Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
File: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json)
Hash identifier: YmhxmUsOWag2fbkKvw/mw8jYdxmbT69Bf5zCVILGtns=
Subject key identifier: 40:2D:18:B9:F6:D5:9D:3D:29:B3:4D:D2:D6:38:83:08:11:5B:44:D8
Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
Certificate issuer: /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
Manifest number: 0141
Signing time: Fri 31 Jan 2025 03:44:26 +0000
Manifest this update: Fri 31 Jan 2025 03:44:25 +0000
Manifest next update: Fri 07 Feb 2025 03:44:25 +0000
Files and hashes: 1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: s4yzv3SJFOTvNhBETk3It+CL4YkZf2sAcLYqgZZSm5c=)
2: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: +4E/SIZ/oGvD7umJ9MRN1Bu4uin+VyJe+FnG5rmuxi8=)
3: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: ILJNwfctE8vz94dN4sqCXyGqVPp+jFILIkyEGBsl1xQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Validity
Not Before: Jan 31 03:44:25 2025 GMT
Not After : Feb 7 03:44:25 2025 GMT
Subject: CN=679c471a-eabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:5e:3f:37:e0:ab:69:59:4c:71:c0:08:08:
50:1e:7a:c4:77:c8:32:5d:d6:58:8b:6f:bb:60:05:
ba:70:ef:84:42:72:5d:9c:97:4c:d7:55:dc:11:12:
25:6b:dd:99:61:27:4f:16:2a:49:46:71:c3:43:74:
b6:e8:4e:b7:a9:51:f9:b5:77:70:e5:93:93:e3:93:
1a:b1:00:48:00:a9:a5:5c:6e:ad:28:53:f9:60:32:
c5:a4:67:3d:6d:99:b8:13:04:4a:7b:6d:9f:b6:ca:
8b:a3:36:4d:42:fd:49:49:4d:ee:2b:1a:f5:f4:19:
d3:dd:4b:12:fd:c0:c6:22:c3:f7:fa:f8:58:a7:43:
84:69:ad:13:b7:d1:08:d2:5f:4a:57:a2:9a:19:8c:
90:1b:ea:ec:a5:00:dc:cb:2b:91:fb:02:15:b0:ab:
5a:94:68:81:ab:e8:0f:8c:d6:62:55:d2:1d:88:3e:
39:2f:02:ec:d2:9b:0c:54:2d:4e:70:f7:4d:89:ca:
ec:ec:93:f1:58:c0:fa:b5:a6:74:46:1d:a7:9d:09:
33:46:87:c6:73:75:5e:57:bf:50:7a:a4:31:73:ee:
95:5e:90:d2:a9:22:b4:dc:89:7e:58:ef:02:dc:9d:
8f:09:65:d1:19:54:3e:38:cc:9d:a5:61:bc:11:2d:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2D:18:B9:F6:D5:9D:3D:29:B3:4D:D2:D6:38:83:08:11:5B:44:D8
X509v3 Authority Key Identifier:
keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:85:bb:6a:53:5f:e7:09:24:7d:ef:8b:5c:31:1d:ef:19:25:
31:7a:2d:d8:1d:ef:9a:f0:93:fd:85:fc:6f:13:ba:6b:ef:7a:
d3:aa:22:b3:fa:b6:4b:15:66:c1:7d:e9:f2:22:09:2c:66:1b:
0f:36:25:ff:71:05:7c:20:79:91:85:a1:82:99:eb:20:9d:48:
b9:35:7f:c1:52:a1:83:72:91:a4:90:fc:e1:79:8f:4a:30:ac:
de:fe:27:fd:d1:ba:9f:1d:bd:cb:b1:1c:3b:ef:37:01:7b:cf:
0f:0c:bb:b1:8d:a8:88:12:73:74:18:70:86:2c:6f:5b:fe:56:
bc:13:ac:e3:21:70:0b:01:74:74:95:d4:64:a6:9c:72:2c:ef:
82:d3:cc:b4:b5:c4:b9:4a:49:1f:70:29:16:00:9e:5d:21:df:
ee:c4:58:d2:3b:98:2c:38:60:d6:3c:00:37:80:bc:f1:7a:00:
44:7d:12:a2:63:df:8a:b2:93:bd:00:de:4f:bd:90:af:7a:dc:
f9:0c:4e:bb:8c:74:65:f7:0e:45:21:02:64:e0:6c:75:df:25:
c9:53:89:43:ca:26:7b:2e:bd:47:e9:4d:87:c4:74:af:f0:28:
e9:77:e4:43:92:a1:d7:a4:c7:29:de:89:36:87:b7:8f:d9:d2:
0e:e3:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:15:26 2025 by rpki-client