Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json)
Hash identifier: LVJWsMWVtZDHjxGUGRGehOLzl2Qz4eFjl48ZLSJPtv4=
Subject key identifier: CF:98:61:C2:4E:D8:E0:CC:0C:2D:A4:C9:3F:10:77:F3:6B:B5:06:15
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial: 067D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
Manifest number: 0660
Signing time: Fri 28 Mar 2025 22:45:52 +0000
Manifest this update: Fri 28 Mar 2025 22:45:52 +0000
Manifest next update: Fri 04 Apr 2025 22:45:52 +0000
Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: 6xpDOKd2I2JM6rLSid18QFM5T2HvqmVM200FAc9auT0=)
2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: RSMVC0D0tBk2Fp59m5jA59HhRZpxrqk4YRYpw+Pzr0g=)
3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: aE8ILqsqa75udSkv7yAA18S8PO5yG42/7QwpuX3oUy8=)
4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: /9xJi3PLMQkKlzkomr7AvtnsuMXJh+Vt8LpT6XO4pUs=)
5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: ooqccoiogCkkJFxNvgTBDRvRTl072blE1cY1UXNoB0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1661 (0x67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4
Validity
Not Before: Mar 28 22:45:52 2025 GMT
Not After : Apr 4 22:45:52 2025 GMT
Subject: CN=67e726a0-c8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:85:a9:6e:a8:67:3f:d1:07:0c:dc:40:59:
36:be:95:03:f3:6f:b7:69:04:68:0a:28:71:71:a3:
c4:a5:e6:f4:17:6c:f2:d1:06:a5:90:f1:c0:d1:56:
aa:eb:86:28:6f:34:82:fd:11:1e:29:1a:cc:8a:e8:
a6:68:11:9e:1b:6e:06:da:3d:75:4d:ab:46:8e:47:
09:85:ca:37:40:80:68:f0:75:3d:73:dc:aa:b0:da:
11:e6:d2:9f:c5:53:c5:7f:70:98:78:5f:f7:67:ad:
25:24:ac:7d:78:0d:fd:04:1d:5c:42:ca:a4:9a:36:
90:27:70:2d:04:8c:80:a9:51:44:f8:5a:08:61:a6:
57:8f:22:c9:74:ac:e7:e6:77:a7:a3:0c:a6:e2:92:
82:f5:95:8a:31:d4:31:4f:08:6c:0f:44:d5:e9:b0:
73:e7:9f:93:e4:cf:e5:3f:bc:87:1b:2e:58:db:31:
71:4a:ba:b0:18:2f:c8:d4:d5:eb:72:3f:9c:ff:60:
62:76:b4:17:b2:44:5d:b8:38:b0:ab:41:dc:b0:15:
0b:60:d7:77:e4:7f:66:6a:52:4e:53:2b:dc:cd:14:
a7:70:49:9c:f0:8d:7d:f0:b6:cc:39:a6:0c:db:d6:
66:9a:cc:c7:18:88:b9:c0:fb:a1:0e:5d:8f:1c:5f:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:98:61:C2:4E:D8:E0:CC:0C:2D:A4:C9:3F:10:77:F3:6B:B5:06:15
X509v3 Authority Key Identifier:
keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:42:0f:76:65:3d:81:9c:54:80:2b:ed:db:77:ae:44:a9:62:
9c:d0:a9:ed:75:89:c6:d0:77:f8:4b:05:9a:6c:9c:74:8f:f0:
27:8a:27:fe:ad:cf:86:4c:54:f8:c0:89:ff:35:36:e8:dd:a4:
b4:50:7d:85:88:8f:d3:56:f3:a8:d0:f1:20:ee:14:50:4b:ea:
27:e8:b3:87:2a:da:dc:54:13:c7:75:29:a3:a2:d2:d8:e9:8e:
9c:c8:85:20:34:54:b7:a8:c9:dd:44:a7:e1:32:e9:9d:4b:7e:
5f:6f:2e:18:18:00:93:98:b8:bd:1a:28:ac:04:02:ab:ef:9d:
10:be:50:42:83:6b:e9:9e:87:a4:c5:b8:64:19:ff:06:e8:ab:
07:92:84:a9:44:14:f7:58:54:ac:34:7a:0c:17:04:02:2b:4c:
96:29:f1:9e:b7:03:87:8d:3a:78:ab:d0:20:b6:94:2c:78:72:
16:e8:76:19:45:43:e5:14:b0:5e:34:b7:64:ba:9a:91:e5:a2:
d7:89:3d:e7:df:4e:b6:e6:68:0a:1d:85:93:17:72:97:81:43:
b0:c6:4c:73:f7:91:50:4f:85:b8:22:07:3a:cb:cd:3b:17:a9:
d5:85:90:e8:d0:87:dc:39:62:68:90:c7:e0:e1:70:f8:a1:74:
0c:fc:99:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:50:01 2025 by rpki-client