Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json)
Hash identifier: QljIDqnTNtNOGZogiwUGa/SBHQtenzYUxJnZRmuKYGg=
Subject key identifier: D7:FF:81:9E:11:96:5D:A5:35:EA:76:4E:C0:F6:2A:59:8D:55:7D:DD
Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
Manifest number: 0108
Signing time: Fri 31 Jan 2025 04:06:50 +0000
Manifest this update: Fri 31 Jan 2025 04:06:49 +0000
Manifest next update: Fri 07 Feb 2025 04:06:49 +0000
Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: p8B9Xxect8AwhsnmoN3572Omt+dHbb/Jzacj4DFk51o=)
2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: ocnHIom5bfqYmJrUux5YVIb0Vcn2/L2ylLJbcgISr0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Validity
Not Before: Jan 31 04:06:49 2025 GMT
Not After : Feb 7 04:06:49 2025 GMT
Subject: CN=679c4c5a-8181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:fb:a9:af:12:ce:e2:94:a0:a2:19:dd:67:
3c:0d:ce:05:3a:e5:95:9d:eb:00:ff:ac:8b:a3:d2:
b5:10:32:6c:87:1d:e0:93:be:33:3a:2d:c1:00:8e:
1d:ab:d9:76:aa:29:34:ee:e9:85:8b:8f:62:18:3b:
c0:71:9d:41:e6:99:eb:23:26:f3:75:61:1c:18:d7:
75:ea:de:12:44:19:c1:84:10:9e:aa:0e:60:2f:50:
37:46:66:fb:0b:8d:9c:60:e1:1b:06:3f:ce:c9:1b:
2e:1e:50:76:c1:d7:76:ee:b0:9c:fc:a9:cd:a3:92:
ce:3b:6c:53:b6:74:69:d6:42:66:70:3e:5f:4a:ae:
8b:fb:e8:49:eb:ae:8a:81:72:a4:f2:b3:e7:9f:e0:
36:b1:05:41:85:d2:5f:96:bd:dc:a7:0d:e0:c4:a7:
9c:14:e7:74:b2:93:8d:0d:4f:09:2e:6e:7a:3b:67:
8b:d1:92:9c:a6:ee:e8:b7:81:7c:22:5d:40:38:cd:
76:ee:b3:49:45:47:ea:a6:9f:37:30:da:3a:e9:43:
22:2f:3d:42:87:00:29:36:48:05:41:6f:ef:34:5f:
95:20:87:5f:81:53:c6:7e:f4:ee:c2:a4:7b:c0:93:
9b:42:a5:21:a5:70:eb:10:72:30:08:87:16:c9:da:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FF:81:9E:11:96:5D:A5:35:EA:76:4E:C0:F6:2A:59:8D:55:7D:DD
X509v3 Authority Key Identifier:
keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:25:0a:99:47:f5:3c:f7:bb:63:b9:4f:67:86:3a:ee:e9:da:
f7:9a:7c:54:3a:1d:18:ac:12:52:d4:af:c1:05:db:f4:8e:14:
3d:fe:f1:01:c0:af:b7:1e:da:8b:f0:64:19:e8:ce:5d:ba:62:
5c:c6:8a:38:be:4d:48:dc:47:18:01:2e:93:d7:53:1d:c1:79:
63:6b:47:62:04:1b:57:df:a4:f4:d0:9e:af:27:57:12:3d:69:
eb:43:a4:62:7c:c5:c1:54:a2:95:5d:49:19:06:8e:75:76:20:
41:15:b5:44:d9:b6:c9:d6:0d:1b:f1:97:c2:74:57:c2:75:6e:
4e:f2:d1:3a:0b:0a:f9:83:8c:b3:30:09:88:3b:35:3e:ac:75:
cb:05:7c:80:b8:64:23:d4:08:51:fa:da:5d:1a:1b:53:10:10:
0d:b2:02:c8:b6:f9:32:9c:f2:1e:66:08:d8:17:d9:a3:34:d5:
2b:38:e3:ac:f7:d8:eb:dd:af:32:1f:72:ff:ab:4b:84:8f:95:
b1:8a:11:b0:77:b3:d9:17:7b:cd:86:ec:4b:5b:f3:f9:3c:01:
cf:ab:df:3d:99:02:a6:9d:9e:cb:6e:db:8a:85:23:ec:86:05:
8b:e2:60:9d:b9:d3:8b:39:79:85:0d:3f:05:cc:0f:80:61:52:
2e:db:be:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:22:54 2025 by rpki-client