Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json)
Hash identifier: iL7bJvdhu9lt5R7Esv/29T4CNfYgU99HuOD5WnAp7XM=
Subject key identifier: 1B:4D:7F:28:91:1A:01:A4:7B:AC:96:A1:5D:5B:D3:52:21:BE:7F:D3
Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A
Certificate serial: 0BA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
Manifest number: 0B90
Signing time: Fri 28 Mar 2025 19:11:35 +0000
Manifest this update: Fri 28 Mar 2025 19:11:35 +0000
Manifest next update: Fri 04 Apr 2025 19:11:35 +0000
Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: POEWKHKdxdieRKbdTa36Nm3pPOtkjmMtrKkXrHZ4Rng=)
2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: Myi9k4IrBdVLRWD9OtQqLIwtmIphhX+YDXYJBcNy/bw=)
3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: MyUFtJY4lLof0Zwtdhx7AIg2aYopA1OEBl/K6VizYaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2976 (0xba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91734C9
Validity
Not Before: Mar 28 19:11:35 2025 GMT
Not After : Apr 4 19:11:35 2025 GMT
Subject: CN=67e6f467-2199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:3d:e8:93:a9:e5:21:91:28:c2:db:30:94:
a2:07:65:fd:f2:53:a2:46:66:92:98:c7:46:5d:6b:
72:29:fc:29:47:8a:6e:c4:75:87:5a:9b:e3:c3:90:
82:f8:34:32:b1:ae:89:ff:aa:fc:e4:a8:29:22:4b:
ed:3b:e9:bb:db:c2:d0:f7:fb:1d:15:93:49:dd:0b:
5a:00:ee:03:bd:fd:73:ed:d5:26:8c:9c:e2:50:03:
ab:2f:05:ee:51:bf:e9:a9:c1:83:02:fd:54:70:c1:
3d:03:cc:db:4c:9a:7b:b9:a3:00:6e:77:7a:66:f8:
88:ad:31:dd:f8:e6:37:78:a7:2e:f8:3d:7b:de:91:
a4:bb:0a:70:55:7a:88:28:59:63:0e:7b:c3:eb:42:
8d:f3:27:10:04:bc:00:9b:2a:db:54:4d:49:38:b1:
e5:09:f6:30:b6:1c:86:fa:36:01:8a:ba:dc:bb:6f:
8c:ce:5f:61:8d:a9:ff:da:66:fc:66:c1:45:45:04:
de:e2:40:37:ba:ae:f7:c1:48:56:9b:bc:46:d2:b8:
4b:36:d0:2f:49:35:ee:a1:d4:60:e5:79:44:30:85:
23:b6:2c:0f:50:9e:78:d4:ce:67:1f:10:b4:e9:98:
b9:50:d4:f7:d3:b9:47:c4:5b:b0:36:c2:40:f6:03:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:7F:28:91:1A:01:A4:7B:AC:96:A1:5D:5B:D3:52:21:BE:7F:D3
X509v3 Authority Key Identifier:
keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:44:8a:69:74:62:96:37:16:e1:23:fd:d8:33:d2:97:bc:28:
81:b0:5c:aa:5d:ee:e1:55:c9:c6:b3:2d:44:dd:37:66:1b:c3:
95:ee:a7:74:6e:48:e1:85:c1:6b:1a:2c:39:c9:de:85:f4:36:
36:f3:b6:0a:4b:27:c4:59:19:f5:e5:d9:dd:3c:93:65:d7:93:
a8:f9:43:0c:f0:c9:38:7d:24:1d:3d:30:a4:c5:32:ac:92:c1:
96:b6:47:a3:07:9d:26:55:dc:5a:66:f5:5d:e9:5c:44:fe:a8:
ae:00:e1:14:27:19:3f:07:bd:6e:17:53:6a:b6:4e:04:b9:35:
3d:32:d9:57:20:fe:ab:4d:96:23:da:cc:c0:ad:3a:b9:47:a8:
f9:e9:2d:39:49:fb:fb:22:d9:de:d0:e4:0b:2d:45:94:09:b8:
b2:b9:e2:26:0d:eb:98:38:79:75:44:60:ab:fe:26:b4:7e:7d:
36:2e:31:f7:6c:87:a4:f9:d7:4e:46:65:fb:f4:db:c8:9f:9b:
e3:c1:8d:b0:2f:f2:29:b0:eb:c5:8d:d8:0b:32:72:b5:c3:10:
cc:c7:0c:d4:2f:76:81:a3:17:49:be:b4:05:ba:2b:5b:0a:ed:
41:1f:9c:29:91:c0:4d:6e:a2:6e:26:68:70:91:05:11:50:22:
28:e0:d3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:28 2025 by rpki-client