Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json)
Hash identifier: q9cz5KMCH6F56P89jXVw+Ebcb/p/ZOlzWwNxi5FvMWY=
Subject key identifier: 31:3F:DF:D4:AD:9B:DE:96:9D:B3:41:B4:83:D0:56:E9:8E:A6:DA:29
Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB
Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB
Certificate serial: 14D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
Manifest number: 14D0
Signing time: Fri 31 Jan 2025 16:50:10 +0000
Manifest this update: Fri 31 Jan 2025 16:50:09 +0000
Manifest next update: Fri 07 Feb 2025 16:50:09 +0000
Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: ybzu8vqygENScsjiQc92YmBaTDqwKHQASLfaIJCfAoE=)
2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: q+1s6n0nvvvzY2lsXHxfSdzsEmNaz8tOfMeKBxpnQYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5335 (0x14d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB
Validity
Not Before: Jan 31 16:50:09 2025 GMT
Not After : Feb 7 16:50:09 2025 GMT
Subject: CN=679cff42-4ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:51:8d:f9:cb:d1:33:c2:8c:39:b7:ed:b2:
4b:e0:c0:95:3b:7d:0b:32:73:45:64:44:9e:24:ff:
e8:53:09:a5:aa:9b:98:98:79:00:ac:8d:dd:41:53:
0a:08:2d:d2:b3:a1:98:df:b9:ce:7d:3c:3d:02:da:
20:e8:f0:8e:90:86:10:5e:f0:af:72:4a:7d:1c:d3:
0d:cc:d4:70:3e:f6:58:26:64:92:e3:fe:74:d4:ea:
1e:20:93:54:0a:f9:77:6e:5a:1a:32:94:08:88:06:
e1:5b:cc:fc:04:c7:e3:8f:17:d1:bd:81:d1:ec:84:
a8:1a:8b:5e:76:78:af:1e:e8:55:de:77:ca:ce:8d:
bf:73:c1:cd:d7:12:28:21:dc:4f:be:1e:db:f2:04:
4c:f6:50:68:66:ec:7c:af:f3:25:e5:5b:64:2c:ee:
ff:2d:f2:83:3c:b4:f6:c8:2d:53:d7:dd:77:f0:46:
b0:96:e6:2c:42:eb:e2:27:2d:b0:2c:b7:e5:56:43:
a4:eb:4c:96:4f:44:25:71:52:0e:9f:12:56:ac:de:
85:4f:80:e0:94:8a:e6:b5:02:bc:74:90:0d:72:14:
b3:51:6c:c7:98:64:1f:ae:c1:bf:47:e7:5a:c6:09:
fc:57:20:f8:d2:6d:5c:a8:ec:c1:e9:a7:02:ea:0c:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3F:DF:D4:AD:9B:DE:96:9D:B3:41:B4:83:D0:56:E9:8E:A6:DA:29
X509v3 Authority Key Identifier:
keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:23:f0:df:82:44:0c:2b:65:65:96:3d:38:7f:89:c1:cd:a0:
af:f5:cd:0d:c2:33:31:39:90:d2:59:f9:0b:33:6b:29:ae:d3:
cc:3b:7f:3e:c8:c5:48:24:8f:90:4c:f9:97:13:5d:3c:35:c0:
69:2a:4e:6f:d1:e7:e2:be:46:9c:14:52:42:b4:6e:de:f2:2e:
74:48:40:93:ea:0a:94:a6:4f:3d:ec:b7:f4:47:f5:95:98:2a:
fa:ab:17:f7:a1:8f:c8:a0:eb:4c:ec:06:5e:e1:42:c6:9e:78:
5e:04:fa:f4:c2:40:b2:47:27:37:f9:33:49:ee:ca:ed:5d:1a:
78:69:81:c2:dd:5e:4f:6f:91:95:b7:f4:e7:ed:06:82:ee:ee:
d6:e3:d4:91:1b:73:77:3d:5d:79:48:a3:dd:c6:f5:7a:e3:e9:
67:43:71:5c:c4:eb:18:08:55:ea:d3:59:75:81:f1:cc:47:3c:
35:46:da:06:97:15:95:d2:65:be:c3:b3:5f:df:e2:07:b9:7f:
92:72:64:de:be:b5:89:c3:8e:4a:63:37:04:41:58:c4:47:3b:
d0:8f:9c:7b:5e:ea:66:39:12:6f:47:39:54:5d:43:60:44:cf:
9d:78:1d:97:c0:d8:07:10:e3:8b:58:b0:89:10:6b:1e:69:49:
c8:fc:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:43 2025 by rpki-client