Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
File: g8kBUb4XghT8FnWDNNO21Sd6PL8.mft (raw, json)
Hash identifier: 3zP0G5shyhtdIofm4/2vCfgVnbCM28trMv2PZCoeL9Q=
Subject key identifier: 15:BD:9F:5F:5F:3D:8A:7B:F6:F6:5C:BB:61:55:58:DB:13:22:D7:67
Authority key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
Certificate issuer: /CN=A91F4091/serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
Manifest number: 9C
Signing time: Sat 29 Mar 2025 05:36:24 +0000
Manifest this update: Sat 29 Mar 2025 05:36:23 +0000
Manifest next update: Sat 05 Apr 2025 05:36:23 +0000
Files and hashes: 1: g8kBUb4XghT8FnWDNNO21Sd6PL8.crl (hash: n5ZIcv/I3Ip1Q/pKftkp0mXlA7AkkYvfkWo9fUBF8fA=)
2: 1E110D7E1DA011EFBC90D55EC4F9AE02.roa (hash: sXijOKbCJmo7Vc9siLjMj6vbNj9IjkbsFg/cetJYPUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4091
Validity
Not Before: Mar 29 05:36:23 2025 GMT
Not After : Apr 5 05:36:23 2025 GMT
Subject: CN=67e786d8-b425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:c9:70:fe:72:ff:95:1c:c4:2a:d3:53:39:
35:4a:57:ec:91:30:f0:11:ef:9c:bc:25:b9:1d:c0:
61:2c:1f:54:50:51:3a:bc:85:8b:fb:f6:eb:7f:11:
d9:8d:dc:6e:e2:b9:c7:c0:b2:af:9f:15:c9:19:85:
79:2c:d6:a5:6b:fb:53:35:7c:58:22:60:5d:96:b0:
36:09:de:42:51:df:75:68:4d:75:9d:94:f9:22:65:
44:a8:5d:78:51:27:56:e1:68:41:b4:37:e5:37:ed:
5d:cc:8a:ff:a9:63:2c:dc:f0:47:44:44:43:5c:56:
5b:63:c2:22:9c:01:a6:e8:21:6d:0c:c3:87:9f:37:
40:3d:69:6e:3a:83:20:94:62:bd:73:0d:35:39:7b:
a3:17:32:72:0b:1b:cd:91:36:e1:bc:86:05:a0:58:
3b:a9:31:77:84:ee:23:40:1c:09:c3:fb:31:82:85:
80:53:0f:c5:3d:84:84:a0:61:f0:4e:20:d0:fa:23:
a0:6d:6b:d4:4c:58:ab:b2:d1:47:a2:86:0f:9b:2e:
54:38:53:21:0c:89:38:ee:05:31:78:e7:d6:2a:10:
e3:3d:7e:37:be:9e:1d:a3:3c:65:bc:fc:70:4a:9b:
da:a6:fc:7f:03:8e:5d:45:97:43:c1:ec:e8:23:5f:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BD:9F:5F:5F:3D:8A:7B:F6:F6:5C:BB:61:55:58:DB:13:22:D7:67
X509v3 Authority Key Identifier:
keyid:83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cf:95:4a:19:b5:2c:be:ce:0f:b7:84:93:e2:e5:97:64:ef:
c4:79:1d:d5:fa:25:9f:07:b3:8e:dc:a6:bf:db:89:de:27:b1:
98:5f:27:df:36:e8:e5:65:7b:18:67:4f:8f:92:2f:2b:a2:d0:
da:a5:71:77:79:f8:16:65:b8:c4:9b:02:ab:69:75:84:fa:f9:
ce:dc:6f:0f:f2:66:3e:63:81:cd:67:18:d2:27:69:e9:91:2a:
03:73:80:07:28:87:f1:ce:bf:e9:60:91:74:1e:ec:3e:c2:ae:
1b:89:07:84:51:db:55:54:fe:96:6b:86:0b:33:f0:72:1e:9f:
a8:16:5e:26:6a:9c:d8:1f:4f:cc:ff:bb:fc:0f:5c:bb:87:31:
2b:0c:21:75:9b:df:d5:2f:86:3a:2d:c8:93:45:ae:7a:2b:98:
f9:73:02:54:78:92:a8:6d:a9:5f:b1:9b:27:53:53:a8:3b:b9:
37:64:17:ba:12:8f:58:20:cb:26:34:6a:49:1b:50:33:9d:63:
cd:5e:33:8a:2d:d8:e2:2e:dc:41:e2:6f:72:0f:23:cb:64:45:
5c:f9:94:59:a5:2a:42:df:b4:df:e5:fd:61:d7:6f:66:ed:96:
0a:c7:c3:0e:62:12:b5:2c:64:f0:1f:a6:77:c0:17:6e:d7:fd:
ad:e0:9f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:01 2025 by rpki-client