Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json)
Hash identifier: 6RVqkVsPPxM810071pwV4+0wCgkvhsJQ0uKhncIp5NQ=
Subject key identifier: 7A:45:BB:93:95:1A:32:11:02:11:8A:8D:CA:F9:20:E8:87:31:A6:44
Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Certificate serial: 03
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
Manifest number: 03
Signing time: Sat 29 Mar 2025 07:33:47 +0000
Manifest this update: Sat 29 Mar 2025 07:33:46 +0000
Manifest next update: Sat 05 Apr 2025 07:33:46 +0000
Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: QCFTqjZMCi2y+g54PSviOeGjb+X08GiFIof1pzqNFDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBEFA
Validity
Not Before: Mar 29 07:33:46 2025 GMT
Not After : Apr 5 07:33:46 2025 GMT
Subject: CN=67e7a25b-b16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:cd:ff:7a:5e:65:ba:03:31:f6:64:fd:4f:
3c:d9:35:ff:5d:fd:96:27:6b:c6:97:5c:0d:77:0b:
c1:be:6e:54:d6:78:3e:95:f5:e1:26:42:89:58:d6:
5f:0b:df:ea:09:1d:f1:2a:d2:97:26:e5:90:2f:df:
05:c0:cf:3f:77:2e:76:3e:7e:f7:e5:58:d5:d4:3d:
f6:c4:57:18:ac:3d:bb:f7:da:06:df:f8:e7:a1:22:
45:4d:4a:f9:a0:01:a5:9a:69:35:39:20:8d:83:52:
28:eb:5a:52:07:83:00:c3:18:39:bf:a8:9d:b3:84:
f6:a7:dc:29:d4:28:fd:eb:07:92:b4:45:6e:28:98:
6e:13:da:3f:e8:5a:b8:f8:6e:fc:c2:17:f1:97:13:
9c:d0:de:2c:c0:5f:8c:5c:e4:60:f6:18:29:56:0a:
3d:89:b8:cc:99:0e:c4:1d:02:1a:dd:c6:04:fe:2d:
dc:5e:83:61:84:d0:02:7d:8c:bd:62:4c:3d:82:ea:
a3:02:d0:0c:bc:21:3b:d7:f3:d9:00:4a:e8:fc:19:
22:25:bf:a3:38:4e:ca:58:5c:90:64:40:fd:62:52:
78:b2:f5:4c:1e:7d:d3:ff:d7:a7:6e:4b:e9:4a:d4:
72:ff:fc:b5:18:ae:c7:d7:62:a5:21:e1:84:96:f7:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:45:BB:93:95:1A:32:11:02:11:8A:8D:CA:F9:20:E8:87:31:A6:44
X509v3 Authority Key Identifier:
keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8c:d2:0e:66:be:47:f0:b9:2f:64:6f:1b:e1:0c:78:28:e8:
e5:d5:1a:57:c0:53:9c:2e:73:47:25:8a:35:e1:ab:04:99:ef:
37:c3:9d:fa:46:c2:1b:2e:74:8b:44:d5:fa:fb:cd:a4:ad:46:
89:91:46:d3:34:e4:c7:15:1d:97:c5:e5:b7:12:62:48:02:ba:
8b:10:7e:06:a2:4f:2a:c5:30:72:3e:cb:d4:72:59:aa:1b:04:
57:c9:c6:4e:d2:d8:0e:75:bd:df:b0:71:9d:05:69:bb:ef:03:
aa:57:ab:97:2f:21:9d:38:36:e6:b1:b3:8f:13:a1:86:c4:22:
ab:ab:23:55:da:60:d4:ee:3a:be:13:aa:2a:1b:1e:d2:65:f3:
8b:ba:5c:3e:fd:d7:15:13:0f:44:d3:f2:35:d0:3d:44:88:47:
0e:09:74:13:f3:1d:6e:13:ca:ca:4a:3d:84:27:dd:e2:a2:b2:
de:ba:c2:41:d2:5c:33:4c:a7:72:c2:3f:c7:30:15:97:29:56:
d1:34:c3:b9:93:fc:62:ed:75:6d:e1:86:08:8c:1b:c7:f5:fd:
85:4c:35:64:18:63:b2:f6:a9:77:41:70:87:5b:2c:97:4b:9a:
e9:9b:95:56:a3:44:8d:79:3a:97:c4:04:05:32:93:26:32:8f:
e8:aa:ca:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:58:25 2025 by rpki-client