Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json)
Hash identifier: z826rT2NtaUWlRTx4C0xEQA8Zxrlj6Rgv8xSLVLn9T0=
Subject key identifier: 90:FE:CF:1B:F3:CF:CE:01:C7:74:EA:C0:E4:B2:4F:6F:37:E5:39:E7
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial: 0DAC
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
Manifest number: 0D98
Signing time: Fri 28 Mar 2025 14:42:25 +0000
Manifest this update: Fri 28 Mar 2025 14:42:25 +0000
Manifest next update: Fri 04 Apr 2025 14:42:25 +0000
Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: jkq7Oa+EiUySIxVjGUiyoIzZDlHErXo3eAsnoP+dz9A=)
2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3500 (0xdac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09
Validity
Not Before: Mar 28 14:42:25 2025 GMT
Not After : Apr 4 14:42:25 2025 GMT
Subject: CN=67e6b551-f163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:6f:2c:91:7f:09:e3:60:12:4b:30:17:11:
ad:90:7e:55:64:8b:8d:f3:0b:7c:86:a1:46:71:de:
73:95:5d:8b:69:c0:e4:c7:aa:03:13:0d:62:3f:26:
ad:00:eb:70:9a:48:7f:11:dd:e1:67:d7:d4:5a:9f:
a3:8f:02:c4:bd:f2:50:9d:e7:5d:b1:06:4a:0c:34:
d3:05:02:3e:80:58:c2:f9:bf:02:6c:36:06:c6:15:
69:ac:d8:0f:c5:86:82:4c:88:52:a1:4a:4d:4c:40:
25:1c:2f:aa:71:84:88:c4:8f:f7:f4:d7:1b:b0:e8:
8d:7b:4a:58:5f:94:c4:ee:e8:00:dc:4a:81:03:af:
92:bb:0a:23:9f:9b:73:93:7c:d6:35:86:9a:9f:59:
3c:93:49:ed:e5:68:66:b2:36:d9:b1:3a:fe:f9:a5:
d8:03:33:79:99:d6:e2:3e:f1:c9:05:b3:16:e3:f4:
60:c2:45:b9:4a:ee:5b:6c:47:40:73:dd:23:3c:ad:
9f:36:33:65:2c:ee:9c:b2:53:3d:a9:95:39:cd:62:
ac:fe:5b:53:fd:2b:22:70:93:7d:cf:fc:e2:a8:26:
0b:a5:e2:4a:c9:d9:41:08:fb:17:64:bb:56:1e:aa:
38:47:5f:4c:d3:34:ff:df:a8:58:ff:9d:50:1f:e8:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:CF:1B:F3:CF:CE:01:C7:74:EA:C0:E4:B2:4F:6F:37:E5:39:E7
X509v3 Authority Key Identifier:
keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:cf:7f:c5:4d:7e:f0:20:fa:73:ac:40:9a:b6:68:5c:8a:51:
28:b2:4b:10:c4:37:e0:1b:0c:56:2b:29:02:c4:1f:9d:6f:61:
b3:ec:92:4e:03:4e:5e:d4:6c:29:33:d2:77:7b:12:05:69:f6:
ba:f7:90:a3:4f:02:34:91:e4:13:95:31:d4:4c:31:c1:41:25:
98:cc:35:e7:fc:dd:7a:8c:03:da:5c:5b:97:8b:60:0c:e8:19:
ca:15:5e:2c:fd:3d:d5:42:55:15:b6:10:b4:0c:73:61:29:fd:
a2:e7:ca:62:12:fe:b6:10:e2:f0:77:9e:b6:92:42:f4:b9:aa:
ba:60:aa:32:9e:5d:d0:9a:7f:d0:d9:1b:f8:ca:34:1b:e2:30:
d1:f7:ac:5e:d5:8b:37:be:d3:3a:50:d5:59:ac:b7:74:ef:e1:
c0:55:26:03:a0:aa:55:c2:0f:3f:c1:ea:5d:38:16:d4:0b:9f:
5f:42:17:18:7d:63:fb:b1:55:68:cd:05:45:9c:95:f4:f4:db:
85:4b:6e:75:e6:ce:bd:b1:14:3d:76:fb:53:2b:4d:32:8f:4c:
ae:b7:91:80:d0:74:62:38:a5:7d:ca:41:a2:9e:5a:70:79:21:
4d:ba:ce:5b:89:94:6b:10:6f:eb:c7:51:65:bf:80:5f:9e:47:
74:47:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:48:46 2025 by rpki-client