Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json)
Hash identifier: evkqTGUYvKwEKABFU18Mt+DN+621sUIVJj9mrby498k=
Subject key identifier: 8D:4F:FD:0C:DF:A1:58:A9:53:2A:05:E5:87:59:75:3F:53:DB:91:8E
Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE
Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE
Certificate serial: 081D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
Manifest number: 16DB
Signing time: Fri 31 Jan 2025 17:38:34 +0000
Manifest this update: Fri 31 Jan 2025 17:38:33 +0000
Manifest next update: Fri 07 Feb 2025 17:38:33 +0000
Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: JHsAs02j9g8tGcx9ikk8uAviNV0hOBdR7uPFGB0Cy8U=)
2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: BZiR4Dc1ddblUQXJsTaFKfSdrUTvmlQ8LVKV+/pLZz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE
Validity
Not Before: Jan 31 17:38:33 2025 GMT
Not After : Feb 7 17:38:33 2025 GMT
Subject: CN=679d0a99-32ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:31:6e:1c:29:23:95:d8:6f:f0:0f:89:b2:
ae:e5:56:1f:fa:e9:89:52:18:ff:30:e2:b2:bb:04:
08:57:b2:62:ea:55:eb:00:fc:6b:2a:fa:cd:5c:e4:
92:b4:ff:da:0e:de:c4:95:a5:ea:ef:c1:54:41:7b:
db:d9:7d:b3:12:94:31:da:45:50:da:41:7a:83:6c:
81:40:2f:8f:70:21:49:a6:62:f0:87:a5:0e:29:69:
c7:fa:c4:43:08:ee:39:09:d6:dd:f4:ae:33:18:b3:
fb:d6:84:8b:ac:6c:db:86:e5:3e:74:3a:ce:14:e1:
5f:b8:1e:38:2f:1f:46:d0:13:c7:84:31:fe:4e:f6:
8d:5b:c1:0e:29:e6:66:9a:c4:70:81:c3:86:be:6a:
32:41:49:e2:da:67:27:d1:05:91:cc:df:99:60:25:
15:c0:9b:9c:63:da:c6:4e:31:7e:31:31:89:07:a5:
51:c9:14:db:59:e4:96:0c:9a:88:06:fd:9b:f6:a2:
db:e6:b2:31:4a:4f:28:31:ea:c2:aa:a3:a7:e8:78:
2e:59:46:e0:5c:2c:89:6a:7e:0a:cf:70:13:a2:73:
02:76:a3:11:7f:03:6e:b7:fc:0a:74:90:25:52:d7:
2f:1a:e3:ae:07:2b:70:b5:da:b7:e1:bf:9c:b0:7a:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:FD:0C:DF:A1:58:A9:53:2A:05:E5:87:59:75:3F:53:DB:91:8E
X509v3 Authority Key Identifier:
keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:09:ba:b4:48:5c:4c:b1:67:b4:21:65:56:e0:c4:f4:68:16:
bc:c0:01:7a:97:0f:f1:2b:87:94:eb:22:4d:f6:09:e4:35:d5:
2b:cc:78:3b:02:80:13:7f:68:d6:a9:6a:b6:15:87:69:68:fd:
30:05:15:3e:20:81:4a:28:d0:e9:bb:f5:f8:1e:01:50:94:66:
77:4b:0a:9c:8e:d7:59:16:2e:79:35:3b:de:f2:35:cb:38:a2:
eb:92:06:b3:72:4d:8d:01:5f:fd:b0:26:48:6d:6a:a4:91:84:
1c:dd:d2:9a:2d:e7:f7:3d:1b:ee:73:cd:f6:3f:a2:4e:56:e5:
5d:9d:f0:b8:c0:cc:ab:fb:c8:73:32:45:96:3e:a1:66:31:e2:
fb:b4:36:d3:d1:e5:46:3f:c5:56:30:9b:96:c8:ea:20:58:8c:
9b:00:d3:b1:54:76:0c:8e:c3:ef:4e:05:c1:4e:49:0c:f3:d9:
32:7a:de:4b:2c:51:87:f4:fb:26:45:5f:ab:bc:10:ef:36:f2:
2b:79:3e:6a:15:be:cd:aa:18:bb:ee:cd:45:c3:3e:7d:c3:27:
2e:c1:be:a3:54:e9:8e:a8:bc:bc:dc:cd:73:6e:f9:10:9d:75:
1e:11:8e:32:b6:3a:0e:3f:15:b0:96:0f:be:a7:ec:7a:4e:1e:
b3:6a:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:52 2025 by rpki-client