Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft
File: CmH1ryEJpoNhH7ogbyCM7-NImCE.mft (raw, json)
Hash identifier: zNY5EIO49glJpoVyw6pKhlyzY06qGztOQZRAmMvatio=
Subject key identifier: AC:4A:D6:90:76:AB:93:58:52:A2:2A:F3:7B:4D:0F:0F:B0:BC:29:1B
Authority key identifier: 0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21
Certificate issuer: /CN=A91559AC/serialNumber=0A61F5AF2109A683611FBA206F208CEFE3489821
Certificate serial: 0A48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft
Manifest number: 0A3D
Signing time: Thu 30 Jan 2025 19:51:21 +0000
Manifest this update: Thu 30 Jan 2025 19:51:21 +0000
Manifest next update: Thu 06 Feb 2025 19:51:21 +0000
Files and hashes: 1: CmH1ryEJpoNhH7ogbyCM7-NImCE.crl (hash: eHQoAJMrAVHwmZCRvCqOCcoJuAjqCkNxvxYqnm/M7nA=)
2: FE32E0965F8E11EA935F3E69C4F9AE02.roa (hash: d+Wv9m/C3VN2mVgDQqfUIEcrhgDN8yDHTD/owFlOy7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2632 (0xa48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91559AC/serialNumber=0A61F5AF2109A683611FBA206F208CEFE3489821
Validity
Not Before: Jan 30 19:51:21 2025 GMT
Not After : Feb 6 19:51:21 2025 GMT
Subject: CN=679bd839-8997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:c1:f0:d2:9d:07:fe:9c:c1:87:37:4b:ba:
df:3f:0a:9f:6d:3c:d7:04:a5:fc:c3:bd:f3:62:a3:
01:6c:f5:17:69:02:1d:e8:91:64:cf:d4:c8:b9:62:
51:bb:5a:b4:1f:21:51:42:d4:30:b7:2f:0f:d7:a3:
f7:a7:3d:8a:a1:eb:0b:10:12:50:58:00:96:a0:33:
eb:b1:35:21:26:77:8f:70:49:4c:a9:bd:00:c7:ec:
3b:31:f7:47:89:77:63:67:c6:2d:ef:0c:28:3a:b9:
63:ff:99:c3:b1:da:54:df:0f:5f:76:1a:61:62:2d:
2e:2b:73:e9:4a:48:60:b4:26:9a:ac:bb:1e:55:8f:
b5:92:73:90:4f:70:4e:15:de:76:fa:68:2d:4e:00:
8d:b5:cd:5a:6e:1a:23:3e:3b:01:6d:62:74:fc:66:
c5:7e:c2:32:1c:1a:31:ce:14:5b:ad:35:0d:bc:3e:
9f:1a:d3:b7:53:96:c4:af:8b:bf:bd:53:c3:17:92:
49:36:bb:69:11:39:57:a5:e9:d3:c5:e3:ec:eb:32:
39:a7:05:80:30:c4:4c:7a:ec:75:85:ad:e8:77:26:
f7:d2:ac:69:fe:69:90:be:dc:21:4b:b4:71:af:5a:
73:39:14:ec:4c:84:8a:7c:74:14:55:5a:64:ee:6d:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:D6:90:76:AB:93:58:52:A2:2A:F3:7B:4D:0F:0F:B0:BC:29:1B
X509v3 Authority Key Identifier:
keyid:0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d3:cb:31:76:ac:21:9d:05:70:da:d4:de:80:d3:9f:82:1c:
b5:83:9c:91:c2:1d:e0:45:56:40:e1:9e:14:0e:4b:44:b5:d3:
73:79:45:f0:89:e8:fe:b2:55:7e:24:7b:fc:75:ee:82:fb:21:
4f:b5:40:7e:29:44:74:7c:8c:9d:59:19:b7:10:b1:c7:4d:64:
7f:93:ea:da:30:d9:1f:32:01:22:79:62:ba:aa:ad:25:75:4a:
84:e6:0f:ba:21:b3:b7:d8:79:e1:3c:a9:b4:a2:8c:5b:f5:5c:
e8:6f:83:af:68:7c:9a:b0:19:f4:d1:36:62:d2:c1:dc:59:d2:
a4:50:bc:70:7c:a9:f2:6c:07:ca:00:8e:32:7a:e0:d6:d5:14:
07:76:90:39:b1:2d:24:8b:00:a2:1d:5b:cd:67:49:d7:ca:c5:
13:2c:3c:75:d9:c6:86:b4:b2:98:4f:ed:1e:c4:09:5b:74:de:
f7:09:b0:5d:f1:e1:13:40:f6:07:f1:e2:b7:62:aa:ac:9b:41:
f9:cb:75:07:31:66:5f:2f:56:ff:f3:83:f0:7c:3e:ca:0c:57:
15:e0:09:01:1e:58:09:36:d6:a0:57:99:b8:55:89:07:d6:c4:
8e:9a:0c:09:e7:04:0a:6b:2d:4f:08:fa:4b:ef:cd:2d:c3:31:
1d:bb:4c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:46 2025 by rpki-client