Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft
File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json)
Hash identifier: lliN2RuXc0cOV0Km90a0ZedsDK9i31miIRBa034CQXQ=
Subject key identifier: 80:14:A1:49:C5:DE:2E:9F:0E:25:B2:35:47:2D:8D:C0:03:F6:53:51
Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15
Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815
Certificate serial: 29F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft
Manifest number: 29D0
Signing time: Fri 31 Jan 2025 15:37:31 +0000
Manifest this update: Fri 31 Jan 2025 15:37:31 +0000
Manifest next update: Fri 07 Feb 2025 15:37:31 +0000
Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: xpDqRXSJp8lzFZy8Cyr2LI7Boji5LdmDAiqFJvIqQgU=)
2: 692291CA8D2111EFBB185E3DC4F9AE02.roa (hash: FXpji9Hi7AcmUDbv2EIFfiM1bpRv55YE0E+91g5QKX0=)
3: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: 8Jl9AiWamPsqzIL3OorWOBFy/PQ9g2itsr3pzc8dDLo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10744 (0x29f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815
Validity
Not Before: Jan 31 15:37:31 2025 GMT
Not After : Feb 7 15:37:31 2025 GMT
Subject: CN=679cee3b-68be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:60:c0:3e:3e:4e:08:b2:47:24:d9:c0:e2:
57:40:b9:33:2b:ea:28:ee:12:56:2f:9c:38:f3:b4:
9c:de:8a:92:83:c4:03:47:a9:2b:ad:53:be:09:18:
7d:1b:0b:40:aa:3c:9b:a7:e1:86:2f:94:f1:86:32:
7c:d1:b2:37:81:69:a0:0a:f3:2c:6d:43:00:a9:c0:
5f:40:6a:eb:44:59:84:ac:44:53:ba:4b:7a:36:99:
52:a7:7d:9b:34:25:a7:47:f5:58:ed:15:02:d1:d1:
d1:42:d9:ed:6a:9a:76:c9:6d:b6:46:0e:55:db:5e:
f8:e2:9f:18:4d:f8:0b:39:6b:a6:9f:ef:c5:b7:77:
33:9a:a9:5d:01:60:88:75:41:d8:82:e1:bc:8f:66:
e3:9d:9f:84:3d:68:1f:11:7b:32:96:d2:d3:c4:8a:
13:50:dc:e0:0c:e6:94:1f:0b:7b:78:52:39:4b:03:
88:a5:59:cb:76:4f:fd:3d:8f:fc:e9:a6:0d:69:12:
f8:72:c5:e1:8a:7a:cb:1c:e9:74:c3:c2:58:ea:0f:
dd:54:97:71:d4:ec:21:e4:b2:86:cf:4e:00:e9:69:
c3:2e:cc:b2:72:fd:7c:a4:3e:ba:f5:4e:5b:db:42:
36:28:80:ff:57:2d:46:7e:2e:a5:8f:e2:f3:8f:dd:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:A1:49:C5:DE:2E:9F:0E:25:B2:35:47:2D:8D:C0:03:F6:53:51
X509v3 Authority Key Identifier:
keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:22:7c:f6:1c:84:bb:04:72:63:b4:a2:c3:74:6a:1b:6f:17:
d4:24:2c:fd:b4:1b:a6:a5:33:46:5d:04:8c:71:56:ed:80:76:
85:ea:10:87:db:fc:11:fa:e6:80:f2:06:35:60:66:1d:b8:fb:
27:ae:33:6d:aa:33:2f:bb:62:e6:2a:28:f1:60:5d:fe:f0:8e:
f5:2b:75:12:88:98:1d:13:69:34:bf:fb:01:d6:0c:3f:c5:c3:
f7:c3:61:71:d1:b7:8c:a8:8c:2d:90:d0:9b:4b:c5:ce:a0:d3:
0a:8d:ce:33:cd:04:bb:42:01:ed:10:83:22:f0:20:16:8a:78:
fa:3e:5c:1c:37:06:de:21:69:c1:a6:c6:62:ee:1e:11:01:bd:
fa:25:2b:0b:ff:50:6c:48:29:6d:2b:e1:9a:56:4e:d2:04:33:
c8:98:20:8b:36:ff:52:65:10:d1:d4:d0:5e:33:c4:e9:c6:8b:
3a:be:42:ee:d5:e3:83:87:bd:46:3e:40:1a:9c:91:4b:d3:dc:
6d:cd:98:d9:77:38:90:b9:54:5d:65:e7:f6:5c:9c:ca:19:36:
62:24:cd:4e:78:b6:5f:b2:19:5b:b1:ca:8b:73:70:0c:92:98:
59:dd:4a:75:7f:df:0a:5b:3e:25:54:31:6d:59:43:93:54:69:
ac:98:c0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:29:46 2025 by rpki-client