Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json)
Hash identifier: +hjAdJHCwokgHdPcVAlILmino7RLgDMYxNyW/uhZqLs=
Subject key identifier: 81:FC:B6:99:19:19:CE:AE:8A:7A:38:28:62:3A:F0:FA:FF:9B:3A:B4
Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF
Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF
Certificate serial: 08BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
Manifest number: 08B7
Signing time: Fri 28 Mar 2025 20:45:22 +0000
Manifest this update: Fri 28 Mar 2025 20:45:21 +0000
Manifest next update: Fri 04 Apr 2025 20:45:21 +0000
Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: AOmpZpPP2F1pROsrwhearhbS97KArG3BrWEiHD36CXc=)
2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: NtKeyULWQMsrxRlevOb1FWtm72F4mnEmkpXQ082SXfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236 (0x8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FECFD
Validity
Not Before: Mar 28 20:45:21 2025 GMT
Not After : Apr 4 20:45:21 2025 GMT
Subject: CN=67e70a61-22e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:38:03:5e:ef:3c:80:b3:b6:be:aa:a9:e6:
31:88:37:40:af:ff:10:29:f5:2f:dd:43:d4:8c:ee:
6d:60:6f:70:37:0f:3c:23:8d:a0:5e:9e:82:cf:c0:
ae:b4:68:94:a6:b0:c3:5d:35:3e:04:06:ae:12:ed:
02:6b:e4:91:5a:ae:1e:93:90:ff:fb:dc:dd:80:ad:
3c:24:8b:94:0e:a2:ed:4a:4d:65:57:0f:ac:97:1e:
10:36:c0:67:03:44:1c:96:a3:0f:74:8f:aa:fd:25:
bb:a4:93:23:0d:ed:a3:3c:62:26:62:e1:5b:43:a4:
c2:2f:d3:a3:04:cf:c3:a5:af:aa:a9:7d:61:45:fa:
a0:7b:e4:11:fb:04:07:6f:b0:2b:ca:cc:08:9d:d6:
91:cb:0b:e8:36:5d:25:c4:6c:46:45:b8:37:e1:ce:
e5:75:01:2b:6b:5b:5d:d7:a5:a8:ce:e8:6d:55:72:
49:03:1d:e5:ed:8a:81:27:f1:0d:90:34:b3:7f:aa:
74:25:29:4b:eb:93:dc:5d:08:e2:69:89:2f:95:1f:
b1:b8:3c:ef:88:c9:f4:0b:36:a6:95:09:50:71:2f:
df:de:d1:85:6d:19:6d:c5:94:f3:10:58:b9:89:d7:
9a:7c:2f:d9:cf:1a:ea:6f:70:13:d5:44:b1:ce:d4:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FC:B6:99:19:19:CE:AE:8A:7A:38:28:62:3A:F0:FA:FF:9B:3A:B4
X509v3 Authority Key Identifier:
keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:aa:11:5f:e2:aa:59:0e:90:3e:76:d1:ed:29:f5:0d:4a:64:
66:c6:50:e1:24:85:52:6f:5b:af:c8:9d:3d:d9:1f:5a:80:48:
64:c9:67:23:6a:2c:45:2c:2c:e2:44:77:d1:80:c4:3c:69:1f:
c2:30:ff:59:b1:66:2b:86:89:e9:85:2f:f2:7a:55:e7:b8:01:
b8:5b:fc:a3:8d:ea:7f:92:02:31:3a:24:9b:fb:98:94:98:2d:
ab:13:b0:50:a3:d4:90:00:0d:ef:e1:5a:78:2d:c9:09:72:17:
44:5f:da:c2:28:fb:78:a8:54:ad:c8:b4:6e:d7:e6:55:c2:9b:
e2:9d:c3:01:83:ee:7d:35:30:bf:ba:d0:73:88:6c:b0:7d:01:
b0:56:e3:e9:e5:15:45:b7:4b:47:b6:aa:98:41:50:76:26:4a:
37:47:3b:55:3e:1c:6b:79:96:3e:72:54:77:12:86:8c:52:5c:
4b:71:ca:5c:5e:7e:53:d6:fd:33:d5:86:0d:f8:db:4d:d0:1f:
17:b9:43:9e:80:07:ea:22:49:9d:9d:ee:61:d4:cc:19:8d:f0:
51:98:f4:4f:b2:6b:9a:7a:50:42:a0:af:f5:75:4c:1f:1d:57:
f6:7d:59:c3:07:73:b9:19:51:9e:f9:d9:fe:dc:f5:33:a9:2e:
db:df:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:38:58 2025 by rpki-client