Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
File: BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft (raw, json)
Hash identifier: YNhFqyZj4twyzO8cElFL5bmsOUxkp9m8hLbP610wQ8w=
Subject key identifier: E5:0A:F8:39:95:10:4D:1E:0C:6E:20:16:A2:CB:F6:3A:95:B8:64:62
Authority key identifier: 06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1
Certificate issuer: /CN=A91F63DC/serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
Manifest number: 0114
Signing time: Sat 29 Mar 2025 04:15:38 +0000
Manifest this update: Sat 29 Mar 2025 04:15:37 +0000
Manifest next update: Sat 05 Apr 2025 04:15:37 +0000
Files and hashes: 1: BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl (hash: FofFXso+mtZe9DjJMfgHe+Z37yWaT7U5CK6N1bGr414=)
2: 9FFF0E74665511EEB872BE4DC4F9AE02.roa (hash: HsI9s/avf/WsE7yy/2Fnz0a9pkM1ZrwF3kHF8jU1yp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F63DC
Validity
Not Before: Mar 29 04:15:37 2025 GMT
Not After : Apr 5 04:15:37 2025 GMT
Subject: CN=67e773e9-ee34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:25:3e:b0:85:be:03:0c:b5:f1:a3:85:42:
4a:a0:a2:a8:c0:b3:69:a0:f7:0b:6b:07:bc:9d:7d:
24:b5:52:35:50:cc:67:30:60:da:03:65:59:eb:c7:
55:78:41:8a:63:a9:4b:39:9f:4c:82:53:b0:6a:8a:
20:be:9c:52:51:c2:42:b9:1b:20:1c:3c:f1:ec:98:
fb:2a:f2:7f:1e:d6:6d:ee:15:d0:bf:f3:22:0c:4f:
f3:de:88:29:99:18:76:c2:4f:db:74:45:0b:06:fb:
de:a2:5f:eb:f6:6b:57:5f:c8:0a:37:9b:b7:b9:ec:
40:3e:41:51:c5:40:2c:7a:f2:8e:0e:83:6c:00:2f:
91:a7:d6:0d:4f:7f:f3:d2:f9:0f:32:cd:78:04:fb:
a4:f8:ed:3e:bb:df:b2:64:fc:87:47:b6:db:f5:8d:
dd:1a:7c:2a:cb:1e:a5:4a:ee:2c:af:a4:96:41:e4:
9d:2b:6c:36:fe:1a:87:6b:a6:c2:aa:3b:02:ee:a8:
50:a5:35:3d:eb:1c:35:6e:fe:5c:0e:94:47:2c:bd:
77:67:8e:19:fc:91:47:7e:17:10:05:75:87:8f:5a:
49:ce:18:f7:92:9a:d1:53:28:cc:00:50:f0:c5:77:
40:6b:50:fe:16:4c:78:a8:f7:e2:38:60:60:06:c3:
d8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0A:F8:39:95:10:4D:1E:0C:6E:20:16:A2:CB:F6:3A:95:B8:64:62
X509v3 Authority Key Identifier:
keyid:06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:72:55:7a:18:e4:0b:c6:a4:6c:2b:0f:1a:47:5c:29:90:d8:
7b:47:b8:ff:59:ba:97:5a:f5:74:bc:ad:4e:ab:12:5c:b6:97:
23:20:1d:ac:17:de:64:dc:70:d4:7d:22:f2:6a:d5:ff:0e:e8:
86:58:a5:09:22:70:2a:d9:47:26:d7:a4:7c:9e:0e:2d:43:12:
b4:fd:c3:f0:63:8a:7b:13:93:89:71:d1:72:ce:91:c3:7a:0e:
bc:45:2e:92:c2:7e:93:39:a5:0e:0c:16:e7:64:eb:e8:da:02:
c2:60:41:7e:90:00:ca:f6:45:1c:66:8a:b1:b7:72:06:80:85:
1c:2d:55:c7:7d:fc:26:7f:e6:46:79:87:95:95:b3:7e:68:c2:
19:67:27:4b:9f:ed:b9:51:aa:b9:d3:47:ac:18:b8:7e:b8:42:
56:8e:cc:c9:05:41:1c:c4:11:0c:37:3c:0c:5a:ed:96:2b:42:
ce:53:88:c0:d3:3d:7d:e3:1d:bb:42:a0:70:4f:0e:17:f0:59:
be:89:4f:44:db:54:0d:02:56:07:6a:30:26:e0:fc:db:0b:11:
d0:51:d8:5c:58:83:c5:bf:c2:1a:75:35:97:e7:3a:f2:f1:93:
d8:67:6a:fe:dc:13:3d:13:3d:a1:a8:3f:52:ec:9d:ff:2c:c1:
6a:28:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:28 2025 by rpki-client