Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
File: AEu7wBxXH6cPIOpEBQBX2dyeutI.mft (raw, json)
Hash identifier: 319YvE5NpXrtJl6jyXwD0sDyjC73G7SWP73ShfTdjY8=
Subject key identifier: 51:0C:37:60:4A:9C:17:D8:8C:DD:F8:C3:80:0D:3A:BA:5A:B1:EF:B5
Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Certificate issuer: /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
Manifest number: A2
Signing time: Fri 31 Jan 2025 05:20:50 +0000
Manifest this update: Fri 31 Jan 2025 05:20:50 +0000
Manifest next update: Fri 07 Feb 2025 05:20:49 +0000
Files and hashes: 1: AEu7wBxXH6cPIOpEBQBX2dyeutI.crl (hash: PrqgPvbcqO25bpMhIs6Z1iyPcJTBns1S44yeQseBRus=)
2: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (hash: IY8DaCEG1YRTotH1n6mpqd+3bhzVn9WvsX3TpMpoT3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Validity
Not Before: Jan 31 05:20:50 2025 GMT
Not After : Feb 7 05:20:49 2025 GMT
Subject: CN=679c5db2-d480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:19:83:8a:7e:ba:cb:e6:a8:40:17:25:1b:
6d:bb:99:54:c3:4b:0f:4b:0a:de:55:a1:a5:73:40:
1f:d5:55:3c:8d:b3:30:5b:7f:41:22:c8:b6:6c:8d:
d3:f4:3c:d3:a8:9c:a6:b9:9a:f0:0a:de:14:2f:ea:
fc:bd:3a:03:5e:e5:96:53:69:71:0e:12:5c:26:d6:
0e:3a:bf:de:6e:b5:9d:7a:17:12:5d:b7:94:39:7f:
df:b3:b7:0b:1f:96:84:fc:61:02:09:2c:80:c3:84:
80:82:f1:29:ba:57:f4:6c:a0:26:7c:51:d8:92:9c:
6b:be:8f:92:b9:d2:2f:63:04:26:3e:e0:c7:eb:f6:
c5:fc:5e:c5:02:1a:c2:4d:bd:f2:ca:71:5b:ca:78:
41:55:25:84:0a:f5:a0:6d:a6:84:14:65:ff:f8:0b:
45:d3:5b:1e:a8:cb:77:8a:70:b0:75:3a:e1:29:4e:
d4:77:51:71:68:9e:b3:5a:05:c0:fb:c6:08:2c:c6:
3d:f9:15:5a:32:ad:b2:63:7a:47:dd:1e:96:3a:e6:
f5:52:aa:ce:a0:ba:36:b0:30:d8:85:c4:4f:34:d5:
fd:ad:f0:d9:ac:9e:1d:88:4e:b0:e5:a9:ec:25:c5:
cb:c4:40:55:dd:47:9b:69:55:fe:f5:fc:d4:f8:11:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0C:37:60:4A:9C:17:D8:8C:DD:F8:C3:80:0D:3A:BA:5A:B1:EF:B5
X509v3 Authority Key Identifier:
keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:9b:d1:cb:9e:e2:8f:49:d0:66:c0:98:9f:db:9e:1a:19:44:
15:3e:4b:75:f1:1b:0a:ad:ef:2f:87:a2:8f:0b:7f:ed:34:66:
79:e6:af:c7:e6:a4:55:e6:71:30:99:e0:d7:71:b4:ab:b9:e0:
c5:f7:45:ab:4f:db:57:7f:5a:e2:7b:e9:42:7b:a2:de:68:46:
19:39:b6:f4:c1:23:ec:89:4e:0f:67:72:76:49:4e:fb:1f:6f:
f3:fa:f9:df:1b:45:f6:16:4d:4b:3a:8a:9b:dc:5e:73:8f:7c:
ae:f6:90:45:b7:27:37:08:d5:03:e9:86:9d:9e:fc:b3:f3:f6:
80:ab:7b:20:ca:8b:a1:c3:f8:5b:cd:e7:4c:59:75:a6:0f:76:
c8:ad:dc:65:73:0d:ac:56:84:29:3e:58:c7:35:d5:67:fa:31:
02:9c:7b:22:7a:27:69:8d:33:ee:c7:ae:24:58:ac:88:86:49:
25:02:0f:62:9d:55:c8:0e:08:ba:74:5c:d7:02:c7:f2:22:9f:
3f:27:a0:29:02:f6:4b:1c:7a:ae:cc:72:74:03:e1:42:c0:22:
e6:21:1a:06:6c:be:3a:55:78:aa:a3:c6:0e:d4:8d:e5:81:73:
0e:05:ab:34:be:1e:74:70:8d:e7:36:63:53:1e:fd:1b:a0:64:
fd:af:ca:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:47:34 2025 by rpki-client