Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json)
Hash identifier: kOYy5QpDdivNEYDexWn7W7O9mAmhQR7sRy4j8afeguA=
Subject key identifier: 89:1A:02:46:32:71:F7:70:F7:17:19:08:D7:AE:7E:B1:B3:18:DE:82
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial: 0682
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
Manifest number: 0675
Signing time: Thu 30 Jan 2025 22:22:42 +0000
Manifest this update: Thu 30 Jan 2025 22:22:41 +0000
Manifest next update: Thu 06 Feb 2025 22:22:41 +0000
Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: A85mSlwulh2Ybh+q4wY4waquhNz9iTmKVMN7mKV21lI=)
2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: exnouJCREO3c3zFuyJZ6zHueq+KiKjrdGtBLHCMqGi8=)
3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: qOu1SsdqxnSEtLbLa6C30u3ruMqxic76gb8BT2aG5qQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1666 (0x682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Validity
Not Before: Jan 30 22:22:41 2025 GMT
Not After : Feb 6 22:22:41 2025 GMT
Subject: CN=679bfbb1-333c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:8a:4e:73:89:f0:f1:dc:62:7a:65:b5:9c:
15:2f:c9:5d:ad:5b:7c:90:9a:af:14:df:d8:db:e7:
3a:c1:12:81:ac:45:85:1b:ce:38:71:a6:b2:76:80:
b7:ad:cf:2c:4a:f9:1c:03:38:9b:8c:c1:0d:2d:9f:
6f:9c:e2:72:95:b0:4b:d9:e5:c3:84:92:24:ba:8b:
ad:5c:95:d9:ff:6a:db:47:fb:b3:ca:21:43:42:c5:
93:cb:60:2f:12:bb:03:48:6e:f1:f0:46:be:41:f0:
a6:b4:56:7d:b0:04:e3:15:78:40:94:fb:6e:ec:ac:
6f:86:e9:0a:cc:8a:1e:d2:cf:a9:a1:fb:1f:f0:59:
3e:3c:0d:31:4f:9e:db:61:8e:a6:f9:b1:e8:b1:37:
93:30:1e:94:3b:09:ab:ad:f6:47:22:14:93:72:d0:
81:29:d8:5d:22:bb:94:be:ce:eb:4b:fc:5a:80:53:
44:22:ae:39:a0:61:6e:73:29:69:8d:a8:df:1f:13:
2a:57:be:d7:22:8c:6b:e2:6c:bc:71:9b:d9:95:d5:
61:ec:db:aa:5f:b5:4b:bf:18:e9:ec:18:73:c7:cb:
06:9c:66:8c:83:e3:b1:fb:75:73:a6:e2:2f:c3:7a:
35:6a:26:a9:09:3d:d7:1c:0e:09:a0:17:88:d0:a9:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1A:02:46:32:71:F7:70:F7:17:19:08:D7:AE:7E:B1:B3:18:DE:82
X509v3 Authority Key Identifier:
keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:70:b9:45:8a:d1:eb:1d:fb:84:e4:94:9e:13:d7:9e:a5:44:
86:83:bd:e4:59:a1:94:00:20:08:aa:c8:f1:60:e0:f5:36:e2:
5c:5a:d6:34:86:17:4c:c1:75:53:16:ec:5c:27:be:dd:8f:0c:
f1:01:df:6c:d4:25:d2:85:24:f7:7f:18:9e:55:17:5d:b0:4e:
69:70:34:87:b8:9c:84:db:f5:8f:24:c9:da:56:1c:27:31:e8:
0b:ff:6e:9b:12:9b:8a:06:a2:7d:72:70:ab:80:5f:f0:fe:bd:
23:e7:fa:e9:18:e6:36:72:d4:14:c3:a4:f3:40:7a:47:06:29:
65:38:54:1f:4c:3c:a7:ea:65:c3:40:ab:8e:1e:10:8a:16:e8:
63:04:a2:a6:93:9f:47:73:bb:0e:8b:0c:12:31:c0:7e:7a:b4:
3a:37:08:67:4c:e1:c0:72:e4:68:b9:fd:57:c1:71:ed:e5:b6:
b2:30:be:a7:09:db:63:5a:98:36:00:85:83:01:3d:01:b4:7e:
72:83:da:01:f2:4c:14:53:2c:28:9e:3d:dc:d5:21:29:28:ee:
32:38:34:d8:d2:35:dd:a5:ef:6d:c2:de:bc:7b:3b:1c:0e:0f:
ec:04:19:c2:48:6c:6a:ae:f4:e5:d0:47:05:ee:a2:ed:ec:ec:
c4:a4:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:41:30 2025 by rpki-client