Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json)
Hash identifier: B/o8hHAhPC6CEbIj1FRm/F0PpzwDPn/FBhCSJt0fyQ8=
Subject key identifier: 6C:43:C4:14:A9:94:4B:71:85:57:E2:16:60:FA:71:3A:83:49:F3:AE
Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Certificate serial: 1C22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
Manifest number: 1BD1
Signing time: Fri 31 Jan 2025 16:17:11 +0000
Manifest this update: Fri 31 Jan 2025 16:17:11 +0000
Manifest next update: Fri 07 Feb 2025 16:17:10 +0000
Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: LPeWk4MW6whS8f0mpArhGxzH7bkEj4iF00opVcN/uFA=)
2: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: VAwS5Uo7Cqi7lzXCRRZhfVVXN11Han/DThkDiW77C6s=)
3: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: 5LMPCnmgpvXAYsKyuhBhkB3oiO6C+fnzS1hbGMCTiQQ=)
4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: Lee0UxrUp18WPeigcCSZbHFswfN4jnUwW80ZCAROV3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7202 (0x1c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Validity
Not Before: Jan 31 16:17:11 2025 GMT
Not After : Feb 7 16:17:10 2025 GMT
Subject: CN=679cf787-ce1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:b9:ea:20:34:15:a3:aa:29:7f:ab:ad:4a:
56:d7:f5:d7:bb:aa:65:76:3d:be:b3:0b:13:c0:aa:
c3:57:1b:69:91:e2:f9:39:38:57:41:0f:65:1b:84:
ca:55:d7:bd:80:55:93:71:c7:b7:43:9d:24:95:b6:
14:67:7f:3e:80:0b:a0:30:5a:10:72:7f:e7:7c:6f:
90:e1:f0:35:93:db:df:6f:ca:ea:c4:06:db:48:c7:
fd:08:32:96:fc:36:a6:b9:ab:3b:e7:e7:83:1f:3a:
1a:ca:df:c3:7a:88:98:be:73:e5:a3:fc:9d:88:84:
6c:cd:3a:75:5e:4d:b3:54:1a:a0:d3:f0:49:2d:08:
c1:1a:d6:72:f5:55:fc:df:14:9c:3b:c6:f8:d1:fe:
dd:fa:7a:b1:7b:8d:38:0e:ec:88:e4:a8:9b:36:68:
17:97:de:3e:2e:90:0c:9c:57:b7:11:27:b5:80:28:
93:6c:6d:b1:12:d9:7d:45:c2:c0:67:38:41:55:53:
0a:51:29:31:89:67:91:1a:b6:82:7c:4b:d4:a4:72:
a9:9b:33:22:ad:c5:f9:5d:62:58:0f:ad:b2:d7:ed:
71:61:2d:09:88:e1:7c:24:90:5c:50:eb:6c:c6:68:
7e:7a:93:7c:26:b7:06:56:c8:c2:2b:3c:0a:e0:af:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:C4:14:A9:94:4B:71:85:57:E2:16:60:FA:71:3A:83:49:F3:AE
X509v3 Authority Key Identifier:
keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2b:f0:2f:24:f9:fd:81:e7:ec:70:bc:41:d3:51:54:66:3c:
e2:c7:88:22:25:0b:3f:71:cd:62:a3:dd:0f:78:ef:87:06:86:
bb:f6:c6:e3:5b:9d:bc:61:88:31:d8:99:3d:28:bc:8d:78:28:
84:45:0b:37:08:93:5d:72:91:58:59:73:a5:f0:c5:4e:b8:51:
04:c6:df:dc:04:1d:96:a0:60:a2:c5:35:07:90:65:54:3b:f5:
f3:34:c2:88:3b:f2:84:89:1c:ce:09:d0:39:f7:c2:ef:e8:8a:
02:4c:8c:ec:b1:a3:6d:f6:2b:81:d0:e0:e7:3e:62:74:f5:e1:
a4:5b:10:a9:19:a3:8d:ed:db:de:4f:a8:54:ac:95:f3:62:87:
db:ea:c4:2a:32:dd:11:f3:43:69:ae:b0:ae:23:00:2e:44:fc:
12:9d:11:3f:79:7e:93:02:b4:ef:bc:89:c1:f5:a4:9c:15:61:
2f:9b:39:93:3e:56:ed:48:e6:d4:88:14:7a:89:b0:40:c7:73:
40:ed:66:56:02:58:2b:30:e8:d0:fd:36:7b:0a:27:42:02:2a:
da:e9:a8:61:57:2c:30:19:1d:39:7d:f6:56:71:6a:16:c9:dd:
74:ba:d4:b6:0e:45:68:dc:c8:1c:94:f5:5a:18:22:13:5d:32:
1c:f8:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:58:21 2025 by rpki-client