Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json)
Hash identifier: Qs73lU6alENyv2D934EpUgoLEgk54SgK1FtU0IbUbp0=
Subject key identifier: F5:61:A1:EC:B9:A0:65:92:C5:2C:BB:E7:41:FA:C5:59:C5:28:AB:3B
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
Manifest number: 011C
Signing time: Sat 29 Mar 2025 04:16:09 +0000
Manifest this update: Sat 29 Mar 2025 04:16:09 +0000
Manifest next update: Sat 05 Apr 2025 04:16:09 +0000
Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: +xkEQTFyZzxdv3mGcwk/0fySKQ9DanOJn2piI7HpL4o=)
2: B0D084CC9AAB11EFAEA9A178C4F9AE02.roa (hash: fjyX2RfOmg6f9yVXW0sBxbxsI7qZZGdjm0T3kgyFLM4=)
3: 17FCF7A0CE7011EF928B4F3BC4F9AE02.roa (hash: CQbFQYBGgN4cPicwihuMngPy/DYvAdUX5/XQle8VCXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC
Validity
Not Before: Mar 29 04:16:09 2025 GMT
Not After : Apr 5 04:16:09 2025 GMT
Subject: CN=67e77409-f29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:86:00:39:18:5b:0e:f6:36:9f:57:69:6b:
58:56:f0:ef:8d:3c:05:40:0a:cf:26:11:06:98:d0:
01:f4:39:89:24:40:f6:f3:71:32:d0:64:bc:93:ad:
2a:4b:91:65:94:13:4f:de:05:1a:9c:7c:11:06:2b:
6d:3d:33:b1:81:cc:9a:e9:fd:c6:1f:7a:78:a9:ac:
38:a9:29:b3:b3:19:cc:33:0f:9b:1c:eb:f9:6c:b4:
98:9b:cf:ca:51:8d:2f:43:b4:2e:62:58:de:b3:74:
27:9d:28:45:c3:71:a6:e4:1f:5d:2c:68:c6:ec:f0:
77:3b:e5:e2:16:1b:34:25:46:f4:24:11:9c:06:28:
4b:cd:35:d8:7e:60:a7:9f:34:a2:ed:35:5b:4c:29:
78:86:df:02:46:07:3f:79:d4:5d:8d:e4:43:83:ca:
73:bb:78:61:bf:d2:b3:4f:75:6b:19:6d:01:f7:95:
6e:57:95:42:75:4a:ff:8a:ed:c0:7f:bf:47:fe:20:
ac:86:19:d4:b1:fa:be:1c:b0:e2:a8:cc:f4:dd:14:
96:a9:47:59:d5:25:9f:45:cb:a6:4f:4a:88:fd:76:
47:9b:70:9c:8d:bb:79:41:8a:16:f5:71:ec:66:1e:
d0:ea:9e:8c:51:02:07:f4:af:fe:35:01:d7:12:13:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:61:A1:EC:B9:A0:65:92:C5:2C:BB:E7:41:FA:C5:59:C5:28:AB:3B
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:7b:97:03:76:87:84:5f:16:86:b7:ed:24:c2:b6:98:ca:f4:
d8:45:0e:ff:c5:88:f8:fa:2d:01:42:07:f1:c3:39:0e:9b:72:
56:7d:18:01:8a:11:9a:ef:32:67:a8:9e:0b:51:4e:e7:3a:c7:
3f:55:50:d0:45:81:ef:88:c0:26:3c:66:c5:d4:f9:eb:ac:e2:
23:5e:df:77:6d:87:ff:ce:73:a7:40:58:87:88:df:ba:74:a1:
a3:0b:20:71:55:ec:f7:3f:98:48:08:b0:dd:7d:25:b8:f3:18:
2c:ad:1c:dc:e4:c0:0e:ac:c8:7b:aa:5e:88:97:bd:a3:3a:52:
85:1d:1f:82:94:ad:d8:a1:ec:6e:f7:34:75:b4:a8:7d:3d:24:
ed:88:16:ea:17:7f:a3:a7:49:78:46:d9:bc:d7:60:23:a2:29:
2a:14:16:a3:ea:5c:3d:6b:e6:c8:1d:06:07:65:5d:c1:b9:3d:
6e:f4:ef:f7:e6:b1:90:8a:31:19:a5:8d:e6:7e:d9:29:ec:19:
c9:c4:c2:90:e6:9b:26:62:ff:1e:34:b7:7d:68:77:07:b6:ff:
96:77:38:ce:4f:c7:c7:f2:3e:ae:f6:a5:dd:4b:bd:65:1f:41:
e0:5f:7c:7d:40:e7:d5:13:e1:14:72:91:fb:db:40:8d:2e:12:
88:b4:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:50:17 2025 by rpki-client