Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft
File: 3tdhLc0WClbGF4QCXEspBELPNb4.mft (raw, json)
Hash identifier: Y+0nPSk4NuGxk0hQv1oLLRwK+qVn1LtXl7P8igxg/AQ=
Subject key identifier: E7:08:DC:D5:FC:57:C0:42:C2:63:66:81:FE:EE:99:88:3A:90:73:5D
Authority key identifier: DE:D7:61:2D:CD:16:0A:56:C6:17:84:02:5C:4B:29:04:42:CF:35:BE
Certificate issuer: /CN=A91EC8F7/serialNumber=DED7612DCD160A56C61784025C4B290442CF35BE
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft
Manifest number: FA
Signing time: Mon 21 Apr 2025 23:30:06 +0000
Manifest this update: Mon 21 Apr 2025 23:30:06 +0000
Manifest next update: Mon 28 Apr 2025 23:30:06 +0000
Files and hashes: 1: 3tdhLc0WClbGF4QCXEspBELPNb4.crl (hash: Z/m0sk5OyexPByDzPOBamtkYoatF4m73NMmMPAYVgAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC8F7, serialNumber=DED7612DCD160A56C61784025C4B290442CF35BE
Validity
Not Before: Apr 21 23:30:06 2025 GMT
Not After : Apr 28 23:30:06 2025 GMT
Subject: CN=6806d4fe-c7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:f8:66:f1:2a:0d:90:2c:22:85:a0:0f:2f:
04:e8:8d:10:de:36:d0:b2:dd:cf:9d:4a:cc:f2:fd:
30:0f:cf:25:f9:8c:a4:ad:93:5d:d3:80:d7:77:8c:
e3:e4:85:9f:0c:34:9d:e9:9b:aa:a5:c1:6a:dc:cb:
f6:3c:bd:30:e5:db:d0:e3:be:3e:c3:b5:bf:c1:63:
82:f3:fb:08:da:f2:88:ff:71:3e:cf:f0:b9:e4:51:
c9:26:01:59:39:7d:4d:4f:a4:21:52:ec:d3:5e:64:
b6:0c:fd:b6:e2:c1:a1:7f:5a:21:80:ec:79:8a:c6:
01:b1:a2:7b:28:9b:b4:e7:aa:d4:18:3b:05:39:b8:
97:35:ee:7d:47:03:d4:f0:d0:37:fd:af:f9:fe:bf:
67:8f:ab:b0:05:6f:9c:11:12:8b:78:e0:0b:82:b6:
20:01:41:e0:23:f1:7e:85:2e:78:b0:2f:da:45:46:
cd:06:8d:c2:9a:ab:69:77:32:9c:54:74:af:d0:53:
ea:df:56:97:37:72:38:a8:ed:02:65:1b:6d:c6:ed:
03:b4:8f:10:e4:46:32:4e:5c:0b:51:11:cf:eb:71:
35:a4:8c:df:8d:d3:ae:16:f1:52:f0:18:c2:3a:ea:
06:be:3d:39:b8:1b:f6:c8:bb:26:ab:03:6d:6a:fb:
cb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:08:DC:D5:FC:57:C0:42:C2:63:66:81:FE:EE:99:88:3A:90:73:5D
X509v3 Authority Key Identifier:
keyid:DE:D7:61:2D:CD:16:0A:56:C6:17:84:02:5C:4B:29:04:42:CF:35:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3tdhLc0WClbGF4QCXEspBELPNb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/7786E57EB2A511EE90DEA220C4F9AE02/3tdhLc0WClbGF4QCXEspBELPNb4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b2:12:c2:ad:3f:60:13:38:a8:d6:eb:07:bb:80:c3:43:db:
1a:54:ac:c9:a9:5c:55:8f:5b:e9:bc:32:3b:e8:5d:98:49:38:
6e:0f:56:68:96:c3:c3:c1:4f:12:b8:3a:ff:d6:53:0b:db:15:
46:c8:f6:46:c2:f6:ba:7d:a2:0b:98:f3:7b:6a:fa:f4:1f:b1:
6c:5b:af:95:b6:48:7f:81:6a:f2:00:7f:d7:bf:02:d8:af:8c:
7e:ce:58:08:75:f8:6b:3b:da:64:4a:f5:ff:2c:e3:bb:87:1b:
ea:47:0d:07:c9:ff:94:14:8f:03:d6:18:6a:9c:a9:36:1d:e6:
57:84:c1:6f:ed:14:85:0a:8f:ce:c5:8c:4c:2b:b9:55:d9:06:
61:f4:f5:3d:8c:46:e3:c6:df:af:e3:58:83:3b:b9:6f:05:ea:
25:fe:df:6c:96:89:00:59:4a:56:5d:b3:e8:4c:a3:b9:f0:af:
2d:b6:56:37:c4:d8:12:df:53:0f:a8:48:0a:73:fe:f6:02:d1:
07:58:22:0e:33:27:66:41:47:a1:f1:a8:99:45:8b:89:aa:6c:
05:52:ec:17:09:43:56:c3:a1:b9:e8:7e:59:63:6e:86:b0:45:
33:eb:1e:7e:7d:0e:b7:1d:f5:27:f8:17:f5:c6:8c:de:36:cc:
12:ec:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:32:36 2025 by rpki-client