Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json)
Hash identifier: oTiqRzZ5BYzpExIE09e2Tk7d9/IYLOCqzvkki8khJYQ=
Subject key identifier: 38:A0:51:A0:13:A0:47:A4:26:FC:70:C5:FB:0F:C5:42:28:1C:D9:C0
Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
Manifest number: 0109
Signing time: Fri 31 Jan 2025 04:06:43 +0000
Manifest this update: Fri 31 Jan 2025 04:06:42 +0000
Manifest next update: Fri 07 Feb 2025 04:06:42 +0000
Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: ELk2L6Uyf/JkXj+KMU6HhnfdOcz2ObYnNd8FLyU0p6k=)
2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: pevsaD4Tdrw3Ixu5KEE5rMHmedLOctKuJ/befOUTShA=)
3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: T8iSluo7SP9pG/tufgbYgInS5lll4OSd156UhBgQ4N8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Validity
Not Before: Jan 31 04:06:42 2025 GMT
Not After : Feb 7 04:06:42 2025 GMT
Subject: CN=679c4c53-2b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:c7:d1:ba:e6:97:6f:c6:0f:b7:cb:17:56:
e8:3b:22:f8:fc:ea:4a:0c:da:d9:8b:c9:08:ca:e7:
e1:b5:4b:28:bd:26:48:10:9b:02:b5:78:da:87:e1:
a9:5a:48:c0:79:8e:d3:39:af:8b:b4:d2:65:76:14:
df:9f:21:d0:75:81:b7:77:3b:cc:fa:fe:bd:7d:eb:
fd:a7:42:7c:bd:8b:7f:f9:9e:10:72:23:24:2d:4c:
5b:9c:7e:a1:c4:f2:34:1e:51:5c:63:bb:c6:4d:1a:
2d:af:f5:cb:e3:11:6d:21:26:53:e6:d5:9c:b3:ee:
3e:00:be:db:2e:37:84:68:48:53:cf:6e:66:fb:81:
c4:e2:0e:ac:ff:43:bc:15:29:f8:96:cb:52:1b:dc:
de:61:2a:5e:99:fa:41:87:a7:b8:fd:8a:1f:44:0c:
13:cd:66:a3:2c:3a:71:46:6f:13:4a:74:4f:d2:df:
2a:f8:80:b1:5c:82:a1:f2:c1:d5:c8:0e:7f:f2:66:
b5:8b:92:94:61:d3:85:f9:b6:28:d0:2d:84:8d:28:
09:1f:ab:e2:aa:7e:0d:99:ab:fc:e1:d6:70:8c:e6:
e6:2a:45:6e:c6:04:7c:b6:ca:e1:01:4b:c6:4b:ac:
09:57:58:c0:ff:f0:6f:5a:40:33:bb:35:fb:e6:9c:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A0:51:A0:13:A0:47:A4:26:FC:70:C5:FB:0F:C5:42:28:1C:D9:C0
X509v3 Authority Key Identifier:
keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:b1:2f:d2:77:c1:ac:47:0e:81:cd:e7:d1:2c:45:cd:1a:15:
f8:4d:f8:31:50:b1:18:60:16:c7:65:3f:1d:19:98:4d:77:a4:
48:82:9a:02:cd:29:eb:d7:37:61:0b:7d:8e:9c:ea:fc:3f:81:
a9:c2:26:d7:dc:29:74:81:cb:c3:da:55:a6:17:2c:92:80:16:
45:25:05:ca:a1:7d:93:4f:c8:bf:03:23:ed:65:bc:1f:49:bc:
6c:25:c0:46:ae:69:92:8c:33:6d:1d:77:5f:f5:f6:cf:9b:ff:
ba:cd:be:38:59:ce:8c:90:f1:37:99:fe:8d:2b:c7:9e:fd:fe:
13:1d:04:37:ff:75:a3:ce:ce:c7:33:e2:a4:0c:80:a1:b1:40:
90:61:56:a9:12:1e:80:d3:22:4f:ee:54:9e:34:7a:e0:92:12:
ce:f2:a3:72:66:b0:b7:4e:08:50:ad:79:16:a0:61:7c:ac:08:
88:9c:04:c8:e3:09:5e:00:61:34:f0:64:e4:51:c5:59:a8:a2:
6c:1d:89:f8:05:da:6d:d1:45:d1:63:e1:dd:66:25:7f:9d:fc:
40:b3:f7:7e:a9:48:bd:bb:d1:52:a8:39:cc:a1:ab:49:ab:52:
f6:61:0d:eb:4b:76:1e:8b:a2:5b:5e:02:ac:74:74:e7:c0:1d:
9d:0d:d8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:17 2025 by rpki-client