Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json)
Hash identifier: i7gf2OxUV4j4r0EKBNumZzRLZwPP06DkK0CCWoZo5Ws=
Subject key identifier: 01:28:B0:74:62:B3:CD:BD:00:09:22:18:57:87:73:85:6A:19:E9:28
Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
Manifest number: C7
Signing time: Sat 29 Mar 2025 05:35:09 +0000
Manifest this update: Sat 29 Mar 2025 05:35:08 +0000
Manifest next update: Sat 05 Apr 2025 05:35:08 +0000
Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: j8Q3rrXInjfxjyRvof1XJJkvKSuoJhTBx9QFNnn6qFQ=)
2: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=)
3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=)
4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4FB0
Validity
Not Before: Mar 29 05:35:08 2025 GMT
Not After : Apr 5 05:35:08 2025 GMT
Subject: CN=67e7868c-08b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:60:a9:c2:a8:a1:7a:80:ea:da:f7:a2:f3:
f3:a2:8d:c5:8d:7c:93:59:a7:ce:e2:4b:ee:5e:af:
3b:34:bf:30:e3:33:8b:10:8b:ce:3f:8d:d3:d7:f5:
28:88:b0:87:7a:2a:cc:e7:49:72:3b:2a:69:e2:34:
bc:07:2c:35:01:48:43:15:5a:18:1b:83:b1:c7:71:
d9:db:a1:2a:14:80:30:a3:49:33:22:ee:9f:26:18:
f8:7f:26:0c:e9:f2:bc:db:40:15:0c:a1:fe:7e:7f:
5b:5b:b8:c7:40:2d:42:56:3d:f7:f5:ce:ca:e1:83:
dd:86:f3:e4:b3:af:67:e6:ea:24:bd:0a:75:38:c2:
d6:95:55:eb:6f:f7:9c:74:46:36:8b:58:6d:de:84:
50:89:d4:50:49:b7:aa:09:95:80:ef:39:af:c9:ba:
08:8c:03:4e:9e:f0:a3:d5:c5:4e:74:55:35:dd:56:
2f:68:bf:89:9d:57:4c:ab:99:48:70:0e:b9:1d:83:
36:25:6d:ca:e2:a7:57:42:e1:15:8b:99:0c:91:ba:
71:a6:0b:e1:06:b4:dc:06:dd:78:64:a1:e0:11:4b:
f0:50:0e:b2:a3:5b:c8:d7:34:e8:9f:d0:7e:10:db:
c4:eb:2a:58:3b:d9:b9:60:8e:0f:3d:5d:f9:92:fa:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:28:B0:74:62:B3:CD:BD:00:09:22:18:57:87:73:85:6A:19:E9:28
X509v3 Authority Key Identifier:
keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9b:64:f3:95:cd:4d:1a:9c:61:ea:42:ae:d6:bc:04:27:a9:
43:06:f4:c1:14:c2:3c:28:a2:01:fc:16:7b:b0:ae:b0:72:e7:
8d:13:7c:e1:c5:54:af:e5:ca:7b:ab:08:cd:b3:91:b4:7f:14:
bd:dd:8b:87:b6:ae:a7:d3:a7:65:e0:02:a7:53:d8:a3:d6:76:
ba:a2:78:7a:5a:80:35:1c:50:ab:99:7d:b9:6e:03:03:22:fa:
87:c3:b8:de:38:08:10:bf:2c:b2:23:b1:4c:2c:cb:4d:d9:3d:
d8:87:54:1e:ad:0f:eb:ea:d0:1f:c3:75:f3:68:62:df:33:06:
ef:3e:b6:44:c5:5d:6c:3e:08:30:60:a0:b5:4a:a1:e6:16:f1:
e7:1c:3c:36:bd:ba:2a:80:db:66:d1:5d:3d:eb:10:eb:94:eb:
4e:06:c0:de:0f:23:19:38:f2:a5:9c:7d:92:b0:48:3c:f3:ca:
7e:b9:81:c5:71:67:47:71:e6:a6:80:a8:44:15:b0:0e:a0:13:
92:41:bf:80:a7:d5:bb:e2:7a:91:7e:66:5c:14:2b:1d:f3:e3:
7e:30:19:71:25:9a:d9:e1:d8:c2:17:29:38:3f:3a:11:3e:8f:
5f:de:5f:d7:37:5c:0f:7c:7b:19:a8:be:98:35:2c:60:d5:af:
76:ce:5c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:04 2025 by rpki-client