Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier: FrIhZXd4T+dztP+m378tfhFSiB8CZwV53pbTNLpQMkY=
Subject key identifier: CD:04:F7:46:8A:37:A5:B7:9C:D7:4B:93:A3:4E:61:B6:67:50:BF:FF
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 0456
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number: 043D
Signing time: Sat 29 Mar 2025 00:34:43 +0000
Manifest this update: Sat 29 Mar 2025 00:34:43 +0000
Manifest next update: Sat 05 Apr 2025 00:34:43 +0000
Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: wYRQcYOXKUJwAmsjh05qPRWi72NnVsVWyERm/pku36c=)
2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=)
3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110 (0x456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B
Validity
Not Before: Mar 29 00:34:43 2025 GMT
Not After : Apr 5 00:34:43 2025 GMT
Subject: CN=67e74023-8e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:c1:a5:60:07:12:f2:94:4c:de:b9:b4:1e:
56:7e:99:22:9b:19:23:70:e2:db:c6:2d:e9:d6:46:
0f:d1:cf:91:c3:d1:1e:0c:2c:7e:34:dc:9b:56:31:
a1:c8:0c:c5:5f:74:e5:8c:46:c6:51:77:2a:4a:0f:
a2:c8:7b:b2:67:7b:86:ef:02:60:c4:43:49:c1:5a:
ff:3c:c8:c6:ed:62:33:cc:a4:01:29:53:ef:92:a2:
48:fe:a1:20:30:1d:ac:ee:df:49:4b:84:d9:d7:c1:
74:6d:51:9b:75:3d:2a:49:24:a2:cc:50:b2:c4:28:
69:0f:d1:61:49:8d:d8:93:f1:07:9f:b8:fd:d8:a4:
7a:5c:10:06:c0:a5:8c:04:4d:47:64:37:78:07:97:
3a:40:3d:fa:51:8e:2c:c8:ce:e7:07:96:52:6c:da:
e5:ed:f3:c1:57:1d:66:db:c0:2b:12:63:48:60:87:
27:52:83:e2:a2:09:eb:d5:3c:9d:da:1c:48:9d:c7:
ab:5c:19:03:ff:b3:85:af:48:7b:88:90:b5:b5:91:
75:50:8f:ce:b9:6a:ec:53:61:7b:36:24:61:31:54:
a5:ea:44:9b:e7:ce:61:67:9a:57:c5:e3:06:3f:7f:
39:8c:7e:db:21:49:fb:6c:a8:70:e3:7b:10:89:3b:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:04:F7:46:8A:37:A5:B7:9C:D7:4B:93:A3:4E:61:B6:67:50:BF:FF
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:49:1c:68:1a:90:cf:84:59:c0:c3:9a:49:65:99:39:cb:4b:
7d:c6:a9:f4:ce:0a:fd:8d:02:8f:00:31:e5:0c:6a:ea:81:9e:
80:7c:36:a1:57:5f:46:c4:50:af:42:ab:11:13:6a:47:b9:c2:
ca:f2:fc:18:90:61:b7:28:22:cd:db:4e:ac:2b:b4:cf:84:c9:
86:f5:10:c7:d2:6f:5a:44:04:2a:1a:60:eb:c8:05:1b:4c:58:
95:19:45:bc:a8:4f:c2:06:d0:74:36:82:4e:79:6c:d2:6f:ca:
a8:db:d7:c4:e2:b8:a1:0b:2a:7c:f3:4b:08:45:e7:87:d2:aa:
54:a0:31:5c:47:8a:c4:7d:6f:14:54:37:08:f8:c2:c8:85:db:
7d:b8:0d:ba:27:d7:e2:ab:32:12:91:bf:ae:6c:c3:a3:67:1d:
0f:56:14:83:fb:66:b0:63:b4:56:53:64:4d:69:3a:c1:73:86:
26:90:f0:6e:bf:29:dd:db:be:ca:2b:a3:b5:a2:13:53:a0:88:
19:1c:c4:0f:ad:e4:5b:9e:8a:6b:05:54:90:10:de:29:d5:8f:
50:e6:cc:5d:fd:6a:0e:2d:37:92:5d:b4:00:8a:db:e7:0c:f5:
fc:58:29:3c:05:ad:e6:1f:8c:06:16:aa:96:95:41:a2:85:5a:
c6:d6:55:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:41:16 2025 by rpki-client