Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json)
Hash identifier: JIhaYKjMuG7N/SU39AV7TSAkX7SW3Qxd19XA6yUbZ6o=
Subject key identifier: B4:2B:8D:37:6E:39:BE:53:2A:8C:45:72:6E:7A:62:AE:65:51:D3:64
Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1
Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
Manifest number: 0102
Signing time: Fri 31 Jan 2025 04:10:35 +0000
Manifest this update: Fri 31 Jan 2025 04:10:34 +0000
Manifest next update: Fri 07 Feb 2025 04:10:34 +0000
Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: TY5D2kkLAtl2FgWfak3HW76+pK6J+wRJwPYjy+gOLxU=)
2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: fQ0Wv2YD60Yo4ln05PtaRg2v4/R5zwKrC/7wYHWQM3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
Validity
Not Before: Jan 31 04:10:34 2025 GMT
Not After : Feb 7 04:10:34 2025 GMT
Subject: CN=679c4d3b-917a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:05:65:cf:42:8a:8a:64:73:06:73:5a:ca:82:
c8:3f:fa:8a:af:3c:dc:ca:35:5a:5c:d1:de:fb:c3:
dc:1b:40:f7:f6:3d:ed:48:b1:e4:c4:97:4b:04:5b:
98:9b:7a:05:20:15:c6:40:d8:1c:49:d8:12:4e:2d:
e4:27:44:1f:4f:99:07:23:c8:e1:1e:2d:b4:7a:82:
85:1d:44:1c:19:30:76:ae:ea:20:5c:6f:be:f5:cd:
ef:e8:e2:76:49:60:aa:41:40:c0:e5:d2:5c:dd:69:
0b:e9:79:77:da:11:a3:40:ab:ec:07:86:cd:7c:da:
7a:98:98:aa:0a:e9:21:6a:53:0b:ed:78:c6:b4:0b:
90:b6:10:b3:ff:d1:8d:21:0b:8e:0d:f4:ba:d1:04:
87:12:9b:33:1e:cb:6f:19:1f:78:10:27:68:09:eb:
af:8d:2e:16:23:c4:72:47:bc:3d:94:8a:61:41:a9:
98:8b:79:e6:0c:41:ce:80:9a:85:fe:d6:51:9b:a0:
d8:e2:0f:a8:e6:66:96:3f:4e:54:e9:17:98:18:3a:
33:69:fb:55:2a:99:b8:53:d9:be:89:6c:64:e0:22:
f0:ca:df:ae:c5:11:1c:6d:80:cb:fa:0a:d7:c2:b8:
73:98:19:d1:63:1d:8e:b8:ad:78:05:8d:f2:25:f2:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2B:8D:37:6E:39:BE:53:2A:8C:45:72:6E:7A:62:AE:65:51:D3:64
X509v3 Authority Key Identifier:
keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:1b:87:94:d5:d0:5a:c7:45:d8:f4:9d:e1:ae:b8:91:cf:a2:
76:5c:ab:06:c4:5e:6c:a4:c0:fa:19:f8:bd:2e:5e:d6:00:94:
cc:20:1c:5a:c4:dd:71:e8:c0:d9:09:e2:24:e1:34:97:33:dc:
f0:2c:b8:15:17:83:2d:a6:02:4b:85:1e:8f:a6:b4:46:2a:d1:
98:54:b9:51:32:ec:9b:be:d4:22:a8:26:30:c1:7c:13:3f:3b:
5a:8a:49:fe:f3:ae:bf:79:3f:a1:5c:7e:f5:6a:8d:ec:37:1b:
3d:0a:6e:cc:d0:d9:3e:c0:66:10:47:95:9b:4f:c3:80:bc:8b:
6e:0b:81:ba:c0:9b:8c:76:a2:52:44:ad:fc:a7:b3:7e:62:80:
04:b4:fc:2f:6f:45:a6:2f:32:ff:2f:a0:ef:0c:5c:12:a0:5d:
6c:38:51:70:d8:57:79:94:df:15:d5:ac:49:e0:73:3b:ca:00:
06:d0:8a:86:87:08:2b:28:ce:78:eb:27:d2:c9:6d:f7:61:e8:
05:81:ec:fb:05:7a:01:15:62:f3:dd:d6:16:34:ee:5b:f8:f5:
dd:5c:db:7d:48:01:8f:58:2b:68:db:ff:13:da:5d:1a:62:3e:
a9:38:80:1d:84:b8:d0:f2:89:ff:a4:f7:a2:19:3a:21:90:3a:
80:4a:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:06 2025 by rpki-client