Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json)
Hash identifier: RUWtIYA6RL1GQh2ekR9F51iGJdtvZxXI1MCs1A3PQeo=
Subject key identifier: 05:F2:ED:76:DE:62:FF:9C:2A:CF:5A:F0:60:C2:3B:F8:19:D7:1D:95
Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Certificate serial: 0CCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
Manifest number: 0CBE
Signing time: Fri 31 Jan 2025 18:06:26 +0000
Manifest this update: Fri 31 Jan 2025 18:06:25 +0000
Manifest next update: Fri 07 Feb 2025 18:06:25 +0000
Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: paZUqGYnUkEnLZqXu8Ue627Y3OTe6F33PleMJYyBAJg=)
2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: JfyJc8hrLZucoRHk+LPv3mbsPGDOx4vwQyrUYoddmy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Validity
Not Before: Jan 31 18:06:25 2025 GMT
Not After : Feb 7 18:06:25 2025 GMT
Subject: CN=679d1122-a3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:02:9c:ad:cf:ba:e6:10:75:3c:60:0b:fd:
8d:3b:fd:52:57:bc:ec:ba:03:df:da:d4:86:6f:c3:
ca:f1:63:d4:32:55:fd:ed:33:ff:e4:8d:cc:c6:b8:
5b:b3:6c:4a:d9:06:11:63:68:23:c7:0a:dc:48:f0:
c1:ca:04:b8:40:c0:1d:05:8f:49:a8:2e:18:1a:6c:
14:92:3e:63:21:41:8b:4b:03:71:1e:48:e7:e8:37:
47:6a:e3:69:92:92:2e:e1:8d:8f:12:9a:e9:12:e6:
6d:f7:9a:e7:fa:0e:6c:d9:6b:14:ce:9c:8d:8c:a1:
72:bf:e6:83:f5:65:cf:96:93:8d:23:6b:5e:e0:cc:
53:94:e3:20:6c:37:a3:a5:85:13:7d:cf:76:ca:2f:
dc:e5:94:00:69:13:4a:09:2d:74:ba:84:60:03:f1:
8f:cb:0f:d3:62:35:aa:a6:5e:22:77:ce:e2:64:ca:
c4:7b:3a:01:55:d6:a6:2c:ef:83:5c:00:a4:13:54:
ac:c7:ec:b5:b9:c9:12:25:86:d1:bb:06:a8:9e:bc:
7a:db:5e:6f:3d:c9:61:67:ea:c4:a3:a9:4e:67:bf:
aa:5a:14:0d:09:ed:83:bf:57:85:1d:2a:b2:1b:51:
46:d2:b1:f1:e8:3d:59:61:80:55:8d:a8:ff:fb:27:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F2:ED:76:DE:62:FF:9C:2A:CF:5A:F0:60:C2:3B:F8:19:D7:1D:95
X509v3 Authority Key Identifier:
keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:75:9b:4e:91:72:e3:5b:f0:d3:fb:e7:8d:49:0d:4a:ac:77:
1d:1f:26:69:12:35:05:c2:63:9b:55:c2:8f:93:10:cc:71:65:
1e:1d:98:21:7b:53:ce:91:e9:a4:70:9d:ea:fa:ef:78:0f:f1:
0e:32:bf:bb:b8:c9:da:ff:f8:ec:2f:1b:a9:08:ef:64:a0:bf:
cf:d9:0d:d7:31:4c:ec:aa:d2:2c:28:03:24:39:ad:7b:e6:3d:
96:22:92:8d:59:d4:7c:b5:1d:e1:83:34:03:f0:e9:6f:37:cc:
e4:4e:59:26:b5:0c:d8:a7:1d:5a:3f:74:8b:60:09:df:a3:c2:
ad:40:4d:43:1e:dc:4e:ed:e0:ee:55:f6:40:e6:f5:58:42:11:
72:97:4b:eb:f8:2a:6e:9c:12:34:ec:75:2f:10:29:60:67:84:
91:87:5c:45:7a:87:05:95:83:39:5f:07:e2:0b:bd:9a:c5:c7:
7a:92:f8:2f:6e:3a:d2:1d:5a:f0:8c:fe:41:1a:bb:24:15:e5:
15:04:5c:15:0f:89:5c:7f:35:84:01:b8:f2:9b:69:83:77:93:
a7:73:54:8f:6e:32:0e:52:07:1f:4e:c5:88:65:e9:91:ad:79:
24:2b:66:5a:c6:fe:7e:89:04:00:e9:fe:82:f4:c4:1c:3f:aa:
d6:ce:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:44 2025 by rpki-client