Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json)
Hash identifier: b+AB0FZswvbVvn/Tuow3SRiE8ocivsiyqmyBCxVekTU=
Subject key identifier: D6:25:19:DB:7C:2D:AA:7F:9C:9D:18:D8:17:19:5A:FF:22:15:C7:3A
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial: 2443
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
Manifest number: 2429
Signing time: Fri 28 Mar 2025 15:53:26 +0000
Manifest this update: Fri 28 Mar 2025 15:53:26 +0000
Manifest next update: Fri 04 Apr 2025 15:53:26 +0000
Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: 8WaG9EqNbRs4MHcst7KWqyaEUxX9JS/geKqFBCHsuI4=)
2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: aC8EINXIC01Iys9eKuxANUXX5lS0IOCfT6iahbBp2dk=)
3: 2B20B9CCCBEA11EEB82B690CC4F9AE02.roa (hash: jONv3AteqZr2Pz8WL2R2omzTcnceAzq3S4OqALo7cqA=)
4: 427FC74C972011EE8EEC5F75C4F9AE02.roa (hash: oO1xFuhAbWa8jnpge9HNWcKJyJkQpOd7FW4dAr7Fm4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9283 (0x2443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F894B
Validity
Not Before: Mar 28 15:53:26 2025 GMT
Not After : Apr 4 15:53:26 2025 GMT
Subject: CN=67e6c5f6-8600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:53:60:19:f8:86:ee:02:8f:b4:b3:6b:a8:
ce:28:cf:e3:78:dc:89:2c:ec:ff:f7:f2:bc:8d:52:
19:7f:ca:44:1e:33:7a:a3:c1:12:45:5d:06:04:4f:
58:7d:f0:c1:2f:8f:30:19:f0:64:81:51:c0:a6:19:
9a:be:dc:8d:28:15:d2:15:7e:e7:55:78:18:10:6b:
68:33:96:30:74:94:13:69:cf:4e:76:60:d8:6f:29:
5d:19:a0:c7:e3:dc:ab:23:80:c1:bb:c0:39:5b:28:
78:a0:8e:6b:30:7d:04:09:7f:f0:64:6b:39:68:f4:
dc:ac:9e:04:14:ad:b5:34:02:a5:1d:9b:fb:13:85:
af:78:f3:96:f1:5b:53:e1:82:5b:df:0e:d2:76:76:
55:f5:88:ae:69:15:99:3c:28:3b:9a:34:8b:d5:da:
31:7e:79:82:c4:a3:85:58:15:5c:9b:c9:68:bf:a9:
7c:c3:7f:80:bb:65:81:18:f6:2a:8e:1f:8a:d9:ac:
b3:79:80:a5:c0:69:f0:ba:d6:13:f1:d1:f7:bd:80:
a0:b0:4b:84:8e:de:a3:1f:42:db:1d:c8:c3:45:d5:
d9:de:84:94:d9:0f:1d:ce:a3:66:03:84:5f:0a:5f:
12:18:b0:40:3c:9a:00:47:b2:0c:6f:97:7e:f1:41:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:25:19:DB:7C:2D:AA:7F:9C:9D:18:D8:17:19:5A:FF:22:15:C7:3A
X509v3 Authority Key Identifier:
keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:47:23:6b:ed:81:e6:22:b9:8c:2a:d3:64:ed:77:9e:c5:21:
d7:5c:29:76:de:b4:a4:48:a5:53:4f:f0:c9:19:90:c9:2b:31:
33:ce:1a:b6:b9:0b:26:d2:e2:32:8d:1a:8e:23:4d:c8:68:fd:
05:0d:31:76:3c:9e:cd:ee:de:b9:fb:b8:54:55:8e:25:1a:bb:
3f:1b:2d:ef:9b:64:3d:57:c4:82:b4:6e:46:d2:1c:e4:43:77:
60:72:16:1c:03:d6:d2:f3:77:f9:74:ad:02:c6:91:ab:dc:65:
73:32:20:5a:4f:8d:f3:1d:71:05:07:54:20:76:3d:8d:c7:9c:
ba:f8:ef:21:22:4f:99:ed:16:16:1e:1e:15:5c:c9:73:fa:c2:
5f:bb:af:8a:80:c1:b8:55:4d:0a:27:07:96:52:eb:b7:1e:2e:
73:d0:f9:d8:2a:89:a7:f2:0a:37:ef:4d:83:c3:60:00:e1:47:
b5:89:57:d0:df:a7:8b:09:bc:e8:ba:18:36:75:02:f8:0b:5f:
d5:f4:10:51:d6:7b:2a:a3:6e:19:69:31:05:9f:0a:0e:fb:9a:
ac:2f:d3:d4:42:16:47:02:3c:87:b8:11:30:50:9e:60:dc:8a:
ac:13:bd:b7:07:2a:3b:a7:d8:82:f6:fa:a2:f6:2a:68:76:c0:
6e:83:e0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:01:52 2025 by rpki-client