Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json)
Hash identifier: Am6fQJniAyKTbUbSIX685WeItvKa6qL8EizK2FGyPzw=
Subject key identifier: CC:02:6A:7B:CF:87:14:6E:0B:9B:FE:14:24:7F:6E:39:F2:C6:3B:2A
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial: 124B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
Manifest number: 1234
Signing time: Fri 31 Jan 2025 17:07:50 +0000
Manifest this update: Fri 31 Jan 2025 17:07:50 +0000
Manifest next update: Fri 07 Feb 2025 17:07:50 +0000
Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: c5LhiqHodXrRtdJt9JsgyUaz1QCYy6G7BxAf/IYI6uM=)
2: D4F8B4B407D511EF86AD0733C4F9AE02.roa (hash: NccEMCqAY6Q4s87TmJw+IxbzpvybsP6p9O44DoX+2ok=)
3: D23C828C07D511EF86AD0733C4F9AE02.roa (hash: TIcF9eCaMV6FnGaU4Vlj0gKLnYzPZQ9nJWLLlWU8tG0=)
4: D30F4BB807D511EF86AD0733C4F9AE02.roa (hash: hyPyTgVROwH264cYH1g18w3q6Dp/RsLhE4jRRmTdm6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4683 (0x124b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Validity
Not Before: Jan 31 17:07:50 2025 GMT
Not After : Feb 7 17:07:50 2025 GMT
Subject: CN=679d0366-64e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:3f:84:e8:72:ad:3c:89:ce:33:56:8e:ab:
d8:a7:62:60:4d:41:9c:29:ef:ea:1b:1f:c0:04:31:
06:8a:62:5a:a9:98:d6:98:0a:10:61:a0:f7:15:52:
2d:0f:aa:46:b7:1e:12:ca:04:b8:26:5a:38:21:02:
91:9a:bb:37:1d:44:0a:db:d7:0d:a0:69:65:43:73:
14:a3:33:24:07:d5:22:7b:1b:7b:db:90:ae:39:81:
ba:ca:79:b4:6b:5e:f0:c6:f8:9d:f8:b2:a5:b8:67:
2e:75:ec:38:0c:c5:68:ad:c9:90:cf:b0:f2:3e:a5:
29:b3:b4:c1:8f:1f:0b:2c:c3:00:46:54:c9:cf:43:
fb:89:cd:a7:49:8b:38:f7:de:fe:ea:be:35:7f:d6:
1b:a4:34:73:08:91:d5:df:d4:d7:d2:74:3d:b5:f5:
44:28:22:91:bc:92:f0:36:fe:16:f4:6d:13:e4:78:
19:e0:60:9c:fc:3c:0e:37:3d:5f:57:f4:4b:98:04:
74:cb:38:92:37:b1:4a:4a:6b:93:d2:a9:6b:b2:0d:
e3:2e:e7:c3:f5:9b:58:fd:02:20:37:f4:51:22:29:
93:b2:49:d9:b4:9d:a8:c7:db:2b:28:3a:ea:dd:5c:
a7:af:06:41:b8:bd:00:f9:ea:dd:73:ec:d5:c8:a5:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:02:6A:7B:CF:87:14:6E:0B:9B:FE:14:24:7F:6E:39:F2:C6:3B:2A
X509v3 Authority Key Identifier:
keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a4:32:0f:b3:b5:4b:59:56:77:8b:94:b2:1d:21:21:aa:db:
cc:c3:b4:e4:89:2e:30:f6:ca:9f:54:42:5f:67:c1:6a:85:57:
4f:0d:36:78:c4:7b:a6:6e:ee:1e:28:d0:17:67:a5:6a:42:77:
bc:73:55:77:bc:d7:82:3f:c1:51:23:0e:84:d7:e4:03:94:68:
db:a6:3b:29:7d:9a:f2:64:e0:2b:13:41:db:d2:70:19:56:12:
9c:7a:da:60:a7:4a:1d:9d:85:a1:2f:8b:e6:55:bf:4c:0d:d8:
ad:59:40:b8:da:57:46:84:84:8b:de:76:f0:6f:9e:af:9b:41:
94:62:1b:be:1c:4c:73:90:81:72:4e:dc:09:83:48:b5:32:8c:
b8:30:ff:30:22:ed:8c:0b:d2:a3:5e:ef:49:b7:e3:b0:5c:a1:
bb:ae:2d:24:04:0b:15:bf:b7:95:0d:ed:36:e1:ac:8b:70:49:
24:b6:fb:16:c5:e0:c0:78:0a:0e:32:64:bd:04:4f:35:d0:fc:
c5:8e:02:9d:93:0f:37:d1:6d:df:c5:08:2f:37:dc:91:5a:fe:
69:82:2c:95:1b:12:2d:7c:3b:14:ce:ad:53:a5:51:64:8a:b6:
1a:d0:20:9c:02:36:e6:e6:4a:16:0a:8c:e1:b9:f4:5d:ad:32:
c0:60:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:08:20 2025 by rpki-client