Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
File: rSHpWiYaLoAl4zypVIJcFHCzt6M.mft (raw, json)
Hash identifier: idjDjK6qkSUuj+NRLMCY+Y4jkXKLmZM5tbMBl4MX1zA=
Subject key identifier: 5F:7F:FA:A2:5D:0D:94:93:70:AF:0C:0B:B8:9E:48:76:36:EA:8B:A6
Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3
Certificate issuer: /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3
Certificate serial: 06D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
Manifest number: 06D2
Signing time: Thu 30 Jan 2025 22:01:41 +0000
Manifest this update: Thu 30 Jan 2025 22:01:40 +0000
Manifest next update: Thu 06 Feb 2025 22:01:40 +0000
Files and hashes: 1: rSHpWiYaLoAl4zypVIJcFHCzt6M.crl (hash: J/i/+44AR2k9JJ8Meh1kd3BA14Ilkd159JV8StbwD8w=)
2: B855A21C3E1211EB8D23EB6CC4F9AE02.roa (hash: WhAEh4S3tK527emBBM2jGEQwQFEHNqJyzLHLvoZ2c44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1751 (0x6d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3
Validity
Not Before: Jan 30 22:01:40 2025 GMT
Not After : Feb 6 22:01:40 2025 GMT
Subject: CN=679bf6c4-bd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:9d:80:bb:de:d9:2f:01:7c:c3:18:21:f2:
b9:d5:90:40:63:8f:fc:2c:c0:c3:a3:10:25:1d:e3:
bd:eb:22:1e:d7:e5:99:8f:a8:a4:cc:96:09:0e:2d:
33:0f:da:20:52:c7:2a:0f:90:d2:6d:52:eb:76:e1:
ea:79:21:0b:f5:f4:14:25:cf:3b:cf:2e:1a:0b:cd:
39:28:8f:78:db:62:02:e3:63:4b:dc:11:90:86:14:
08:5c:36:2c:ef:91:ec:31:45:8e:a3:06:e0:4c:89:
03:9a:2e:43:6c:ce:5c:d6:4d:12:ee:da:48:ab:38:
d6:fc:4c:fa:27:17:0f:cc:ed:c5:f0:8c:bc:34:71:
d2:04:17:05:4d:21:51:53:3d:2d:c6:90:5e:d4:26:
b5:87:4d:0e:c3:29:c5:ed:69:17:97:42:55:98:c0:
00:4c:c6:ae:3a:28:2c:a7:4d:3c:63:24:21:40:33:
d0:99:4f:be:4b:e0:5f:1d:9d:3e:9d:bb:a7:aa:b2:
f8:ef:e0:f9:e7:9e:bc:f1:84:84:71:8d:2a:bc:a3:
d9:bd:81:4b:7e:09:18:e4:dc:07:c4:06:a5:0a:63:
1a:3b:f9:50:e9:b4:23:75:fa:ed:ad:db:60:7d:36:
2c:bf:ed:1b:43:5e:a7:c3:09:ab:f4:98:38:a3:ff:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7F:FA:A2:5D:0D:94:93:70:AF:0C:0B:B8:9E:48:76:36:EA:8B:A6
X509v3 Authority Key Identifier:
keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:5b:c6:94:56:32:63:bf:be:c4:d4:9a:88:e3:07:98:05:9f:
2a:14:ca:a8:65:1a:42:01:1f:5b:ff:98:9e:7e:a8:d4:25:0b:
c2:36:52:06:f6:48:49:94:f4:b9:b9:56:7c:db:6e:64:59:ad:
ae:51:91:a9:4c:df:a2:72:c3:49:7c:63:91:e8:8a:53:e3:d6:
82:1a:bc:a7:40:f7:ae:91:5e:44:5d:d8:07:2b:27:64:16:34:
b8:3e:84:7b:ce:a5:4c:e9:3c:79:49:37:9e:4e:f1:64:c6:e4:
5b:c4:8a:64:84:8f:ac:09:78:f0:9a:99:9a:eb:60:a6:dc:cd:
3d:85:8f:14:72:f2:2e:15:29:85:46:c5:1a:ef:b1:e7:21:80:
6f:d9:79:a3:1c:5f:90:94:52:c5:0b:24:21:b0:27:f0:11:69:
ff:84:5f:46:61:10:3b:38:5d:de:a2:d5:b5:4d:8b:56:28:f4:
e9:8d:75:e9:48:83:d8:bd:d1:26:09:02:0c:02:fe:7c:e3:85:
01:f6:23:3c:1a:db:a4:4b:80:31:78:3b:56:81:f3:8c:de:48:
53:d9:42:90:96:da:e4:df:7d:ce:5a:99:bd:62:d4:9e:34:22:
70:36:72:80:1c:4d:e1:15:37:86:14:26:78:8b:8e:25:01:1b:
a2:b0:e1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:02 2025 by rpki-client