Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
File: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json)
Hash identifier: 6jEoor/gcL+uSwutKtDEuKYs5Sr93wAsCuEXWa/QQEo=
Subject key identifier: C6:42:36:D5:86:AE:2A:AA:EE:38:32:BB:B0:AD:0C:99:C6:41:83:48
Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4
Certificate issuer: /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
Certificate serial: 04A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
Manifest number: 04A2
Signing time: Thu 30 Jan 2025 23:59:14 +0000
Manifest this update: Thu 30 Jan 2025 23:59:14 +0000
Manifest next update: Thu 06 Feb 2025 23:59:14 +0000
Files and hashes: 1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: KL+JcMyjVBOzwhFsRFQ0wMEBlTRemYG6pIXVKGpw2po=)
2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: vyhmQGxIqB8wrja0wWMnBsUj7C/+l/NItAqY6GbsZx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1191 (0x4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
Validity
Not Before: Jan 30 23:59:14 2025 GMT
Not After : Feb 6 23:59:14 2025 GMT
Subject: CN=679c1252-fac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:54:f1:cd:07:11:37:8c:11:67:14:9c:fa:
de:e0:53:a4:63:56:2b:c0:2e:69:a0:a5:8a:a9:6b:
da:cd:e3:d5:72:75:7e:f1:a0:22:7a:e8:18:12:96:
86:4a:c6:5b:f7:7c:b2:89:06:f3:24:38:4b:6b:c4:
82:c2:42:2f:34:c4:a4:8c:94:6c:7b:eb:c5:b9:f1:
f7:10:11:25:6b:9c:45:4c:dd:e2:41:65:a7:87:9a:
1d:d1:d3:52:d9:5a:39:8f:00:d5:e2:db:f5:a7:2d:
cf:bb:d7:0f:6c:64:ce:93:11:37:37:d9:8d:a3:4d:
63:a5:10:f8:e5:9c:40:54:ab:51:ca:95:09:1f:c3:
12:aa:04:55:64:cd:d1:01:3b:3e:b9:93:a4:e9:ab:
31:4c:ff:ea:33:e4:a9:82:ab:2e:5f:5b:7b:f8:07:
3a:9e:f4:e9:20:58:b6:c6:3e:f8:4b:92:08:05:79:
5c:ef:85:5e:7d:bb:dc:7b:1b:1d:39:c4:b5:0c:40:
49:3e:37:74:b4:6c:2e:fa:db:48:3b:ee:d2:14:ea:
e3:b0:59:12:83:a0:f3:cb:38:59:fa:4e:21:b1:77:
74:e2:02:42:9e:37:61:5f:b4:6c:e3:b7:bb:b4:bc:
fa:66:97:ff:9b:43:a5:e9:e2:68:b1:bb:db:b9:6d:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:42:36:D5:86:AE:2A:AA:EE:38:32:BB:B0:AD:0C:99:C6:41:83:48
X509v3 Authority Key Identifier:
keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:af:e4:e7:66:c3:02:e7:ed:93:bd:26:f9:8a:13:73:c5:b9:
be:db:88:9b:b8:9f:d5:03:ab:8e:d6:ce:87:a6:c4:f5:85:8e:
e1:01:f8:fb:fc:46:3a:49:b8:3e:88:87:e9:3a:65:c9:cd:1b:
66:d4:9e:d3:91:c7:3a:90:67:df:87:c2:c5:fd:96:aa:e7:69:
5d:f9:5b:89:51:06:00:2b:71:b6:03:3c:78:a1:52:23:5e:96:
9c:47:33:0f:7c:18:ae:dc:cd:70:d7:2d:31:97:0b:90:21:dc:
77:5b:74:16:c3:02:61:5f:ee:b9:8e:05:80:b2:64:ff:35:db:
36:a7:7c:ca:4b:4c:a1:8e:eb:06:da:6d:50:a9:43:7a:7d:9e:
31:55:72:21:85:05:39:e0:10:e4:4b:23:a4:3d:ec:7e:38:c0:
a6:b7:2d:52:5c:2d:c7:ab:2f:31:bf:01:c1:e9:08:ae:a6:01:
c1:f1:00:07:49:4f:23:84:55:82:ed:86:1a:d1:1f:dd:86:0f:
52:8f:4b:52:9a:f1:17:67:03:2b:32:d1:20:b7:e7:18:08:3f:
e0:e4:bc:65:51:90:3c:8d:9e:59:db:c6:d9:15:cd:3f:94:53:
c2:86:e7:c9:a5:84:61:60:73:d4:c0:7a:bb:60:8b:33:40:64:
c7:7d:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:44 2025 by rpki-client