Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
File: inTvQOZaEnwOZmsUpsZXSlNvNnM.mft (raw, json)
Hash identifier: X+s7loPtULY8IUsgzcCk996jCha3SY4jNM10Ogi4YWM=
Subject key identifier: B2:28:49:00:62:8D:73:95:A1:FD:91:73:C2:A2:55:38:86:41:6E:1F
Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73
Certificate issuer: /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
Manifest number: 017C
Signing time: Fri 31 Jan 2025 03:01:38 +0000
Manifest this update: Fri 31 Jan 2025 03:01:37 +0000
Manifest next update: Fri 07 Feb 2025 03:01:37 +0000
Files and hashes: 1: inTvQOZaEnwOZmsUpsZXSlNvNnM.crl (hash: xPWTuePsXnLbDUt6cX/odpaFJ+DgRDLODslQ+TQQKjo=)
2: 94817492A7AF11EE9ABC7953C4F9AE02.roa (hash: r8xTQZijVxBfTrzAxzSIebYBH5I/491FxaMTCA/JJHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673
Validity
Not Before: Jan 31 03:01:37 2025 GMT
Not After : Feb 7 03:01:37 2025 GMT
Subject: CN=679c3d12-e7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:d1:9e:7d:09:be:9d:75:9c:b2:cf:63:2c:
af:27:4a:c1:77:85:70:28:8b:ce:f4:ce:fb:4d:b7:
e5:e9:53:f3:60:29:ad:85:8e:05:a0:65:0b:10:f7:
6f:a1:d6:a6:a1:f6:84:cf:8e:2c:06:81:db:4f:f6:
64:f2:c1:f0:da:d4:14:ad:f1:68:b6:a0:c6:ec:b0:
d4:2d:e4:88:3f:a0:68:41:06:e0:b0:02:04:65:e5:
f1:ac:02:74:05:14:3c:1d:b0:dc:a2:88:ad:ad:3d:
21:55:d4:bc:c2:a0:23:c4:a1:20:11:47:7e:80:ad:
14:12:b9:04:cb:b8:2b:43:a7:d4:34:ba:00:f8:f1:
d5:0a:5c:3c:9b:92:21:39:9b:8b:77:bc:1d:f2:cf:
a1:47:81:f6:68:03:a9:d0:53:f0:5b:e4:87:ba:e8:
7a:54:da:a8:28:08:f2:b0:a5:54:30:36:6e:bf:16:
24:e7:d3:43:fe:3c:98:bf:95:5f:1a:22:a8:34:28:
07:7c:d8:a2:e1:59:dc:b2:9a:af:2b:5e:02:41:c1:
eb:28:58:bb:b2:b0:fc:eb:d9:fc:4e:39:45:f8:a4:
62:24:73:3e:1b:d2:21:cf:1c:34:71:f8:1a:43:eb:
ff:df:02:cf:f2:f8:3a:1f:52:e2:fd:54:8d:f5:89:
6c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:28:49:00:62:8D:73:95:A1:FD:91:73:C2:A2:55:38:86:41:6E:1F
X509v3 Authority Key Identifier:
keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:69:b3:af:61:b1:61:53:61:30:2d:b6:14:fe:f0:1f:f2:44:
ff:8a:82:91:ec:3d:8b:b9:68:e6:51:29:df:1c:12:78:f1:99:
e7:de:a0:e4:fa:3a:ee:3c:bc:b6:16:5b:d6:66:73:5d:09:6b:
20:e4:43:1b:b2:31:5c:6d:fa:bc:6d:45:b3:b6:3b:7a:d5:1d:
f8:96:f0:ce:e8:22:7a:b4:c7:bb:72:3a:f3:7e:cd:16:15:78:
c9:08:6f:87:4a:b9:5a:e1:e3:80:99:18:5f:79:05:a3:49:d8:
6b:7b:0b:0f:59:4d:bc:0d:43:dc:60:e0:45:96:c8:c8:b4:0d:
ad:23:94:cd:cc:ee:5d:a2:08:22:21:88:cf:c1:b1:e5:ff:8a:
ca:e7:3d:46:66:4f:fb:2e:67:13:f9:c7:9d:bd:50:8e:c5:7d:
c6:33:fc:de:68:00:a1:4b:11:c6:da:10:f8:9c:63:ad:32:9e:
93:8b:01:1a:bb:3a:cf:2f:00:d8:9c:e0:ed:6c:89:d2:ef:44:
ed:7f:94:02:ac:0c:02:12:a8:b7:93:7f:51:03:03:7a:23:f5:
31:17:d3:07:9b:1b:06:78:ea:45:2e:a1:d1:d1:be:ee:cd:42:
e3:9d:1c:03:c3:51:e3:7e:b9:68:9b:d1:9c:17:4a:5d:fb:3e:
5f:6b:50:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:10:56 2025 by rpki-client