Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
File: 755Sv59IZcr4eHrZXObeT2R2hA0.mft (raw, json)
Hash identifier: au/+tnbDBMjvqaBzwQIxI3dfKgS5uXkEkwiRQX7F0Yk=
Subject key identifier: 66:08:8D:D4:97:9C:FA:6F:77:C1:FB:AF:4A:32:80:E5:E3:81:34:9F
Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D
Certificate issuer: /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
Certificate serial: 0A6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
Manifest number: 0A62
Signing time: Fri 28 Mar 2025 19:51:42 +0000
Manifest this update: Fri 28 Mar 2025 19:51:41 +0000
Manifest next update: Fri 04 Apr 2025 19:51:41 +0000
Files and hashes: 1: 755Sv59IZcr4eHrZXObeT2R2hA0.crl (hash: HNdNKwhwR1sxM8ycIbVRJD68B25LINoYezq44gx2k40=)
2: 9E1721445CFB11EAA377D527C4F9AE02.roa (hash: DDWfC2SDa6mkLERH2fLjEnqKEWrtJ+AhIE6qZcqqt1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA4B
Validity
Not Before: Mar 28 19:51:41 2025 GMT
Not After : Apr 4 19:51:41 2025 GMT
Subject: CN=67e6fdce-5459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:07:4f:03:e2:d4:54:1d:60:4b:40:8f:b0:
e8:1c:9f:68:26:2b:cf:df:ee:7e:52:82:72:a8:c0:
c3:64:20:e5:e1:a1:4e:c2:1d:16:e7:3c:01:d9:c9:
57:64:73:be:79:62:7b:e9:95:e2:5e:82:02:6e:7d:
62:b9:3e:b6:d9:ae:06:19:69:e1:24:a5:59:ba:a9:
bf:b6:bb:36:f8:7a:a6:3b:c9:bd:c2:30:94:71:1b:
d1:cb:33:7a:cb:75:09:cc:7a:a6:7b:dd:46:22:85:
40:3b:10:c2:1b:3f:8d:93:b3:3e:46:63:61:c1:a6:
fa:65:9d:f8:4a:4d:bb:1f:b0:6d:9f:41:8b:c0:ed:
68:2d:e5:01:79:75:23:f5:5d:0b:09:ed:f2:40:b4:
4e:8c:d1:bb:ef:55:8d:2d:90:57:ca:8b:b0:21:eb:
54:ff:d4:36:d0:7a:1e:f8:2e:6a:8f:04:af:1a:f6:
8e:3c:85:f6:8d:66:02:ea:17:83:c5:5c:e9:2a:10:
ba:21:4d:81:a7:92:f5:f6:58:8f:e2:7c:d8:38:2b:
75:3e:86:cb:10:46:71:4a:84:2d:e6:89:b7:4c:ca:
1b:c3:e2:01:2b:35:ab:8c:64:d1:11:a0:9b:bf:8f:
bb:b3:02:99:bc:c8:6e:cf:6a:54:5b:c4:92:a0:18:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:08:8D:D4:97:9C:FA:6F:77:C1:FB:AF:4A:32:80:E5:E3:81:34:9F
X509v3 Authority Key Identifier:
keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:de:ba:04:27:4d:60:ac:80:fa:61:31:8c:37:b5:7c:f6:
0a:39:03:fb:e1:e9:b7:96:41:6b:d4:70:a2:cf:bc:5d:bd:4b:
b8:ba:0e:a5:2f:05:80:ea:ae:d2:51:3a:65:b6:fc:cc:65:98:
01:a8:da:a9:d4:03:52:e8:30:e9:36:15:02:e3:3d:58:98:1b:
54:97:03:ac:4e:3b:a5:7d:d8:75:d8:e1:93:ba:61:9a:5a:90:
b2:96:48:49:b1:98:a4:57:a6:23:b9:1f:fa:35:f1:f2:fc:af:
a2:57:45:2f:e6:13:04:68:18:49:4b:7f:b6:ae:0f:c5:fa:3f:
cd:b8:5b:58:39:1a:f8:c9:59:18:4d:22:81:5a:06:13:64:7c:
fb:b4:c7:a5:b8:4a:0c:47:86:b6:a8:8c:f6:64:58:e5:8a:65:
2b:fd:43:a4:10:23:d6:01:a2:c7:38:0a:55:f4:5e:e2:15:fe:
cc:05:71:1f:10:7b:9f:9e:3b:42:39:cc:49:cd:94:49:08:a9:
e6:73:bb:2b:f2:b6:a6:af:db:1c:90:47:2a:80:05:87:69:65:
d5:a0:82:cc:e2:16:7e:00:4f:10:d4:a4:52:cd:24:de:77:0f:
0f:be:ca:e1:1e:4c:28:ea:7c:a9:b2:ca:41:c5:cb:80:6f:9f:
7a:61:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:17 2025 by rpki-client