Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json)
Hash identifier: HdLbYBcRRdCYUxtdVV7Od28LF5istH62Ub1jrC0KWyU=
Subject key identifier: 9A:F7:4E:0E:25:CF:BC:AD:46:12:AB:C0:E3:19:64:0E:49:20:24:E8
Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
Manifest number: 29
Signing time: Sat 29 Mar 2025 07:06:34 +0000
Manifest this update: Sat 29 Mar 2025 07:06:34 +0000
Manifest next update: Sat 05 Apr 2025 07:06:34 +0000
Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: Kgnd3wnafep1fN1vdzC4BeQxWKtAkO8L+HPNX2Nsiac=)
2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: LnJzBzEfTxjLgTZtBUJIJtCnRzaftx7eCk4WGWWItX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2D93
Validity
Not Before: Mar 29 07:06:34 2025 GMT
Not After : Apr 5 07:06:34 2025 GMT
Subject: CN=67e79bfa-0d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:ba:0e:cc:80:a9:8f:e5:11:4d:01:93:34:
a1:54:3c:1b:4d:45:0e:63:44:d5:bf:11:89:14:db:
4e:3e:d7:f3:b2:36:df:1e:54:2d:c6:a9:38:bf:4c:
75:d3:a0:aa:85:a1:d7:db:eb:7a:50:4d:7b:f1:7c:
b9:8e:ee:00:69:91:8f:34:69:b7:0a:be:a2:08:26:
bf:65:b4:fb:91:bc:70:15:14:d5:41:4b:a9:39:e4:
65:c7:0a:31:b3:85:3b:35:37:be:8f:ae:e1:04:85:
ea:04:2e:af:f9:02:c8:07:e5:e9:02:49:f9:39:04:
9d:46:ea:a2:49:3a:25:67:f0:81:10:09:d0:5e:1e:
b2:5c:b1:0d:55:85:2a:20:e1:44:fc:9d:0e:5e:5e:
0e:26:1e:2c:73:82:10:b7:8a:1a:bd:f5:90:2c:29:
d2:4e:8d:2d:12:99:fd:69:79:b9:01:9a:fa:29:45:
eb:31:b1:f7:20:4e:f1:c6:9d:d6:b0:fd:d2:d9:c7:
b6:05:ce:ca:31:7f:82:7a:42:80:04:4f:b1:6d:31:
8e:9f:d3:b2:8f:14:9a:40:4a:24:fc:51:91:c0:50:
22:87:54:3e:04:f4:55:44:f2:8f:ed:73:18:bd:7d:
db:5c:b0:5c:9d:21:be:6c:bb:30:16:b8:fc:a6:a8:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F7:4E:0E:25:CF:BC:AD:46:12:AB:C0:E3:19:64:0E:49:20:24:E8
X509v3 Authority Key Identifier:
keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:25:8b:41:5b:a9:58:6f:d6:14:2e:b5:55:f7:d5:c4:df:8e:
00:e0:30:68:f8:7d:e5:66:9b:d8:0a:db:46:c0:ec:40:9f:7f:
16:b3:02:2e:61:4f:60:4d:6c:44:eb:df:b8:8d:0b:67:31:90:
95:79:e3:7e:c7:d5:23:12:f6:d9:6d:e1:03:3d:ea:33:ab:a6:
e4:28:10:b7:73:b0:eb:f9:3d:53:3b:ec:f5:66:f6:14:3f:6b:
16:14:ad:e6:60:af:86:04:21:7b:55:3c:f8:29:bf:95:5b:eb:
2d:2b:ba:c6:f3:5e:11:50:09:be:84:84:09:4e:cc:7b:7b:58:
14:9a:b2:04:1d:73:a2:a8:b9:b2:ec:66:41:24:d0:ce:c7:23:
60:33:91:bf:4f:23:c3:d8:fd:e5:96:aa:be:5e:e3:01:5c:f5:
e5:60:41:49:2e:f3:b4:16:5f:d1:e2:be:ff:57:82:34:ae:74:
c9:ab:02:72:a9:eb:18:e4:eb:ad:3f:e8:30:a9:59:45:4e:27:
26:1e:8f:1e:d0:f6:b3:d3:69:f9:83:e7:22:e6:4d:18:fa:81:
5e:69:2d:0b:01:91:05:64:8e:9d:e1:a0:e1:7d:16:18:71:95:
7b:15:0f:71:5f:81:ae:ba:97:68:90:35:f2:67:90:92:f1:0d:
cd:57:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:24:08 2025 by rpki-client