Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json)
Hash identifier: Bb2y3k3PA22ckLfiEEGFsZB4g9vOuavTNp5sxs1ydko=
Subject key identifier: 0D:91:3A:6B:1B:66:B1:16:A6:A1:22:E5:88:0D:1A:75:AB:57:A9:1B
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial: 07B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
Manifest number: 07A0
Signing time: Fri 28 Mar 2025 21:31:59 +0000
Manifest this update: Fri 28 Mar 2025 21:31:58 +0000
Manifest next update: Fri 04 Apr 2025 21:31:58 +0000
Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: DPpq3dHELOQz5LNL/Gw+BDIuO+DsOjkfPx80FP4Stug=)
2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: VwKaIz3U6aDghRoNhWv7S/G0XuOUWwKqRpkvmSggRD4=)
3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: KGmpX6V6GwHwuicQlQLq7ntPEMjkSVAxnjSlxc3wQ2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970 (0x7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE39F
Validity
Not Before: Mar 28 21:31:58 2025 GMT
Not After : Apr 4 21:31:58 2025 GMT
Subject: CN=67e7154e-909e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:6e:47:f3:5c:bf:00:49:cf:64:26:5e:c4:
b1:f3:e3:aa:1c:30:d2:3a:d2:76:24:7c:6a:17:f1:
3f:ab:60:84:91:92:1e:ed:11:66:b6:7e:a7:f5:ee:
ca:47:6d:08:78:7b:e3:c1:46:ee:f5:ea:86:a7:4b:
a5:fb:f7:e0:a7:d7:50:38:ee:55:dc:31:1c:85:00:
ed:53:07:c2:d0:b7:64:5b:d8:51:7b:0e:ca:a5:31:
68:a4:04:cd:34:95:22:2c:24:e4:dd:3e:0b:01:77:
45:ea:27:00:b2:58:81:15:aa:36:c4:c9:45:12:18:
7b:dc:ed:68:ea:cb:8c:48:e8:94:ce:b3:5f:8a:50:
fe:23:d1:ab:4b:72:ac:78:ad:1e:58:4f:1f:42:74:
f6:ee:99:e1:17:b0:8d:16:80:33:bd:ad:82:93:cc:
6c:29:15:25:35:ad:d9:19:c8:f6:80:4d:22:03:1b:
7d:aa:79:f4:71:e9:06:66:7b:b6:c5:a5:e6:a8:33:
46:df:74:bf:8c:2a:7c:61:9f:57:10:f8:2d:55:b1:
11:c8:fe:86:35:66:54:ca:2c:3f:e9:ac:a0:38:06:
10:a3:ea:5f:6e:31:34:68:63:0a:f6:07:a0:7d:17:
d7:8a:bd:74:5d:ab:7f:50:55:79:2b:8a:49:c1:c8:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:91:3A:6B:1B:66:B1:16:A6:A1:22:E5:88:0D:1A:75:AB:57:A9:1B
X509v3 Authority Key Identifier:
keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:56:0d:3b:58:3a:2d:fd:5b:aa:02:1b:97:d5:4f:72:93:e7:
6b:8a:17:fe:98:4b:7a:0c:29:cf:8b:18:1f:e3:24:5f:27:98:
6c:93:9c:1c:21:12:39:ea:2c:02:25:26:4e:bc:3a:7b:31:95:
46:ee:4d:5d:8f:54:c1:93:d5:f7:04:54:25:b6:77:11:1a:3c:
96:58:d4:73:0e:68:39:4a:a8:20:f4:c5:f4:f7:12:3e:84:d5:
97:e9:fc:8b:c9:29:68:bc:f8:32:8e:f0:c6:09:78:be:f7:31:
3c:f8:b3:b0:65:23:a8:57:0d:84:b2:2f:75:15:09:5d:7f:63:
be:80:a3:a7:e0:d6:e3:f5:25:57:0e:e6:1f:5e:0d:46:e2:23:
ef:d9:72:80:1d:dd:e4:13:20:6a:d4:a5:6a:dc:5a:73:04:4e:
3b:ee:97:92:c6:a6:2a:13:1b:6e:dc:7c:44:8b:37:09:0a:98:
e3:0d:2f:91:18:5e:32:35:47:59:28:07:b6:77:1c:61:0a:0a:
6c:fa:d1:01:02:ef:4c:d3:05:02:c7:d7:e8:6f:56:48:f3:63:
2f:79:f8:64:b9:8a:f2:58:1d:81:f5:29:72:0e:9e:df:11:b7:
f7:ea:0f:b2:2d:3e:bb:68:2c:1c:c9:10:9a:10:80:e4:e4:be:
4d:77:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:45:30 2025 by rpki-client