Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
File: fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json)
Hash identifier: tNfyhtaW8bsdSAKpBTYt/cbAdgNPRiatTC+zhs5Iwy8=
Subject key identifier: 48:53:2F:BA:6E:0D:5E:EC:AE:64:4D:94:AD:E7:FB:F4:98:68:57:6E
Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8
Certificate issuer: /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
Manifest number: 026E
Signing time: Fri 31 Jan 2025 01:44:26 +0000
Manifest this update: Fri 31 Jan 2025 01:44:26 +0000
Manifest next update: Fri 07 Feb 2025 01:44:26 +0000
Files and hashes: 1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: 20dD7qKSOUlGNZEruhjGhitIRFDTy0cpNXn30hrOE+w=)
2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: 81tZME9FAwzO2UIk/WDugs2sSYBMwRpnwSHq/X3xc/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8
Validity
Not Before: Jan 31 01:44:26 2025 GMT
Not After : Feb 7 01:44:26 2025 GMT
Subject: CN=679c2afa-0246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:8f:34:b4:f1:ed:ef:ad:7d:7c:64:0c:3c:cd:
da:b6:ce:ca:ea:47:3f:d4:76:64:23:72:20:1d:f9:
2e:e5:50:44:da:30:e8:79:c7:78:62:33:ef:bd:96:
42:d5:20:09:e5:79:c2:f4:65:73:48:10:36:76:53:
a6:54:c2:b6:f4:8a:2f:c1:8b:72:42:90:91:3c:67:
37:e9:2c:05:85:8b:ba:4b:9e:5f:d5:41:b9:7c:d6:
69:78:cc:bd:08:6c:9f:da:2e:96:3f:6b:04:91:c2:
f2:dc:c4:cc:63:0d:8a:da:d2:dc:5e:0f:5b:81:53:
99:9c:b7:db:0e:33:d7:da:98:4a:1a:d6:17:a6:1d:
57:6d:81:07:df:27:c9:62:d5:07:5e:16:ca:8e:cb:
69:fd:0c:8e:ab:02:17:a3:6d:3e:18:d7:d1:6f:c9:
51:c5:40:d5:db:75:4b:a6:4d:54:ff:ad:5e:70:05:
85:f7:51:15:b7:fc:43:29:c4:49:24:f5:e6:bf:92:
e8:da:37:f5:32:b5:85:81:de:5d:1a:c7:5b:8d:50:
97:f1:b3:e8:8c:c4:5a:8e:35:a6:1e:ac:32:79:48:
0b:fd:68:2c:f0:ff:f5:a8:2f:cc:91:4b:bb:07:44:
09:14:3a:7c:5b:cf:44:03:70:bb:d3:17:26:74:f4:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:53:2F:BA:6E:0D:5E:EC:AE:64:4D:94:AD:E7:FB:F4:98:68:57:6E
X509v3 Authority Key Identifier:
keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:f2:c5:b7:5d:51:15:b5:fb:3e:32:42:d4:61:45:c8:ab:8c:
01:de:05:c6:78:03:9d:14:6a:e2:7e:e7:c1:67:36:1b:e1:ee:
eb:96:c9:5c:42:25:02:72:91:c1:a4:78:39:95:3c:3e:20:10:
3f:f6:bf:a3:1f:7d:a6:01:5a:7e:04:b1:02:89:8e:d4:06:2e:
fa:89:4f:c9:69:96:4f:f8:13:9f:66:21:d2:98:51:43:42:f8:
35:0f:a0:56:a9:80:70:89:b0:a4:38:b4:68:06:5b:fa:eb:3c:
53:53:42:0b:6f:c8:bb:65:db:cf:49:c4:c9:ad:9d:b3:1b:7b:
0d:50:8b:bb:86:d0:24:72:fc:81:c9:cd:09:b1:47:3c:b2:c3:
04:d7:ef:68:a1:9d:cd:a1:c2:58:94:16:12:5a:98:1f:cc:76:
80:80:a7:f5:cc:4b:36:87:c3:e2:62:81:b4:13:04:c3:d4:8e:
3c:49:04:76:32:f5:82:98:4c:09:29:1c:a1:14:a4:82:33:b7:
4c:55:8a:f6:14:c8:f2:a4:7f:4c:24:2f:cd:8c:71:f0:28:a1:
06:d4:51:33:98:c9:87:1f:51:cd:f5:ec:26:c3:20:f8:c9:f0:
5a:ad:3d:88:3f:bb:65:4a:a3:3d:c7:54:60:e8:64:49:83:ab:
bb:69:64:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:38:49 2025 by rpki-client