Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier: 6svDo8M37k4C3+W2XuZ7DUuAEpqSoMVOcjcYo1k2xb0=
Subject key identifier: D3:C1:96:89:D0:2F:11:3A:E5:37:71:0B:43:AF:C8:70:C0:CF:B5:B5
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number: 0208
Signing time: Fri 31 Jan 2025 02:09:42 +0000
Manifest this update: Fri 31 Jan 2025 02:09:41 +0000
Manifest next update: Fri 07 Feb 2025 02:09:41 +0000
Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: 7W/Pl7M8StGawb3dy3Pn9stniDGaIjUpvS/RDXpmdbs=)
2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: kHZ83uQd4P0Aq4GdrhXsgOSk69yPjkOBgA9w2SOMuKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Validity
Not Before: Jan 31 02:09:41 2025 GMT
Not After : Feb 7 02:09:41 2025 GMT
Subject: CN=679c30e6-d468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:aa:21:80:59:90:20:9b:15:97:bf:d9:17:
fb:10:63:98:69:68:10:0c:cc:46:f6:5b:19:5c:bb:
9d:6e:f3:c3:0c:bc:48:e8:0e:c1:7e:e1:2f:14:30:
57:fd:13:9e:a9:68:96:6d:6a:3b:6e:c4:43:28:74:
60:e2:22:47:85:50:81:fb:68:48:9e:04:90:e6:1a:
3a:c8:b2:d2:f5:56:7c:16:f1:16:10:d5:44:fe:db:
c4:7c:82:48:b3:e0:fd:bf:70:9b:0f:1e:8d:67:18:
13:fa:ad:54:76:6a:53:3d:49:85:f0:7c:fa:43:bb:
c4:b7:85:22:d7:fc:e1:e7:4b:70:ae:b1:8d:6d:54:
95:84:4c:49:39:f1:89:96:36:c4:6b:3f:97:c9:56:
6d:30:a4:82:24:6c:a6:f5:ae:57:b6:89:be:11:42:
da:b6:31:b5:08:f1:fd:3e:71:38:55:8e:fb:f5:41:
78:a1:74:ab:94:80:9f:20:13:d2:63:ac:c8:43:00:
6c:3e:d4:3d:f6:eb:f2:a5:16:4e:94:c1:2b:8b:1d:
ff:36:8d:a7:18:08:1d:2b:e2:99:71:86:35:9f:d1:
77:ca:14:a0:ed:50:de:b7:e1:94:6c:c5:e8:24:59:
c5:e2:89:fb:ec:60:74:ec:3c:02:3a:68:b5:f4:21:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C1:96:89:D0:2F:11:3A:E5:37:71:0B:43:AF:C8:70:C0:CF:B5:B5
X509v3 Authority Key Identifier:
keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:6f:69:86:34:46:f6:a6:f2:8a:5d:cd:17:b8:1b:50:31:91:
3d:65:ee:9a:73:35:5b:92:d6:0a:1e:55:b5:d8:d1:5a:6c:5a:
44:46:1b:c8:4b:83:df:d4:1a:cf:74:4a:a6:73:3e:9b:b4:2e:
2e:08:ea:4d:93:d9:09:48:70:31:cf:b7:d6:fb:6d:39:70:34:
3b:24:dd:2f:d0:f7:07:b7:be:03:06:09:0a:a0:b6:86:d0:1d:
da:0c:e3:a8:af:43:1e:19:4c:25:17:50:f1:c5:03:cc:c2:0b:
83:24:9a:d8:2e:83:ea:80:c8:39:dc:78:c9:d8:cc:58:b9:b5:
a7:6e:2d:e0:c5:46:49:2e:81:1f:64:7c:ca:6c:a0:2e:48:11:
e9:65:b1:59:a6:8b:23:10:58:70:2f:a7:d1:3e:39:80:46:88:
4d:fd:cf:e3:15:7a:96:da:af:1a:04:88:a9:86:fb:ee:c0:93:
71:06:6f:62:07:39:e2:3b:df:40:1d:98:74:37:3e:19:06:15:
81:ef:1a:35:f4:b5:bf:ad:3d:f4:96:e8:be:60:77:b5:64:30:
10:44:d3:b8:63:94:12:1d:9d:e7:5b:02:34:7b:a0:c2:1c:a7:
03:9a:30:75:b3:fa:1f:9d:bf:57:73:8a:32:52:55:c1:2d:5b:
ac:a9:ca:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:09 2025 by rpki-client