Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
File: ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json)
Hash identifier: nuS9iBr9uH5ikz1m6h5HwZuSvfoRii7TJ7Cr/YLrDX4=
Subject key identifier: 41:7F:53:9C:AD:A9:F7:58:9B:E7:2E:51:62:55:B3:5C:B8:0A:4C:81
Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
Manifest number: 29
Signing time: Fri 31 Jan 2025 06:51:17 +0000
Manifest this update: Fri 31 Jan 2025 06:51:16 +0000
Manifest next update: Fri 07 Feb 2025 06:51:16 +0000
Files and hashes: 1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: FMWUinhtyjvS7Jo6j4j+ifhF6iOxGZuEkwYRjsO741k=)
2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Validity
Not Before: Jan 31 06:51:16 2025 GMT
Not After : Feb 7 06:51:16 2025 GMT
Subject: CN=679c72e5-048a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:0c:87:c1:ca:99:6a:46:c0:c2:c7:42:5b:
a7:a7:01:9c:43:4b:ab:ce:59:19:a6:0b:59:4f:1c:
9b:89:ec:cf:54:f4:52:60:e0:74:37:3a:8e:d8:70:
aa:6c:e7:30:d4:0d:a8:c5:19:b7:90:b7:90:2c:80:
04:75:21:e6:40:2b:81:78:58:70:0b:c0:d7:75:01:
b7:28:99:aa:8a:90:3e:91:c2:48:fa:ff:29:47:59:
11:3e:91:08:70:6c:42:1d:e5:fc:47:b2:92:67:fe:
54:e9:d4:44:8c:d9:d2:c9:bd:d6:3a:07:e2:3c:7c:
b0:9c:1b:53:1e:b4:ff:0d:09:2c:92:eb:f1:ff:f1:
51:56:91:de:34:14:d1:23:f8:f7:f4:a3:42:f3:7e:
d9:89:06:0f:79:d3:01:3d:0a:ad:42:de:dc:26:5a:
c4:29:b0:f6:dd:9f:49:8d:bf:9e:1f:9a:42:7c:33:
57:3b:91:ce:64:e2:1b:76:4c:ff:a0:c8:db:8f:a1:
83:74:d8:93:58:1f:d2:86:fe:28:da:5b:76:ae:e3:
c2:b5:ba:e9:70:db:b4:36:71:18:dd:ee:e5:ec:ba:
68:8f:d9:20:44:59:13:9e:48:04:f1:a8:d1:6f:54:
ad:28:ab:21:8e:82:0a:22:27:f4:bf:0b:06:5b:71:
91:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7F:53:9C:AD:A9:F7:58:9B:E7:2E:51:62:55:B3:5C:B8:0A:4C:81
X509v3 Authority Key Identifier:
keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:96:16:e2:ed:fc:eb:05:dd:fe:52:d5:76:64:a7:79:72:6a:
03:67:0d:7b:59:d6:59:8f:0f:00:af:87:34:98:5c:f4:fe:b3:
18:ab:c9:43:a4:62:29:4e:95:4a:c1:a9:02:60:f6:80:26:4e:
03:87:34:53:03:bc:60:e1:0e:72:97:64:ae:78:d7:34:08:95:
2f:04:88:45:b3:28:bc:cc:70:32:4d:bb:12:c7:c9:a0:55:41:
51:fa:7d:6e:3f:f0:b9:26:a2:04:7f:f1:b0:7d:e5:bb:a8:94:
da:7e:dd:77:5b:89:5b:65:a8:8c:38:12:53:23:28:7b:3b:86:
dd:44:99:f5:47:c5:3e:17:4b:40:15:f0:ac:71:25:93:9f:8c:
68:1e:21:6c:43:80:35:e8:57:32:cd:5e:8a:70:5d:b7:db:59:
68:52:81:db:da:b6:3b:4d:6c:f1:34:30:c7:50:f2:17:b2:79:
0c:88:c9:04:8a:e4:f6:17:3a:4e:ee:e6:8b:93:14:3b:d6:e6:
b4:37:b4:07:64:9d:49:79:77:e8:50:94:af:c4:aa:0b:2e:8c:
49:67:1d:d7:8b:65:e0:92:24:dd:17:68:a5:10:90:d5:9f:81:
8d:48:b9:ec:81:a2:f6:96:e5:48:00:0d:b1:b6:bd:a8:46:93:
2b:aa:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:50:15 2025 by rpki-client