Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
File: XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft (raw, json)
Hash identifier: lW40j1rxK8OVORcuKzZ7Mtew6do85LJrOqtZR1t1MpI=
Subject key identifier: CE:10:27:77:DF:5D:32:71:15:9E:03:F4:BB:3A:0D:52:2E:2B:CC:7E
Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
Certificate issuer: /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Certificate serial: 0421
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
Manifest number: 041C
Signing time: Fri 31 Jan 2025 00:26:08 +0000
Manifest this update: Fri 31 Jan 2025 00:26:07 +0000
Manifest next update: Fri 07 Feb 2025 00:26:07 +0000
Files and hashes: 1: XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl (hash: TbZjhMwKhEVUqgQVyM1EPL4NtHekzsSpJe8n1dztSmw=)
2: 2CDB14025F0D11EC8C2C2820C4F9AE02.roa (hash: 2wXagGwhIRpG7ChJUcOa5VMipUA9jxD/sOaLXEgTRGA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Validity
Not Before: Jan 31 00:26:07 2025 GMT
Not After : Feb 7 00:26:07 2025 GMT
Subject: CN=679c18a0-a1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:b5:e5:8a:25:48:fb:0c:b7:a4:24:84:ff:
5e:17:4d:57:58:6e:fc:b7:eb:ce:a4:82:c5:86:a7:
50:62:4e:30:58:81:ad:e5:53:c7:ec:fb:d1:73:14:
26:01:52:b2:a5:36:7e:79:67:22:54:15:c7:81:ec:
06:8e:5d:05:ba:a9:56:18:a3:2f:d2:95:26:d9:29:
7e:ff:eb:73:33:a7:be:65:76:d3:4e:52:dd:fe:07:
fb:f2:56:0a:10:0e:d7:70:a7:29:7c:d8:73:93:6a:
24:15:af:b0:99:73:28:fc:46:08:a7:5e:46:de:58:
44:d9:4b:ec:3b:fc:bd:47:51:48:07:82:bf:d8:89:
64:11:42:ec:ca:e8:fa:0f:a6:30:a7:0a:2d:c4:c4:
74:42:01:89:07:d7:2e:ab:de:86:30:33:5f:aa:9a:
d2:56:72:03:45:cd:bd:2c:3d:11:11:df:c7:c2:99:
c8:d7:56:03:af:ba:85:a3:cc:fb:d6:69:44:aa:9a:
5e:e7:c5:1b:a0:5f:5f:b1:93:a9:99:42:76:86:3d:
0e:2f:44:94:22:06:6a:f9:4d:89:20:3f:af:b3:c3:
09:73:2d:5d:1a:fc:05:e5:74:85:41:aa:66:16:ec:
11:1c:1b:00:8e:9b:da:da:8d:cb:21:84:c7:29:f9:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:27:77:DF:5D:32:71:15:9E:03:F4:BB:3A:0D:52:2E:2B:CC:7E
X509v3 Authority Key Identifier:
keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4e:8d:6b:70:6e:9b:c3:1c:28:de:52:0d:43:2b:03:67:83:
ca:bb:59:7f:04:df:3c:81:c8:c9:53:41:f2:6a:6b:76:0d:3c:
71:2a:a4:fc:b5:46:b2:85:3a:6f:d9:2b:44:3c:a8:82:8f:f2:
7a:80:18:ff:72:4f:66:f1:1d:3b:9b:3a:ec:9a:47:52:98:6d:
98:07:c4:a8:91:fa:4a:67:8d:18:c0:af:14:c2:9d:09:ac:27:
31:71:a8:ad:06:81:f9:15:09:39:67:15:cc:f0:64:9c:25:d9:
f7:d6:98:23:05:33:ff:2e:82:b2:e1:7d:d6:94:12:d4:9f:cc:
18:cf:32:9c:6b:e7:ff:39:0a:7f:1e:b3:dd:a7:ab:45:31:07:
e5:92:e2:d1:c4:36:8a:2a:14:ef:17:dd:5a:0a:16:72:7c:c3:
6a:9e:3a:38:fb:0c:3c:d9:9a:0a:68:67:5e:6f:36:e5:cc:6e:
19:35:f0:23:7f:f3:8e:17:0f:58:ba:08:57:a4:5c:bb:72:62:
fc:af:1e:f3:da:e4:2a:f0:bf:63:be:0f:a8:5e:f7:0c:cd:b4:
de:36:24:0a:60:86:bd:07:aa:5e:12:ce:fe:4e:e0:e6:f4:63:
bd:fc:de:93:76:86:a1:8d:20:6a:f5:95:cb:b5:45:e6:b7:58:
03:da:9b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:02 2025 by rpki-client