Signing time: Sat 29 Mar 2025 06:18:21 +0000
Manifest this update: Sat 29 Mar 2025 06:18:20 +0000
Manifest next update: Sat 05 Apr 2025 06:18:20 +0000
Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: OsISGqYy16BHURHf3oL0aW2Rqrqq/4uGHyJqZjwK/F0=)
2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: T+wmuYYMTFF61NV8D+auleLzw90NK0dFwG6cz8qIwGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE92F
Validity
Not Before: Mar 29 06:18:20 2025 GMT
Not After : Apr 5 06:18:20 2025 GMT
Subject: CN=67e790ad-bbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:10:0f:b4:41:a5:05:6e:eb:9a:c0:04:c6:
91:d4:d0:6b:48:5b:43:ab:77:59:a1:d9:be:d7:f5:
d3:de:86:6d:62:9e:11:7a:80:a1:a0:a4:ed:a9:4e:
45:aa:b6:b3:77:4d:c9:81:49:e5:3c:0c:bf:ef:1e:
60:01:c2:1d:3b:a7:af:ec:40:dc:c7:e2:26:bb:8d:
fa:05:ab:3b:4e:55:dc:12:62:e0:bb:74:dc:22:7a:
3f:ef:29:72:5a:03:4c:af:bc:52:55:25:d8:20:6e:
7f:b3:cf:6c:1b:c8:dd:18:d8:d9:d3:31:18:de:5a:
c7:cd:80:88:1c:54:6e:9f:2b:28:bd:d7:6b:49:6c:
5e:5a:a0:75:ee:d3:1e:44:09:bb:5a:1a:02:84:8e:
68:d1:2b:e4:27:1f:d6:df:9b:48:ae:35:cb:86:ef:
27:9a:a4:8c:5b:b8:a6:c2:37:93:e9:05:1d:74:11:
69:c4:d2:a6:21:0f:06:53:2e:29:6d:01:90:48:22:
a5:a4:74:27:e7:92:88:77:fb:e6:dd:74:0f:fc:79:
70:2e:cf:41:47:1b:1e:e1:5a:d1:3f:ad:37:22:7a:
0e:88:ab:9f:cc:51:7f:8a:4c:2a:ae:16:99:e0:19:
a1:7d:51:25:80:be:c7:3c:71:95:64:48:5c:ac:12:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:4F:DE:81:03:B7:E6:3B:2F:69:1E:78:B4:3A:2D:44:4C:95:84
X509v3 Authority Key Identifier:
keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:d0:51:65:b7:67:08:7c:b8:5c:5b:4f:f1:0e:69:dc:cf:26:
17:78:cc:70:3e:ce:f6:a0:ee:9e:fb:cf:9a:24:aa:f7:2b:ff:
c6:e0:17:19:ab:3b:cb:22:42:bc:d9:d0:7a:e9:34:b2:33:57:
06:cb:c2:29:af:63:19:88:35:33:d9:9b:f8:32:0a:1a:80:ca:
fb:b9:1e:19:c6:74:dc:52:e0:bd:8b:9d:f3:5a:d3:f4:1d:bf:
b4:30:25:47:a6:4a:14:69:98:b6:aa:3b:10:fa:6c:f7:1d:0a:
9f:37:db:2b:b0:0d:ee:a9:e9:9f:6a:e8:f9:dd:4b:87:21:88:
4c:61:b3:74:54:8d:e1:a1:09:e1:64:dc:d8:97:0d:c5:7d:9e:
4a:45:89:e7:46:2c:f2:ea:32:c1:4d:d5:ec:7e:24:84:80:88:
ee:6c:95:ac:72:68:c2:6d:91:bd:06:f3:4d:6e:62:52:60:f6:
f0:0c:95:49:9c:eb:e3:60:ae:f1:10:46:08:80:a0:d1:1a:21:
a1:ac:b8:c5:5f:33:e9:5a:de:10:c4:85:c8:37:c0:22:35:2d:
ae:76:57:b1:62:35:23:8c:11:0a:57:15:ad:2c:9d:f4:39:76:
a8:55:8f:e7:46:aa:b5:24:76:65:ad:7d:3c:22:53:3d:1e:c1:
44:ce:2f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:06:50 2025 by rpki-client