Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
File: XUofz1MBwCdZyE7qVZFeJcFxpz8.mft (raw, json)
Hash identifier: RcbvspChjR73Pn923+1+DRS8dVmPC/lztaIXzkkY7NM=
Subject key identifier: 4A:DA:F5:A1:7D:A6:74:9D:F9:96:14:3E:63:00:8A:F1:11:AB:E8:FF
Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Certificate serial: 0255
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
Manifest number: 0250
Signing time: Fri 31 Jan 2025 01:54:10 +0000
Manifest this update: Fri 31 Jan 2025 01:54:10 +0000
Manifest next update: Fri 07 Feb 2025 01:54:10 +0000
Files and hashes: 1: XUofz1MBwCdZyE7qVZFeJcFxpz8.crl (hash: rvY0adbWqcqe+0bsgGcZb4+Sg+BNAzlD5mkt2aY7mdk=)
2: 388802BC067711EDA1DEB529C4F9AE02.roa (hash: EuoLXvibJYzVLshOhBvVYHJccoZUmB/oPyzL/sJ9KVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Validity
Not Before: Jan 31 01:54:10 2025 GMT
Not After : Feb 7 01:54:10 2025 GMT
Subject: CN=679c2d42-f063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:4b:79:93:a6:c2:d4:00:37:a2:b2:3f:19:
6d:68:19:14:88:2b:d8:5b:ce:3a:43:fb:03:a1:40:
43:29:6e:d3:28:9e:97:65:af:7b:f3:76:84:c2:07:
f6:1e:2c:39:b5:0e:2a:9e:fb:7f:2f:c7:45:e8:0e:
2a:73:a3:b5:b2:72:63:e2:b2:82:3d:84:fa:ab:aa:
0b:a1:8a:42:3e:a6:6e:52:d8:1e:c6:1f:14:c5:eb:
6c:05:1a:c3:1d:07:43:81:1a:0b:b1:2f:36:09:51:
55:d8:0b:02:27:69:f3:7f:aa:89:37:aa:a4:b3:b9:
99:20:a9:9d:d4:f8:4a:c4:7c:e7:fa:26:19:f4:08:
1f:23:5b:f6:b8:11:72:db:38:0e:98:30:f9:bf:44:
a4:b8:bf:cf:56:0d:46:34:b4:85:68:d0:d6:bc:36:
68:58:03:5f:97:21:80:73:53:f5:81:c9:c7:03:b6:
a1:dd:17:5e:f2:7b:cc:b1:06:ea:41:1b:89:37:eb:
eb:ce:1d:8d:61:15:c0:fd:e7:ce:03:69:79:c1:74:
38:26:c2:aa:c2:81:51:28:8a:05:7b:c4:51:d1:7d:
5d:6d:36:d8:33:9f:b2:69:c4:d4:13:fa:46:5d:bc:
67:27:99:25:59:fa:07:62:de:c3:ef:f6:b7:23:18:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DA:F5:A1:7D:A6:74:9D:F9:96:14:3E:63:00:8A:F1:11:AB:E8:FF
X509v3 Authority Key Identifier:
keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:95:02:5b:4d:ba:e9:94:00:f3:57:d4:a0:fc:95:7a:66:23:
03:5e:d0:8e:df:7e:6c:ee:40:6b:04:8c:68:57:7e:d9:42:d8:
3b:b7:24:58:ae:54:08:88:7b:e7:d4:85:c0:0c:76:e9:92:02:
07:d8:f1:ee:da:f7:05:b2:a2:6c:2e:1b:3b:95:e1:7e:45:f9:
6b:40:55:b0:2d:a2:35:b1:7e:47:91:a3:a6:69:23:c3:01:f3:
a6:21:63:e9:29:d9:e0:d9:a5:9b:57:09:af:64:79:9b:f0:98:
77:84:a5:ce:5d:9e:e4:78:4a:2e:bf:2e:bc:45:0e:74:a6:f6:
dd:43:4b:93:90:8b:b6:ae:2e:53:3b:1a:43:eb:16:9a:8a:12:
b3:3f:d8:e7:f1:21:c0:b1:c8:5c:28:45:19:58:76:7e:dc:37:
0b:0d:2b:8a:ce:66:d3:e4:0d:5f:f0:f5:7e:69:35:37:7b:8f:
c4:e6:01:e8:1b:87:b5:8b:3f:bb:9e:03:e9:9f:80:80:46:d0:
88:80:b7:a6:97:33:37:c7:34:47:d2:25:d9:54:73:41:0e:66:
1e:45:a3:2f:90:35:99:c8:b4:c6:42:2e:7b:60:8d:5a:4c:0c:
48:5c:cd:1d:08:82:a7:5e:bb:12:c5:e7:47:86:a2:2a:be:67:
e3:cd:d3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:18 2025 by rpki-client