Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json)
Hash identifier: 0boOzh2tdLC3gr8X2QBfyb7ym4mXra7MZjm14Od0cEM=
Subject key identifier: 6B:D8:82:DC:B3:1B:F7:53:70:B6:63:94:EA:C4:0C:CA:2E:90:D9:84
Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Certificate serial: 049E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
Manifest number: 0495
Signing time: Sat 29 Mar 2025 00:18:07 +0000
Manifest this update: Sat 29 Mar 2025 00:18:07 +0000
Manifest next update: Sat 05 Apr 2025 00:18:07 +0000
Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: NzEugDSzyTIQsH2EknwqOb607kXnQVFuzXeDcESfVqI=)
2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: OEZzXzknZfZ5+s266LCfZPiCa3g7F7GJ2hmeU6hbgO0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182 (0x49e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3099
Validity
Not Before: Mar 29 00:18:07 2025 GMT
Not After : Apr 5 00:18:07 2025 GMT
Subject: CN=67e73c3f-1ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:fe:32:71:4e:3c:fe:03:bf:b3:7e:ca:b1:
18:9a:7d:f0:25:68:a7:54:78:db:93:d3:6b:d7:ab:
2b:b1:b7:95:d4:fd:79:31:da:a8:42:dd:e5:29:2f:
25:6f:d1:4d:a4:3c:69:33:69:5d:8d:ec:77:57:2f:
f9:92:18:84:06:fc:05:08:e9:ce:a2:91:07:d1:8d:
8b:b2:97:e3:fc:b5:68:51:c1:82:3f:a6:6b:fa:a9:
d4:b4:95:07:28:7e:e5:a5:d2:c4:a0:1a:18:8e:9a:
9a:86:81:f3:dc:6c:5d:ba:b1:9d:58:ce:39:8a:fb:
09:44:6e:8c:71:40:94:42:c1:df:90:d6:1c:9f:d5:
d6:38:0b:8f:a2:17:e1:31:03:4f:bd:d9:a9:85:8d:
ea:bd:0e:21:a5:50:df:58:4a:f4:aa:08:c6:59:bd:
e2:bd:c7:b0:32:0f:46:e9:a8:bc:a1:56:1d:79:72:
5f:10:60:8a:c2:10:f3:58:8d:35:45:47:29:01:da:
f5:41:75:19:d0:82:20:1c:56:1c:3e:ec:fa:b6:39:
31:38:db:bb:a4:3a:c6:58:79:13:c9:bf:ef:35:81:
61:8e:e5:8a:ee:e5:c3:e8:46:54:eb:3c:6d:18:76:
c3:70:ba:68:b5:f0:57:b7:e0:21:ce:c5:a1:fd:6f:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:82:DC:B3:1B:F7:53:70:B6:63:94:EA:C4:0C:CA:2E:90:D9:84
X509v3 Authority Key Identifier:
keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:88:5d:22:7a:a9:be:26:31:86:ae:b5:26:46:a3:6d:c9:79:
58:6a:00:c1:05:d6:c1:1b:5a:4d:71:40:ae:8b:ba:81:33:c4:
16:c9:72:5c:32:84:76:d4:6b:cc:7d:8a:8a:40:34:c7:d4:48:
d5:b9:e2:8c:ab:5f:bb:3d:0a:44:c1:5e:24:f9:67:b0:5b:8e:
7f:9c:a8:82:28:96:33:f0:d4:85:10:a7:5e:9b:a5:2b:d3:b4:
b9:40:61:87:c6:90:80:0d:4e:77:c1:8f:bb:99:66:ac:63:51:
27:58:25:74:99:e0:b1:89:6b:4c:28:35:38:42:1f:ac:44:0d:
79:64:73:c4:8e:a3:33:0a:0a:09:03:1f:f8:2f:f1:14:8b:ee:
51:86:fd:c8:6b:83:78:5b:be:03:f2:39:bc:28:1d:60:08:50:
1c:62:f5:27:b7:13:94:6a:54:bf:11:58:ae:ea:47:bd:34:15:
0a:1c:91:39:71:42:56:d2:de:e9:dc:d8:81:87:e7:25:15:42:
e6:51:b6:7d:09:03:0a:cc:a6:66:d4:e8:b3:47:dc:47:34:81:
6f:7c:84:9d:23:22:b9:40:46:7c:41:99:cf:99:30:35:90:b3:
2a:3b:fc:71:89:45:56:7b:a1:76:00:d5:14:7e:4c:47:e1:f9:
b8:c6:d3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:42:14 2025 by rpki-client