Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json)
Hash identifier: 168akFm28mNY1mPYwqMk/uFi7OshO6D1DyJ0ZUcwxkw=
Subject key identifier: 92:02:98:96:F1:F0:97:E9:B3:42:AE:5C:5C:F4:BF:6C:11:FC:31:06
Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
Manifest number: 47
Signing time: Sat 29 Mar 2025 06:42:38 +0000
Manifest this update: Sat 29 Mar 2025 06:42:37 +0000
Manifest next update: Sat 05 Apr 2025 06:42:37 +0000
Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: xZ9+nqGW4QLvzKxX/25ZmlNEkgdt5MZbNp2qTRSAK+0=)
2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: S974N0P9f8Bg6Jc7BIscRXeUqpVDlIBE/NP1Bo0j0PA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7537
Validity
Not Before: Mar 29 06:42:37 2025 GMT
Not After : Apr 5 06:42:37 2025 GMT
Subject: CN=67e7965e-371a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:e1:64:41:3d:10:8b:86:11:ab:d6:32:ca:
13:3d:b4:29:84:cf:bf:64:9e:81:c8:59:f6:16:53:
00:27:09:63:7e:d5:5d:95:bc:aa:f3:cf:ba:57:84:
89:54:b1:a7:3b:77:95:a7:92:8c:2f:52:00:9e:c3:
6d:08:d1:11:7a:03:f9:95:c0:9f:4a:6e:d3:b3:c7:
88:bd:aa:f7:55:48:a9:35:cf:7e:2f:75:0e:7d:d2:
37:e6:8b:02:86:2d:06:c0:9e:ca:80:b9:30:78:1b:
e2:4f:58:51:08:5b:54:6d:9b:6d:50:7e:6e:92:ea:
a4:fb:f5:a1:8e:46:79:56:2a:4c:8a:ba:91:18:ab:
0f:b7:23:be:1a:27:41:2a:4a:2d:23:a1:96:ca:2b:
05:e1:fc:83:33:af:c8:69:1a:0b:fe:51:f2:31:bb:
ac:73:44:5e:86:44:be:d4:4c:91:fa:61:6a:0d:df:
95:a7:f5:dd:7b:e3:1b:93:be:2d:1d:63:96:1a:63:
b0:dd:ff:2a:91:7e:80:c3:c1:50:82:45:91:9b:29:
8e:34:96:2f:24:09:7a:1a:58:d0:28:15:2f:8d:3d:
d1:04:57:f9:23:10:8c:ee:01:f3:f2:7c:64:d2:d7:
5d:0c:7d:d5:15:15:13:b0:84:48:b9:94:d5:5f:ec:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:98:96:F1:F0:97:E9:B3:42:AE:5C:5C:F4:BF:6C:11:FC:31:06
X509v3 Authority Key Identifier:
keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:47:a4:0c:aa:90:64:04:22:cd:2f:4d:40:cb:6f:45:da:49:
8b:4f:3a:fb:65:b1:52:d0:56:7e:14:40:0d:36:5c:9b:d9:b2:
5c:ef:1e:be:4a:19:ef:e9:bd:38:99:23:ab:91:57:ac:0c:26:
15:64:4f:53:45:bf:41:f4:58:c2:63:14:da:48:39:d1:18:34:
8e:a8:8c:d3:b1:d7:6e:76:5b:74:52:f2:30:69:68:c0:54:3d:
79:c5:06:b3:35:e5:cc:d4:63:9b:0b:ba:47:f7:d2:50:c6:e6:
15:73:6e:28:f3:48:46:7b:c3:a6:3f:5d:83:2b:17:f1:53:3b:
66:3e:59:32:4f:72:0b:45:9f:ec:92:af:73:76:35:ea:bf:c9:
97:75:f8:e5:ca:9c:71:2a:52:80:dc:76:0b:91:c1:2c:a2:7d:
b6:35:d3:26:ae:07:46:57:89:52:66:c0:11:44:7f:f5:c8:b7:
e7:17:14:32:61:5a:90:ce:f9:1b:fd:47:da:fd:4b:45:c0:6b:
6b:1f:e1:60:63:87:89:79:dc:81:13:3c:f1:4a:76:63:7f:2c:
d6:74:5c:dc:cc:2b:be:7e:f5:32:f7:db:17:cf:72:5c:66:dc:
4b:0a:bd:0e:c9:17:a2:09:cb:0a:8c:fc:95:dc:e8:35:08:f1:
5d:ec:df:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:06:30 2025 by rpki-client