Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json)
Hash identifier: Gu4Rh5FyaRtssCCy7ZqfCWVifyk2LqqbPPoeUewN4sw=
Subject key identifier: AB:56:51:73:E2:2D:D6:ED:9F:28:85:6E:D0:D3:01:CF:12:C5:14:F9
Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1
Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
Manifest number: B4
Signing time: Sat 29 Mar 2025 05:21:49 +0000
Manifest this update: Sat 29 Mar 2025 05:21:49 +0000
Manifest next update: Sat 05 Apr 2025 05:21:48 +0000
Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: K1dZC12RwSK36pgo0n7KAup1vr2FPCyUoYLqQ+MhMj0=)
2: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: 8W+xFxZgciOpBXooHDbzzZTklV4cRzIRaTe2EGYo2G4=)
3: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: SiXu7T2X5Ai2mQId/ZQnSVGAYrsHoSW8pzAzpHcsuBY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5849
Validity
Not Before: Mar 29 05:21:49 2025 GMT
Not After : Apr 5 05:21:48 2025 GMT
Subject: CN=67e7836d-d063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:bd:89:aa:38:4b:d0:a9:c6:d3:cd:03:e1:
cd:b5:49:b2:bc:a5:6b:86:8d:70:f8:6e:0b:54:2c:
72:6e:97:35:a4:a9:e9:e9:5a:33:d7:45:86:ce:a6:
58:83:aa:aa:49:de:dd:db:4e:4e:f7:48:63:c0:aa:
a7:97:a3:e4:c0:f2:05:21:49:f2:32:43:63:9e:55:
a3:6e:aa:d0:fd:ac:71:92:36:e3:15:4f:78:54:19:
d3:a4:fe:e7:dd:ca:7b:86:76:16:d4:38:59:77:9d:
ca:99:04:8a:bb:7e:cf:70:b4:6d:11:7c:4d:c8:bf:
bc:b2:d0:91:6d:e3:8d:6e:48:0e:b3:72:be:d0:21:
65:ee:36:34:f8:4f:e2:b6:ba:71:8e:d5:ae:28:eb:
b3:eb:1f:63:4f:5f:2c:9f:3d:fe:b9:03:ff:d7:69:
4c:a3:61:d9:63:f2:46:c0:ab:55:a6:f3:29:a3:15:
66:5b:43:37:04:e8:47:77:f9:13:65:d1:60:f5:04:
27:4a:6b:0a:82:90:08:18:de:45:dd:61:37:79:2b:
74:a4:b6:82:f7:8e:ce:63:3d:91:8e:2b:e5:b9:02:
f9:42:3d:b9:f8:cf:20:41:6e:38:72:71:72:dc:95:
0e:79:9d:2e:0c:2c:14:59:26:08:57:8f:8e:32:54:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:56:51:73:E2:2D:D6:ED:9F:28:85:6E:D0:D3:01:CF:12:C5:14:F9
X509v3 Authority Key Identifier:
keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8b:a1:70:96:ba:45:e4:41:21:a8:06:80:65:54:ae:1d:10:
b7:7b:95:0c:35:43:cb:5d:a7:6d:b8:8c:d1:17:8b:3e:e6:a5:
cd:b9:ab:8b:2a:3e:d0:b9:33:dc:54:3d:fb:a8:31:67:7c:d8:
f7:17:9e:c5:06:b6:cf:d3:fc:2b:c0:3b:48:d0:fc:a4:4a:89:
ac:f2:ab:77:22:ab:d4:b1:93:c7:92:bd:d3:14:7b:7e:76:a6:
b8:79:e7:30:eb:86:41:3b:4a:24:34:fa:5e:b1:47:fe:fc:3a:
c9:c6:aa:4c:2b:04:57:cb:74:63:b9:4f:0a:f8:3b:8c:c6:e8:
e0:c4:88:12:b5:12:52:a9:50:b9:b2:4a:9b:b0:52:c4:8b:0d:
3e:15:06:e8:ae:55:81:78:ab:f3:20:96:b9:98:a6:d1:d8:38:
15:b9:bd:7d:f2:98:dc:f3:a4:7a:f2:6e:24:57:2a:58:09:25:
59:d1:fa:54:ee:71:4f:a9:4e:57:4f:33:57:78:91:27:bc:b7:
82:ab:6b:60:19:d6:d2:e5:ed:fc:07:4f:28:e5:03:da:bc:52:
34:19:54:8b:7e:55:b7:ad:f3:ff:8e:80:48:78:ab:3a:30:ec:
94:d4:16:fa:2e:8f:a1:e1:0e:ce:2c:a7:d0:cc:9f:9a:b6:94:
7b:38:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:24 2025 by rpki-client