Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json)
Hash identifier: dChP5+wnMUk4KUuFNi+i1+fGbrVm7GGPlIM/TfDX7YQ=
Subject key identifier: 5B:C6:38:DC:73:1A:56:65:62:81:7A:09:1F:4D:C1:C2:2B:F0:28:6B
Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Certificate serial: 0BCF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
Manifest number: 0BC4
Signing time: Fri 31 Jan 2025 18:44:00 +0000
Manifest this update: Fri 31 Jan 2025 18:44:00 +0000
Manifest next update: Fri 07 Feb 2025 18:44:00 +0000
Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: 5FnT7fiJ3Fu4F6Jcz1chSsYT9wboVqcYLp31zT07fd4=)
2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: Dg1teGxb/7J+RLEhdLIJJbvbaUjJVyctMJV2awJCf2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3023 (0xbcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Validity
Not Before: Jan 31 18:44:00 2025 GMT
Not After : Feb 7 18:44:00 2025 GMT
Subject: CN=679d19f0-77bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:f1:9c:d9:b4:4d:3e:0e:27:99:eb:a7:8f:
07:6c:dc:7a:28:5b:c6:24:6d:11:0a:d0:ed:a1:22:
65:98:6e:08:2f:e4:67:a8:a0:30:16:e5:52:a8:07:
1a:47:6c:20:15:62:ee:a4:13:dd:a3:e8:3b:6a:27:
f4:9e:e2:4a:29:64:81:e1:88:bc:de:e7:6e:08:84:
96:75:61:10:ca:8c:15:67:2d:45:dd:16:21:7e:a9:
e2:26:69:3b:4a:2c:37:38:24:88:36:2d:cc:db:b2:
d8:a1:dc:77:69:2c:7a:a4:ec:85:34:2a:de:cb:23:
f5:b9:cd:af:c7:00:04:ea:42:0e:cc:8e:4f:cf:3d:
32:7b:6c:6f:11:0a:dd:d4:5c:00:ae:5b:da:12:64:
22:42:a2:da:28:bf:ff:d6:e0:03:75:87:fd:9c:8d:
7c:42:8b:50:16:44:75:05:d6:8d:d3:4f:fe:9e:3d:
11:2d:95:e3:87:e4:49:36:3e:1b:67:f1:82:1e:b0:
b8:70:52:e2:37:45:f6:ef:84:5b:6b:83:c8:9f:77:
76:bc:fe:7a:6f:57:fe:42:14:70:78:a1:45:43:ae:
be:65:a2:db:d1:96:ba:fb:2c:64:43:de:16:45:d6:
93:0a:ee:70:22:42:2e:11:e3:34:a7:4e:ae:ac:69:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C6:38:DC:73:1A:56:65:62:81:7A:09:1F:4D:C1:C2:2B:F0:28:6B
X509v3 Authority Key Identifier:
keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:0b:db:50:aa:aa:bf:59:38:59:f2:7e:88:77:69:f5:fe:c1:
0c:01:48:96:c6:8c:5d:38:3e:dd:8d:ba:e0:13:c6:02:bf:1d:
be:1b:1a:29:56:8f:21:6e:89:c6:4b:e0:ba:f9:0e:74:c2:3b:
09:96:f5:e8:ad:f2:91:d5:00:2b:75:3f:ab:c2:1d:bd:79:a9:
ab:d8:a2:ca:f8:be:2c:db:2b:df:1a:01:8a:8b:01:f1:74:1e:
71:90:82:18:6b:a5:77:84:20:e9:0a:92:8c:17:88:88:f7:f8:
22:71:96:97:c3:8c:52:e0:5c:a8:a0:f3:f7:75:e8:52:5c:5a:
35:ce:87:69:13:ef:8c:99:0b:7b:0d:57:98:f4:23:53:9e:61:
75:f6:5c:f8:97:76:09:23:a1:85:41:f9:f6:21:86:25:72:5a:
30:28:4d:35:4e:05:35:c4:a1:23:ca:c7:29:1b:69:80:7a:db:
40:10:86:da:d6:ec:b9:de:86:8e:db:a7:9b:97:bd:5f:8f:19:
89:33:5d:a2:e2:69:8a:e4:61:81:30:c4:9e:2d:02:2b:15:a5:
09:fb:8f:b6:1a:93:30:63:a1:8e:8c:74:47:17:d3:4f:fd:6f:
50:05:85:27:0a:e8:e0:fe:d8:a1:ee:30:33:b6:95:5e:02:bd:
29:55:08:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:39:02 2025 by rpki-client