Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File: xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier: TUedtwTIZHOWVaX/ecyjcslezeJcqOt8LM+RsggXe2o=
Subject key identifier: A6:BB:14:1E:58:FA:81:14:17:61:29:4D:97:94:9C:92:EC:35:A0:50
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer: /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number: 32
Signing time: Fri 31 Jan 2025 06:42:02 +0000
Manifest this update: Fri 31 Jan 2025 06:42:02 +0000
Manifest next update: Fri 07 Feb 2025 06:42:02 +0000
Files and hashes: 1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: X6RFGD9ftmKt8hXi25sYG7WoL8k/6JPUipS4FUXeOuo=)
2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: uh0RsXXXDr4A3r/l+n4K/1lemqOiMBSx6tfsdjRL1A4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Validity
Not Before: Jan 31 06:42:02 2025 GMT
Not After : Feb 7 06:42:02 2025 GMT
Subject: CN=679c70ba-2802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:b7:1b:f9:62:a5:28:b6:44:e4:15:1b:bf:
fd:fb:d5:80:1f:40:5a:2f:96:c1:7c:14:8c:a9:e8:
00:1b:15:d8:77:9b:62:92:8f:f7:b7:6d:fc:0e:52:
cf:88:08:31:b1:f8:c6:0a:c8:92:73:92:2e:4c:0d:
35:b5:95:13:f0:1d:ec:bb:38:e4:69:e2:f7:8d:cb:
32:3d:d5:4c:8c:33:02:ab:5e:44:3a:05:9b:59:ad:
12:27:32:7d:db:21:b8:41:58:ea:49:6d:af:cc:d3:
a2:c5:8c:26:28:86:5f:e7:4b:cd:fe:94:ed:a0:c2:
06:6d:54:ce:42:df:94:5e:04:49:b7:1b:05:07:2b:
d6:b1:ee:cd:e5:4d:d1:dc:51:97:aa:62:ee:3b:b0:
d2:09:e2:4c:a6:2b:a2:81:2b:cd:f2:5a:2f:01:7f:
ff:76:c7:6a:ee:1d:92:8d:65:cb:6d:9c:d7:46:4e:
01:1e:a9:21:5c:5f:59:44:c0:2c:de:62:a6:ad:ff:
63:59:80:90:1f:6c:04:eb:70:63:1a:3e:e7:44:ea:
42:a6:9a:79:5e:2b:97:86:e4:14:3f:67:d0:39:ae:
df:a9:8b:8c:1b:b9:2f:71:2c:77:56:b4:8f:79:a5:
12:9f:e5:47:90:a3:2b:30:fd:2f:e8:0f:e7:43:07:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BB:14:1E:58:FA:81:14:17:61:29:4D:97:94:9C:92:EC:35:A0:50
X509v3 Authority Key Identifier:
keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:40:2e:a1:44:d8:20:32:09:b2:5c:1d:99:22:70:a5:d3:81:
ce:9f:0f:af:a0:4b:1b:3b:f3:1c:53:ec:25:53:06:e0:d1:ab:
b5:d8:54:a3:22:44:98:0a:89:8b:24:5b:aa:45:43:e7:1d:43:
f1:fd:e0:f0:93:8c:bf:db:0f:e0:02:71:76:30:3b:4c:21:53:
6d:6e:9e:da:cc:05:70:c9:2f:0f:6c:8d:b5:1f:15:e6:bb:60:
d6:e7:1e:9b:52:b9:ea:79:ad:2c:59:30:21:20:68:4d:d9:4f:
e7:79:2e:7f:ae:a9:e6:fc:0a:db:80:88:2f:e1:70:26:b9:6a:
fb:a2:eb:3e:5b:a7:c0:13:10:ee:fd:2e:b6:69:bd:49:70:c2:
cd:c3:8d:af:09:a3:d0:48:f5:67:0e:b9:7c:ae:2a:1d:7c:64:
29:b5:0e:79:26:17:cd:56:34:49:42:94:22:a5:b9:8c:15:a7:
d6:c4:17:e1:7b:6a:98:f5:26:0a:bf:f9:f4:0c:9b:e9:55:f3:
6f:25:92:bf:47:33:d4:e8:f6:73:ef:27:91:1f:57:00:91:da:
cc:20:ad:7b:5a:26:98:41:1f:2e:8b:a4:db:77:a9:2b:7f:43:
01:a7:b3:42:1d:f6:dd:68:c7:32:31:04:2c:19:0a:c7:04:8b:
d7:a7:6e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:08 2025 by rpki-client