Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
File: XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json)
Hash identifier: BtLhM01Gw5c/Pw4XPWgiP6Hf2+HFrvE5VQBo1Ul30wo=
Subject key identifier: 41:29:3E:87:EC:7F:CB:8D:0C:53:C7:B3:7D:58:EE:36:81:79:1D:8A
Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9
Certificate issuer: /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
Certificate serial: 0710
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
Manifest number: 070A
Signing time: Thu 30 Jan 2025 21:48:22 +0000
Manifest this update: Thu 30 Jan 2025 21:48:21 +0000
Manifest next update: Thu 06 Feb 2025 21:48:21 +0000
Files and hashes: 1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: 6CPF0OYA3AxL3YVdJIK41bhFbH1bTKNwT8NH9BoKrXc=)
2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: eaeoz8RqOSGEC4peCpxGpY2PbARdRPwT9kf9QvE/Y6E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
Validity
Not Before: Jan 30 21:48:21 2025 GMT
Not After : Feb 6 21:48:21 2025 GMT
Subject: CN=679bf3a6-5f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:a7:9c:3b:46:32:75:f6:8a:9b:c2:5f:37:
3f:1c:37:8f:73:47:90:ee:a7:0d:21:70:e8:80:ef:
f9:06:cc:c3:36:d0:72:15:63:aa:bf:14:3a:2d:64:
9c:10:e1:fd:6a:b8:e2:51:81:1d:70:2d:13:3d:b2:
5f:2f:96:f3:51:06:d8:ba:c3:a6:fb:c2:12:b3:36:
db:14:a6:86:c7:c9:d5:79:ff:48:97:97:05:fe:88:
83:ad:b0:7c:cf:f8:a1:56:db:03:f9:34:d4:81:a5:
c0:15:e7:84:cb:0d:5c:f1:e1:5f:49:2d:99:16:60:
a9:ac:8c:b9:07:51:4c:c1:2b:62:be:46:c6:5e:96:
55:07:c3:ae:a0:41:37:d2:10:d7:07:ed:e9:a0:2e:
89:57:62:86:5d:db:b5:e8:1e:d1:8e:63:25:54:5c:
95:a1:c2:cb:b8:c9:85:ee:74:c6:8e:c8:b5:85:80:
44:3d:88:f7:6a:90:2e:c2:51:23:84:e8:62:fc:25:
b5:c8:38:11:fc:4e:3f:8e:da:42:d0:ed:f0:9f:46:
54:ef:83:03:af:7b:cf:74:51:24:f6:d2:10:56:a0:
f3:1a:10:b2:a4:35:c3:bc:51:db:b3:1c:c8:ac:7d:
ad:0b:04:7a:4c:c2:9b:c8:89:fe:72:d1:18:6e:18:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:29:3E:87:EC:7F:CB:8D:0C:53:C7:B3:7D:58:EE:36:81:79:1D:8A
X509v3 Authority Key Identifier:
keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:51:34:83:c7:38:73:f5:23:fa:2d:a7:9c:28:61:75:30:d4:
72:4a:6b:ca:9e:85:31:6a:f0:a1:a1:be:3f:7f:d5:09:f3:7a:
0f:26:b3:02:c1:5a:c0:3d:ec:02:cd:9e:d2:60:74:04:ab:1c:
8f:ae:2a:3c:bc:37:75:78:14:88:26:a0:77:84:52:be:b7:1a:
ad:c1:28:33:df:d2:8a:8f:14:7f:18:c6:03:b8:38:68:03:60:
94:2f:9f:bf:fd:34:6a:33:55:49:fa:ac:4d:64:b1:2b:fe:cf:
bc:3b:01:bd:b7:d9:a3:f2:17:76:b2:7b:55:ea:c4:f2:29:35:
61:4f:46:f2:50:47:16:c3:59:67:42:9e:4f:15:5d:8b:41:e7:
8f:19:af:b7:70:7c:f6:2e:3e:37:58:e8:b3:02:05:56:3c:aa:
34:f6:0d:04:88:79:c9:4f:e4:22:24:c2:9e:f5:3e:6a:63:d0:
a3:61:13:ad:cd:ce:2f:3a:45:25:46:c7:59:2e:62:d1:f6:4e:
a6:0c:53:ef:85:02:cf:9c:9a:fd:09:a2:a6:69:ec:3b:61:87:
97:78:0c:f8:ea:3b:35:a0:a1:81:9a:96:e3:87:88:fa:3b:c9:
5c:ca:00:8c:f5:c1:2e:4b:29:f9:03:47:b5:ec:42:5b:f9:65:
cf:f1:17:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:07 2025 by rpki-client