Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json)
Hash identifier: bt2jhOHHwzQ2OkukrxUrX2/0vUimpgGPV8bsOCpRaXo=
Subject key identifier: E6:48:FB:5F:49:BB:81:BA:B2:FF:31:47:74:C6:69:70:A0:16:68:19
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 14D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
Manifest number: 148D
Signing time: Fri 31 Jan 2025 16:53:58 +0000
Manifest this update: Fri 31 Jan 2025 16:53:58 +0000
Manifest next update: Fri 07 Feb 2025 16:53:58 +0000
Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: uGwK+IcHTDoEP9MPvpD+Gc0PYKBrSt58KX2seJlRunE=)
2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: +T2v6WhZdH2sLvXuddpzzbP1mbQkpp/cDFsDzaIq7rg=)
3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: k3UD6r21BHgLGyrPcMdI5dYPjWw/zRkTV4wjHfogWXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5331 (0x14d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Validity
Not Before: Jan 31 16:53:58 2025 GMT
Not After : Feb 7 16:53:58 2025 GMT
Subject: CN=679d0026-a0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:cb:4d:39:18:ef:95:6d:85:d0:35:df:07:
cf:2a:d8:a8:8c:9c:1b:0f:22:cf:ad:9d:ca:fd:1c:
9d:88:31:96:84:00:8a:f9:a0:80:47:34:30:e6:30:
b1:ce:94:d5:3f:12:ed:e3:35:64:2f:77:c0:2d:06:
e1:bb:de:da:77:d3:7a:55:0a:1f:79:14:69:a1:4f:
ab:8a:85:ed:63:a7:63:fc:14:2c:9d:96:4d:ea:5d:
be:d5:ac:f0:20:0f:d7:65:64:40:8d:7c:96:29:67:
23:f7:7e:c2:f6:08:72:74:e4:89:07:d6:57:4b:52:
e6:c5:ec:4c:52:f9:74:d5:1c:91:e2:36:f0:83:e4:
ca:98:a9:61:18:f6:24:b6:9a:01:00:1e:e5:a1:b6:
50:4b:30:ef:d0:89:5e:3b:95:4b:02:fa:9a:f5:76:
09:5d:9c:5f:b6:66:c9:48:3c:94:75:60:52:2c:db:
52:b5:36:5f:dc:95:6a:e7:a2:47:1e:d7:8b:bb:40:
59:2b:80:dd:b1:38:6c:4f:25:fa:b5:c4:3c:d2:e5:
c9:cd:89:0f:ad:0f:7f:72:67:e9:0a:43:c8:6c:14:
61:57:85:d3:da:e9:ff:66:e3:e0:40:14:76:54:55:
6c:4f:f0:71:a7:bb:37:a6:95:9b:46:30:1e:9a:c9:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:48:FB:5F:49:BB:81:BA:B2:FF:31:47:74:C6:69:70:A0:16:68:19
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:c9:6a:ca:f2:d0:11:f1:df:6d:c3:d9:cf:6e:76:07:f8:fe:
77:8f:d7:af:94:83:4d:f6:95:af:32:ba:57:fb:e8:c7:15:0b:
b5:4f:f5:c8:3a:fc:27:3e:77:5e:3a:1e:79:28:e3:5b:00:06:
ef:21:bb:fc:e0:69:87:ab:e3:6c:4b:4a:52:1d:4f:35:b1:0b:
03:b3:33:83:44:a9:06:d5:70:99:54:7b:c0:cd:87:95:e5:c7:
f5:2e:6c:e3:1e:7e:c3:ba:ae:8e:55:30:fb:72:01:65:8b:4c:
c4:e4:9c:ec:06:d2:ea:6d:ea:68:ac:c1:0d:37:6c:31:25:78:
21:49:ce:8f:d4:f3:65:8e:9a:2c:32:62:d6:1c:7f:61:05:91:
a3:29:9a:10:8e:11:8c:f7:7e:36:7b:96:67:68:7c:8a:41:76:
08:1f:cd:7e:2f:cb:b4:21:cb:ed:5f:cd:d3:cd:04:49:ab:0b:
96:a1:47:2d:e1:f6:ba:96:2d:4a:9b:e2:4d:a0:f1:83:15:22:
b7:61:13:cd:54:e4:28:6a:a8:a4:a2:0a:fd:55:0c:5c:07:a1:
5e:de:0b:11:99:2c:91:6c:06:98:a8:78:fc:a3:c7:02:b6:88:
1b:38:b4:ac:bb:13:48:4d:3e:29:72:29:62:c9:6a:9c:67:2d:
ea:33:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:43 2025 by rpki-client