Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
File: 29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json)
Hash identifier: K0BJa1N+P7y/hkzKRvydMtx7zZFAImy9HUG0VImYzqA=
Subject key identifier: 3C:D6:A9:0B:5A:20:72:25:33:C5:B2:BE:C0:F3:40:BB:0E:8C:CB:2F
Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E
Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
Manifest number: FE
Signing time: Sat 29 Mar 2025 04:33:00 +0000
Manifest this update: Sat 29 Mar 2025 04:32:59 +0000
Manifest next update: Sat 05 Apr 2025 04:32:59 +0000
Files and hashes: 1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: 4Xcf2KefFAgYGmCQNHGWJHAhsjwLIiMj2gZcdqS1Qlo=)
2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: FS0NZn6HmMNUVE243zK4MTv8yDH9emQLgpWFOPvCnxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F223F
Validity
Not Before: Mar 29 04:32:59 2025 GMT
Not After : Apr 5 04:32:59 2025 GMT
Subject: CN=67e777fc-598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:40:23:57:d2:5c:48:cf:df:02:07:5d:a4:
03:f4:16:40:60:59:cb:4d:62:8b:dd:ca:80:6a:df:
e9:3f:78:a9:cb:63:a0:be:46:99:6c:f7:af:c8:51:
b5:28:87:fe:2c:5f:cb:64:17:c9:60:87:bb:41:5c:
39:f8:1b:ef:bf:2c:d6:57:76:61:5e:fa:59:ef:ab:
49:c3:de:24:26:d8:34:98:f3:12:e5:72:5f:8e:5d:
ef:f1:32:6a:cb:cf:4d:3c:fb:09:11:c2:de:03:03:
68:09:0a:78:52:91:52:26:d0:0e:15:db:34:e7:48:
c0:d8:4a:db:8d:07:d8:f4:a8:a9:67:87:5f:51:dc:
f4:78:b5:91:94:ea:54:06:e3:f7:38:6d:49:92:ef:
51:a2:7c:71:2e:a0:51:64:5d:5a:4a:f5:b4:27:ab:
62:87:3e:ae:c1:c7:9c:50:0e:02:ff:00:9a:33:3c:
ca:99:5a:36:b8:e2:58:dd:29:22:cd:7b:ab:6b:90:
7f:6f:d3:09:f8:2b:a7:0c:c0:0e:72:83:8b:26:2f:
83:ae:d4:52:90:d0:a9:70:45:6d:a5:47:7b:a4:51:
46:b6:52:1a:ee:32:ee:8c:b2:e1:45:2a:62:53:f3:
b3:95:19:db:f7:39:52:70:16:0b:d9:fd:be:95:5a:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D6:A9:0B:5A:20:72:25:33:C5:B2:BE:C0:F3:40:BB:0E:8C:CB:2F
X509v3 Authority Key Identifier:
keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:73:0d:d2:cb:24:37:21:4e:47:4f:50:1b:e6:e2:62:53:64:
02:b1:c6:f6:0e:98:28:7f:21:9c:5f:30:d1:3c:e1:e6:bf:52:
de:26:6c:1c:ee:4c:6d:99:7f:06:e4:28:8f:05:af:d6:b8:7e:
cd:f9:68:cd:04:fe:17:a9:3e:13:d9:56:2a:61:df:2f:b1:d5:
2f:39:c3:fe:8a:9f:f5:4f:55:56:bb:1a:bb:57:38:5d:ca:fb:
91:28:1b:ef:04:d4:a3:19:0d:42:f9:21:54:ce:ea:4c:25:65:
f5:b4:f3:39:16:ab:da:79:74:08:72:40:30:11:99:35:6c:75:
52:d8:0e:0a:d6:c0:06:fa:b4:2d:3e:a3:8a:fa:3b:62:4a:3b:
33:ee:84:4c:e8:e2:9d:c7:e3:c2:b9:82:3d:d2:4f:fb:3f:59:
dd:82:ca:b1:19:ec:8e:e3:24:20:d5:3d:46:4d:db:f1:9b:fb:
8b:af:fe:04:e2:7a:5e:e1:49:4a:1e:58:53:db:75:12:1f:d6:
7d:b3:d8:7f:a0:9d:d8:14:18:8a:23:4e:73:76:89:11:45:d9:
09:22:87:c9:24:9d:f6:a9:4a:f6:c4:2f:12:fb:c7:00:95:fa:
21:4f:c7:80:29:bb:bf:e9:2c:9b:cc:a3:91:a0:f4:20:cc:6a:
1d:9e:10:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:33:54 2025 by rpki-client