Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft
File: myAvlYUe_EtkzjtAnGxgSzW0mNg.mft (raw, json)
Hash identifier: tCVYAZIhlsOQmadfJrpvIeQIU/bEyD09CLvCPJOTtWs=
Subject key identifier: 5A:74:D5:27:DC:A7:79:8C:55:7B:FB:B4:E0:33:10:9A:AA:E5:57:0B
Authority key identifier: 9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8
Certificate issuer: /CN=A91F5CE4/serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8
Certificate serial: 09B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft
Manifest number: 09AA
Signing time: Wed 14 May 2025 20:11:14 +0000
Manifest this update: Wed 14 May 2025 20:11:13 +0000
Manifest next update: Wed 21 May 2025 20:11:13 +0000
Files and hashes: 1: myAvlYUe_EtkzjtAnGxgSzW0mNg.crl (hash: b6KSY9NiI3AI17cSlENgPIJxIbIgPhX7TJtlhisv+wI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5CE4, serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8
Validity
Not Before: May 14 20:11:13 2025 GMT
Not After : May 21 20:11:13 2025 GMT
Subject: CN=6824f8e1-e018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:8a:7d:58:bd:9b:9e:4e:52:ea:e0:db:03:
53:b8:b5:1a:6d:51:85:1a:f2:de:88:f7:34:18:b9:
01:9f:c7:50:63:99:da:e2:2c:e7:4b:42:c5:1e:d2:
78:ee:44:94:55:50:74:25:c1:a7:0b:79:4a:02:dc:
b9:83:96:60:da:a9:73:b2:30:17:74:e8:7c:69:17:
da:24:74:bf:27:cb:53:3a:db:3e:e0:f4:0b:e0:ba:
2a:ea:b4:6f:f7:9c:c7:6c:cc:c8:0b:97:b0:13:66:
81:2e:2f:a5:f7:79:dc:22:8b:d4:16:5d:46:1c:b1:
72:dd:c2:66:bf:c5:71:bb:aa:97:bf:db:51:bd:8e:
2f:b1:00:0c:fa:6a:2e:eb:70:e6:d0:cb:da:53:c4:
f1:fb:d6:3c:ba:cf:b1:25:94:96:f1:09:52:74:1a:
ee:39:8f:01:2d:30:e1:6e:20:69:7b:38:1e:85:09:
29:04:bf:d0:38:a7:0c:cf:97:b4:c1:47:85:ee:9c:
bf:45:b8:4e:a8:2e:cb:d7:b8:90:1a:84:05:1f:79:
48:6f:53:c9:cd:5d:94:ce:c2:76:6a:41:f1:8f:10:
89:51:3a:68:13:3d:54:8a:48:fd:f0:68:a8:78:71:
1d:b0:4a:cb:10:99:1b:74:53:0d:b2:3a:4d:a1:06:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:74:D5:27:DC:A7:79:8C:55:7B:FB:B4:E0:33:10:9A:AA:E5:57:0B
X509v3 Authority Key Identifier:
keyid:9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b7:38:76:3a:65:e7:52:3b:3d:43:b6:bb:0d:16:b0:39:32:
50:89:42:66:9f:e7:dd:27:9f:39:24:3c:85:20:ab:d4:66:97:
eb:a1:9d:c9:7d:90:19:ea:61:fb:36:60:0d:5f:f6:03:bd:14:
01:51:d4:68:f4:11:3f:3d:94:d9:ff:f3:eb:b9:7f:98:8d:39:
25:a3:5e:0c:af:0b:4a:b8:2a:ae:94:5f:5b:a5:20:fc:e1:a7:
3e:c6:6d:f4:db:34:12:d1:29:32:d1:51:40:eb:99:f4:59:d2:
e5:bf:00:f0:5e:9e:31:d1:62:11:65:ec:43:2d:f4:4a:48:61:
96:df:5a:f6:ed:70:01:33:98:83:72:eb:13:6b:17:16:64:8d:
d4:45:e5:77:62:c9:19:94:ca:f6:50:a8:ff:12:9a:54:b6:56:
51:60:a2:d8:03:58:bd:99:08:85:1b:ac:cf:8f:1e:e0:48:30:
c1:f4:06:ad:ea:36:46:bc:4b:30:30:f0:a6:74:18:5b:25:05:
01:ff:08:fd:8b:35:45:ac:0b:63:89:ce:f5:e1:be:12:e6:fc:
f7:66:5b:9a:93:95:ff:11:75:38:97:ba:65:e0:5b:a6:f1:86:
1b:3c:30:7d:6e:6b:f7:58:18:07:b5:f9:00:32:b9:99:b4:70:
bc:9a:d7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:08:32 2025 by rpki-client