Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json)
Hash identifier: lUmhgXCUS6PEMvkb7PiLWDsS5BSRGuP9GUiinQNQlRU=
Subject key identifier: 61:D4:04:DA:E3:EC:36:EE:FE:43:49:23:01:E6:1C:DF:5A:E9:A5:7F
Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Certificate serial: 24ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
Manifest number: 24DF
Signing time: Fri 31 Jan 2025 15:42:42 +0000
Manifest this update: Fri 31 Jan 2025 15:42:42 +0000
Manifest next update: Fri 07 Feb 2025 15:42:42 +0000
Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: 1kvbOSIx+ikL0Qa4EQYx/J8GJRFXiZXExYSBDxGXO9A=)
2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: bILzWIi7SfN0oZ29P+We7rkWjU1abIhmL+TRmVZttNg=)
3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: A+fjTwtG6/7wteTJpdAw9ZNsTS7E+yeIkAmgl1S9yHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9453 (0x24ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Validity
Not Before: Jan 31 15:42:42 2025 GMT
Not After : Feb 7 15:42:42 2025 GMT
Subject: CN=679cef72-3584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:dc:0f:50:1c:3c:b8:0c:17:93:2a:82:04:
c2:dc:44:91:58:45:3f:d7:99:98:da:10:8e:ea:c4:
a3:bf:8e:0d:92:66:5d:42:ba:f5:3c:e9:a8:22:95:
c5:d3:c2:b4:64:bf:a5:42:76:fd:56:23:aa:6f:75:
78:da:26:ea:a8:ba:8c:f7:14:0b:bd:0d:09:a3:ed:
da:40:47:c5:f7:5a:7b:a9:88:e1:b6:61:16:2c:88:
c7:25:fc:61:f0:86:7d:16:a3:98:1c:5e:22:2d:95:
96:08:7a:9c:bf:cc:8a:af:08:43:b6:61:b9:0a:c9:
9a:2c:cc:ed:94:be:bf:dc:60:70:06:f7:9b:9e:4c:
d7:15:77:88:da:87:43:3d:fe:29:65:80:9e:1f:44:
12:b3:51:fa:a1:ce:eb:fa:c8:4d:cc:24:ba:c7:55:
1e:0a:57:ab:d7:06:a3:92:66:9c:49:34:af:2d:38:
65:ae:55:e3:e8:aa:73:cb:79:30:68:93:a0:30:a0:
a4:29:49:7a:bf:6c:83:ea:9f:2e:41:c1:44:67:87:
24:f6:38:49:68:b2:07:32:5a:29:38:9e:ad:e3:25:
3b:75:de:9f:4a:fe:4d:ea:ba:e0:23:09:2a:70:b2:
e4:14:aa:41:77:7a:74:e2:7f:0c:04:78:bd:b7:e2:
f8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D4:04:DA:E3:EC:36:EE:FE:43:49:23:01:E6:1C:DF:5A:E9:A5:7F
X509v3 Authority Key Identifier:
keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:97:3a:d7:0c:61:d8:75:44:55:b6:dc:18:ba:5f:99:9a:fb:
9d:6f:3e:40:a7:fe:05:d3:2c:91:9d:8b:de:ce:52:6f:dd:1d:
00:db:ae:38:73:08:f0:6f:ad:a6:e3:32:08:38:8b:8a:f2:d4:
17:4b:81:a7:62:e6:c1:6e:57:8f:1b:64:c4:d0:3a:73:47:55:
cc:f9:34:8d:eb:12:b0:b9:ee:b7:fb:b0:28:2b:3f:99:1b:2c:
d8:30:3d:85:e8:74:20:35:1d:67:71:44:a5:7e:e3:2b:29:7e:
05:23:89:e5:b0:2d:fd:4e:c7:89:fc:f1:f8:21:33:76:af:40:
6c:0f:b4:b5:1b:99:56:0c:3c:30:c8:b4:ca:f5:38:01:44:e0:
ca:f1:87:87:e2:6c:fa:9f:49:da:47:8f:63:ba:82:4f:7f:46:
b7:e5:f2:1f:f7:70:49:aa:c5:c4:84:48:29:1e:10:25:6e:45:
47:fe:75:5e:37:a5:75:6f:9d:18:d7:9e:b6:ba:30:43:06:26:
08:92:e9:bd:2a:b8:8d:84:98:10:af:6b:91:33:ef:1f:a3:a5:
c8:85:01:fa:80:c7:56:41:13:37:50:46:40:9c:c1:30:3d:04:
48:52:78:4d:f7:05:71:47:ed:b1:3f:6d:6b:f4:9c:45:59:69:
10:ee:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:09 2025 by rpki-client