Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier: yZKwXw21j3sVE0iU+3ExaKoZCy6ipUz8pOo4+egPddI=
Subject key identifier: 84:F1:70:0D:27:87:A0:5D:F1:24:63:A9:3F:FB:09:BF:BB:DC:82:EF
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial: 0C79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number: 0C66
Signing time: Fri 31 Jan 2025 18:10:34 +0000
Manifest this update: Fri 31 Jan 2025 18:10:33 +0000
Manifest next update: Fri 07 Feb 2025 18:10:33 +0000
Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: TxvAIpn1zF2Tu21ntVcNyUOUmJ9pTxpiakWbJ7uQB38=)
2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: RPlpLsvu7u5Rnn/6LuYgjLv1WN/M07IljCmFXb548ck=)
3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: 4xngxbC/FSr9DfqmMKAmH874AAFjb0QwcfQhbhi5WXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3193 (0xc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Validity
Not Before: Jan 31 18:10:33 2025 GMT
Not After : Feb 7 18:10:33 2025 GMT
Subject: CN=679d121a-fb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:a8:61:fe:8d:da:f1:21:aa:c0:7c:29:34:
0c:0e:49:6f:c1:0a:bd:63:b9:1f:00:73:36:79:d7:
98:67:0a:62:b6:01:c8:9e:59:af:89:1f:0c:2d:54:
6b:87:18:d5:76:b7:71:ee:ea:1e:23:15:4d:b1:33:
e0:23:02:bb:d2:5a:05:11:d1:35:da:4b:b7:a9:81:
f8:a9:70:f1:b6:57:3d:bd:7c:9e:00:ab:d3:9b:34:
f3:57:8c:c8:50:e1:60:bf:57:f2:ab:f2:e5:d8:5c:
87:c0:51:b6:56:3d:34:9e:5c:77:61:f1:35:44:5b:
d6:2c:d7:25:12:3d:10:71:b2:85:a4:4e:1a:c9:28:
d8:f4:95:9b:e8:15:1f:10:b4:e4:45:4e:d8:7f:9f:
0a:3d:81:53:c6:74:0d:d9:77:82:24:3a:de:90:0d:
7a:12:24:2f:ca:f9:d1:70:c6:89:af:54:b2:23:b0:
46:59:46:ca:32:69:d0:d0:bf:51:f6:dc:66:78:bd:
60:ce:35:41:f3:2f:68:86:98:78:f2:29:4e:f4:db:
74:dc:fa:d7:b5:49:34:5b:05:01:04:06:3f:bb:08:
2f:39:9c:78:1b:ec:8c:2f:43:b9:b6:63:81:29:c6:
75:39:86:cf:7b:1a:72:10:e5:a9:b7:e7:67:38:d0:
63:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F1:70:0D:27:87:A0:5D:F1:24:63:A9:3F:FB:09:BF:BB:DC:82:EF
X509v3 Authority Key Identifier:
keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:48:af:b7:38:b5:7b:65:01:1a:6a:a5:b4:6a:7d:90:80:b1:
5d:f8:1a:33:b1:25:8f:ca:3d:1d:bb:9c:52:b2:da:db:fa:82:
c7:a0:e0:fe:a1:e6:2d:b7:f3:0e:0f:3c:57:75:19:2b:4c:a2:
8c:91:0e:3b:3f:49:b3:09:70:b4:88:b6:85:d1:75:5b:2e:85:
3d:9b:55:ca:27:ac:e7:4c:a2:2b:50:b0:22:63:6c:c6:51:f1:
46:f6:a5:9f:19:f1:3c:cc:14:51:fd:81:77:d4:47:e8:42:af:
60:4e:57:69:ea:2e:28:dd:b3:18:46:af:48:67:c4:61:66:e1:
3b:78:d4:38:39:f3:97:a9:76:48:a6:11:6a:17:9d:56:dc:aa:
ae:15:a9:39:a0:c8:8f:25:f9:ef:1a:06:8d:3e:ae:77:3d:33:
87:50:79:ec:6b:48:ac:a7:63:aa:79:d5:6f:b4:37:dc:bf:4e:
0e:28:9d:32:3c:e4:0f:0f:4e:63:b8:61:25:ce:f6:0a:05:a4:
8e:f9:e6:bb:7b:a9:e0:17:c3:03:18:79:9b:e9:96:b2:ea:00:
02:f0:5d:e2:b0:ed:23:65:d8:ad:9d:c4:f4:58:5c:de:7f:31:
f9:c5:d5:c4:48:41:73:22:fa:a4:83:63:ab:89:28:5c:5e:7d:
57:82:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:46:27 2025 by rpki-client