Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json)
Hash identifier: e09RIccQhdcaZDucnf/itvGoW23bd7DAoe2EGp3s4Vo=
Subject key identifier: C2:04:04:2B:4A:56:8E:F4:9D:30:19:0C:92:9A:D2:4D:8B:19:AF:23
Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Certificate serial: 0975
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
Manifest number: 0968
Signing time: Thu 30 Jan 2025 20:15:58 +0000
Manifest this update: Thu 30 Jan 2025 20:15:58 +0000
Manifest next update: Thu 06 Feb 2025 20:15:58 +0000
Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: vAqKxq06Vf7CSZMt4aEQg/i3GJmZge+Gb2yAfvcSosw=)
2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: fmsh1X3Q3HooxV4YfKkoLFlrGgD13/WeDGjBg2CNmMg=)
3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: WgMRh1pD8v+j2OuHDw2wLrJ+bXBsyv6ChtDmNGRF1/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2421 (0x975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Validity
Not Before: Jan 30 20:15:58 2025 GMT
Not After : Feb 6 20:15:58 2025 GMT
Subject: CN=679bddfe-0f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:13:12:79:2e:45:cf:d2:cd:3a:66:8f:2f:
35:1e:f6:3b:6a:78:1f:89:49:80:7c:a2:83:22:f1:
43:a9:11:f8:e7:57:23:d1:c8:bc:70:d4:a7:be:1a:
2b:63:c4:46:77:fc:e3:53:bd:fe:ec:d5:59:d1:dc:
c6:3e:40:c3:2c:89:c9:a5:9b:56:71:ff:de:1c:fa:
ca:a6:2c:49:ad:d7:65:c1:11:26:75:c0:fe:48:09:
25:ec:3a:c2:ea:52:d7:1f:4e:0d:a0:16:36:65:15:
d8:f4:64:c0:81:c2:ef:9e:ff:2a:49:af:9e:84:1b:
35:f7:b7:93:76:79:4e:3d:9a:23:28:f6:66:39:d8:
a8:3d:5d:16:32:06:f2:52:7e:81:91:a8:d9:1e:d6:
e6:94:1e:96:2f:0e:7d:a6:33:1a:78:26:2a:fd:f7:
e0:ab:5e:d5:b9:0a:88:66:83:46:2a:c0:50:1f:1a:
70:15:c3:e4:9b:ee:a6:f4:ce:64:1e:1b:49:96:a3:
ce:a2:00:31:b8:72:a3:9b:b1:cf:f2:b3:90:88:62:
83:58:fb:ab:81:a3:47:86:1d:72:28:46:23:16:de:
11:c8:3e:c7:fe:b7:2b:7c:8f:42:63:3d:02:89:de:
c0:66:88:b2:d6:61:f9:e2:6c:c4:43:d8:db:e6:39:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:04:04:2B:4A:56:8E:F4:9D:30:19:0C:92:9A:D2:4D:8B:19:AF:23
X509v3 Authority Key Identifier:
keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b9:91:10:e7:c7:a5:fb:62:3a:b4:6b:1e:cf:da:fd:6e:4a:
a5:d5:f0:4a:bc:ec:41:ba:c7:0a:7b:13:8e:2f:25:f0:72:30:
53:43:d8:14:16:1b:22:83:a8:f4:50:02:4d:a1:bf:34:c0:24:
c2:1a:af:3d:a8:60:0e:4c:52:d8:cf:61:c3:8a:2f:09:c9:31:
d4:a4:d0:f3:b2:1a:a5:68:ee:d9:b7:f9:a8:6c:bd:b1:18:9c:
0c:fa:3a:af:13:f4:b8:85:ba:ea:c6:6e:8d:5b:d1:53:8f:98:
55:00:9f:75:76:f9:31:29:2b:0c:92:6d:05:64:4e:76:db:25:
e5:10:16:04:51:00:d0:0b:bf:16:e3:f7:0d:8c:cf:0b:39:49:
3e:fc:37:32:1e:c1:b8:ab:af:6a:84:a9:25:d3:24:9a:6a:63:
97:c6:d7:24:06:ac:47:94:e7:bb:d7:40:f4:1a:e5:61:09:e1:
03:a2:0a:d8:1b:d6:0e:f0:0b:26:fb:c3:99:1e:45:7e:03:f3:
77:88:e6:e7:eb:9c:c4:6e:e2:a6:56:a6:66:8b:7f:b6:16:dc:
64:3d:a9:6f:0b:47:68:77:de:bd:73:5b:3e:42:a7:c8:60:3b:
85:46:33:aa:19:f3:42:c4:f9:01:7b:85:cb:74:9f:54:99:d2:
c0:0d:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:15 2025 by rpki-client