Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json)
Hash identifier: P/CAObcFA6+p4jYrEIh2/Nt1GC2zZhQf5Vdc9FYE+hA=
Subject key identifier: 9B:85:15:F9:2F:42:8E:E3:D5:83:56:B0:19:A1:BC:85:3C:E5:1E:88
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 26D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
Manifest number: 2681
Signing time: Fri 31 Jan 2025 15:42:40 +0000
Manifest this update: Fri 31 Jan 2025 15:42:40 +0000
Manifest next update: Fri 07 Feb 2025 15:42:40 +0000
Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: BSIcM2STlRc5/h5W2KbG2oTiQoo05sPOnYTwYMzYCRQ=)
2: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: GFzeDAO9Plz6JyrMZHiDXzp35gRfDc7EJraZ9vxIyx4=)
3: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: lFXNtH/6SelyyHcFFn9+K9CF6YAl6za4tiRl9CCY85Y=)
4: 8D7B467A09C211EB8B759828C4F9AE02.roa (hash: auKN/5wn23vr9uClvIJlCd+TZfziI8EgQd8kHShs9CA=)
5: 17E76F7A9EA811EC95EBD87CC4F9AE02.roa (hash: HSneFdz7BrjoyuZhfsoXIX8oAKKd1pcnAxUY0uGTzCQ=)
6: F20038CA44A311E9AEF6F25AC4F9AE02.roa (hash: agY3g/9CMMz0WpLcTLUlA+lAMpIWkhNngvdK77DGk34=)
7: 1F8F28E09EB611EC8210607DC4F9AE02.roa (hash: dyG1DnB1I/vUfZT0K8S0d3Vc6r5P0G6OKFjjAi6nVx0=)
8: 87E8DFF6F92F11ED85D65069C4F9AE02.roa (hash: ad01dtAk2j/FQKkTaeqjHGDJaPel/7sCjTX6v5y+txs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9944 (0x26d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: Jan 31 15:42:40 2025 GMT
Not After : Feb 7 15:42:40 2025 GMT
Subject: CN=679cef70-70b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:78:3f:c0:d7:a5:44:7a:88:14:30:0d:75:46:
a1:39:ae:ad:6f:41:65:bb:15:5b:bf:9e:23:5a:27:
28:85:7f:e7:05:1f:4a:60:2f:ba:38:89:93:56:b3:
e0:ee:e2:f7:26:6f:3f:eb:5e:1e:47:9f:9b:71:8a:
da:c9:b6:4e:dc:13:b9:dc:58:ec:23:d7:cb:32:3a:
14:49:af:37:5d:90:7a:53:71:3d:2d:79:18:c6:4c:
77:25:eb:44:29:6c:57:76:3b:22:96:0e:05:da:62:
84:0e:38:28:0a:0a:59:a8:fc:21:25:e9:41:dc:39:
6a:0a:97:e4:a0:b4:85:0a:e8:95:1c:a7:d5:d4:04:
d5:3e:f4:d2:d8:29:ee:f4:45:53:5e:db:9b:19:d8:
8a:36:6c:6c:40:18:e9:3e:bb:dc:54:39:23:d4:96:
88:e3:4d:50:2e:35:ba:cf:49:2d:a0:9e:c8:42:01:
0b:03:69:05:e5:7d:c7:79:4e:18:eb:a2:fa:42:5d:
94:ba:66:72:7a:91:ce:fc:9f:3d:46:8f:d6:6b:4e:
7c:89:27:2b:2a:6e:8d:71:02:2f:ec:d8:82:95:b4:
17:0a:09:c2:3b:c8:ea:c1:e8:e7:e0:30:85:ab:d8:
b2:e6:70:3a:5e:e4:e3:38:b4:ed:ce:17:9f:47:65:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:85:15:F9:2F:42:8E:E3:D5:83:56:B0:19:A1:BC:85:3C:E5:1E:88
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:76:c0:22:6e:d4:d1:ee:1a:27:cb:ca:b4:30:06:58:52:bb:
91:54:82:23:3e:29:1d:2b:3b:3e:e1:5f:9e:d5:6d:cf:b5:78:
ed:77:2f:36:7c:36:13:91:90:fb:5a:3d:a1:95:cc:28:83:b7:
4d:37:7c:17:9a:07:73:61:45:68:0d:77:01:ac:da:f3:2c:b3:
60:5a:61:02:14:a5:c2:fb:6d:09:e0:67:7d:d2:f3:5b:77:ca:
57:ee:4a:5d:f7:8e:cb:b7:33:cc:62:84:f3:90:84:6e:66:ed:
5e:4f:d9:1d:38:49:2a:28:6e:82:69:c2:e1:bf:61:40:53:e2:
1d:dd:c8:f5:87:ca:85:e1:2a:1f:1b:09:e6:a2:6f:eb:e8:01:
37:b3:15:32:89:c7:53:dd:93:fc:55:5c:9f:84:a9:46:d8:96:
54:88:18:51:ca:6f:aa:94:dd:b4:a9:ea:ec:65:9e:91:dc:b2:
57:43:3b:42:da:f0:b8:5d:0e:ca:6f:d5:40:d2:ec:69:08:18:
92:f4:2e:7c:62:f7:e5:90:1b:82:6f:ff:a4:b2:54:e9:cb:e0:
e1:95:0c:84:de:63:8e:21:d3:5b:e7:f9:79:68:79:69:f7:cf:
cb:6f:29:c5:65:58:1f:5c:dd:e8:1f:13:e8:c5:2f:45:2e:52:
45:fd:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:43 2025 by rpki-client