Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft
File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.mft (raw, json)
Hash identifier: mUs3DV7ZzLl+MVeSYc5LQAJz5IIxAW/8puhJGHdGLf0=
Subject key identifier: 60:D3:F3:24:3D:32:C4:13:1A:B1:C0:26:48:4D:45:0D:59:CE:9E:1C
Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58
Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458
Certificate serial: 146F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft
Manifest number: 1465
Signing time: Fri 31 Jan 2025 16:53:44 +0000
Manifest this update: Fri 31 Jan 2025 16:53:44 +0000
Manifest next update: Fri 07 Feb 2025 16:53:44 +0000
Files and hashes: 1: 8Os9EfDsrmhzaV1az7e0rcVfNFg.crl (hash: QQJ/OqmJ923UveziowQ2RT7/6u8LflosCZnnv8oF7/w=)
2: 5F150B08D48611E9A4473984C4F9AE02.roa (hash: oH35QJywcYwQK9w172Dp8G4g95WEClMxQ6f9cBdl364=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5231 (0x146f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458
Validity
Not Before: Jan 31 16:53:44 2025 GMT
Not After : Feb 7 16:53:44 2025 GMT
Subject: CN=679d0018-1eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:dc:75:e8:8a:72:3c:a6:14:5d:a9:0c:b1:
16:29:4d:93:22:d9:38:a4:3b:2b:bd:29:7b:a3:4c:
00:17:f2:7a:c7:1e:35:0e:63:16:8b:ff:6f:3e:5c:
f5:e3:04:5c:e9:50:64:56:1b:15:a2:64:7a:bf:8f:
7c:76:b7:e7:39:4d:d2:47:63:3c:07:fc:c6:b7:3f:
5d:a6:52:e7:04:ea:12:05:ee:65:e2:b0:c4:7b:a3:
bc:eb:7a:ec:d4:d8:a0:6e:73:b4:96:c6:f1:4e:ca:
d0:57:f1:c9:64:25:49:ec:d4:35:b0:14:9d:b1:a4:
2e:7f:a3:f8:a9:d2:6a:8a:83:64:32:3d:2c:91:1b:
d6:49:9f:4d:57:ac:52:7c:50:22:20:f4:8b:01:a7:
bd:f2:51:09:3e:47:bb:51:37:c9:2a:09:fd:06:38:
9b:1a:3e:7f:ab:6d:1b:42:02:bf:ef:5f:bd:97:a7:
85:bf:c8:e2:ab:db:e7:f1:f0:f2:38:7c:18:4e:93:
f4:c5:7c:7d:c5:e8:68:d6:26:1c:d9:5b:78:57:55:
14:9c:50:84:d5:79:72:9c:e0:e1:ba:f9:7f:9b:1d:
9f:25:e0:c1:27:4e:43:97:d0:3d:5b:75:36:1d:23:
2e:93:02:b9:bc:7a:6c:fa:e8:66:d6:9f:93:2e:43:
af:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D3:F3:24:3D:32:C4:13:1A:B1:C0:26:48:4D:45:0D:59:CE:9E:1C
X509v3 Authority Key Identifier:
keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:a8:92:4d:dd:b6:8a:33:e8:8e:6c:00:8a:0d:ac:58:2a:db:
b5:fa:e9:42:44:5e:05:3f:59:8c:18:6e:9e:11:9a:13:88:1e:
1d:e8:7b:a8:5e:18:4b:67:9e:fc:64:b0:53:67:8f:02:92:6b:
41:66:c1:fa:84:22:43:4a:a1:bc:34:28:0a:ad:03:fb:79:eb:
be:b3:6b:89:59:ef:88:20:40:b5:c4:dd:23:46:bf:9e:96:66:
0d:68:47:2b:70:e6:a6:a9:cf:06:05:dc:84:5d:2d:23:8e:b9:
e4:76:db:ca:20:7d:e5:81:ce:79:95:50:11:36:26:05:5c:42:
9f:a4:21:60:0f:86:8d:d8:69:71:9e:17:7d:f9:45:29:ae:12:
36:53:51:3a:d2:71:c5:5f:cd:3b:51:76:58:31:07:5c:0c:3c:
0c:d2:17:bc:ca:ec:a2:29:84:f6:7b:30:8f:78:cf:ab:35:bd:
8d:a6:7d:b0:95:2e:78:8b:69:52:bd:c1:08:51:75:c4:8d:55:
23:47:bc:0a:99:f1:05:1a:77:e0:3b:9d:7b:4f:3e:f5:bb:94:
98:0a:a2:f5:58:45:43:6f:02:3a:7e:35:22:01:fe:b8:c9:a5:
89:82:e7:12:1f:40:4a:5d:d5:21:16:44:40:11:59:5e:0b:57:
60:3d:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:33:13 2025 by rpki-client