Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier: NvrdJPiMqNZkZ+HW6q+LP6/w/gIha83RF46tGl0jp/w=
Subject key identifier: B5:08:84:A5:5A:76:3D:43:A0:68:D6:A3:05:61:71:4C:D9:E9:FF:AA
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number: 01A0
Signing time: Sat 29 Mar 2025 02:55:44 +0000
Manifest this update: Sat 29 Mar 2025 02:55:43 +0000
Manifest next update: Sat 05 Apr 2025 02:55:43 +0000
Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: My/ZrJyAuVsNAlhzKqYWLw4d3BGkTciCTGanW8H4UcI=)
2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ksp6qBpZ5kB0EysEaPobcR9QCXbiquNMVXrarPKPN4A=)
3: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: xgTk5QLU2Vm82iRKTqkbO5V1pNHv+/+0qFa5a4D2Fm4=)
4: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: 5cknTz/azpX9sHHI7VxRFMrA+eqmREBfLXzZWKlWnBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E9B
Validity
Not Before: Mar 29 02:55:43 2025 GMT
Not After : Apr 5 02:55:43 2025 GMT
Subject: CN=67e7612f-602f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:38:a9:44:2e:6e:77:0d:3b:73:85:53:be:
14:de:ef:b4:cf:23:11:58:f8:cf:df:c0:0b:fd:66:
da:f0:cd:16:6c:c8:3f:65:56:ba:e2:9a:63:cd:d1:
ee:92:5a:88:7a:fc:df:db:af:36:3d:7f:31:3d:06:
7e:8b:fa:79:15:7c:4c:eb:e6:02:44:82:04:34:92:
23:4d:76:5a:f9:7c:bb:5a:70:bb:b9:de:12:01:60:
d5:18:4a:96:b8:af:bc:04:10:44:6b:2f:9d:bf:b8:
dc:1d:7b:4a:6c:33:c7:83:7f:6e:35:ac:6b:f0:4d:
6d:f4:9e:b2:d8:bd:90:9d:b6:db:fe:90:f5:ff:d1:
60:6b:b7:c0:b9:93:91:21:9d:03:95:32:07:08:3f:
68:54:5b:fa:77:72:0a:d0:d0:74:01:00:79:32:da:
5e:0e:eb:c9:12:15:a2:6f:ee:f0:a0:47:e8:ef:fb:
6e:31:6c:22:ca:1b:0d:30:4d:ef:e9:ec:a9:65:9d:
27:6f:7d:79:16:19:f7:d4:b3:fd:b6:6f:f7:c4:49:
f1:47:da:4a:06:92:c6:c8:88:95:1f:17:4d:94:37:
ab:43:6a:0b:63:22:9a:ea:72:dc:63:7f:d8:d6:bb:
bb:55:de:33:20:e6:02:b9:91:64:d3:28:4e:a7:17:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:08:84:A5:5A:76:3D:43:A0:68:D6:A3:05:61:71:4C:D9:E9:FF:AA
X509v3 Authority Key Identifier:
keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f0:80:ef:7b:e7:d1:6f:fa:d7:37:cb:25:5b:51:c5:77:38:
04:40:b8:b1:c2:8b:3f:1d:69:48:50:75:5c:3e:68:14:ef:99:
fa:eb:aa:da:ef:c5:5b:83:b6:df:6f:ae:14:dd:4b:35:89:9a:
07:df:18:83:1e:73:41:52:f5:86:a3:ec:4b:f0:3a:54:3e:93:
5c:1f:0b:88:4e:e2:14:ab:12:05:52:22:90:2e:84:da:19:7d:
b8:ae:7a:7a:56:04:3a:dd:d1:07:78:d1:7c:02:eb:61:b1:e6:
55:a7:ff:85:f5:6d:eb:57:5f:c4:70:7f:cf:d7:e8:ac:37:6b:
4f:9b:db:16:e3:6f:42:25:e6:60:19:c9:37:d8:57:09:7e:d7:
ca:94:79:e3:73:a5:cb:ec:04:77:01:1e:c6:b1:e3:25:1e:f5:
a0:43:a6:2d:51:60:eb:fc:a1:b1:5c:72:18:3d:36:ed:72:b7:
f1:1b:a6:18:ea:c2:b7:e4:02:11:85:d7:f0:22:7e:aa:98:b3:
2b:a1:51:9e:a3:15:c5:16:8c:75:2f:d5:1b:5f:79:ba:62:65:
4d:c3:37:4d:4c:44:e4:26:36:ae:0e:60:75:4e:ab:17:c0:07:
c5:1f:c1:e7:83:74:6c:08:13:57:4f:13:b5:be:23:4a:6b:41:
57:12:f5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:04:55 2025 by rpki-client