Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
File: cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json)
Hash identifier: u4d0ywpaF47fYqX0KbpFPF/yBiEupvU3xI7oUk2+yk0=
Subject key identifier: 08:A8:4A:9A:3A:EE:04:1C:A5:43:CD:CA:CC:49:E1:03:1F:D1:27:C9
Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
Manifest number: D4
Signing time: Fri 31 Jan 2025 04:52:43 +0000
Manifest this update: Fri 31 Jan 2025 04:52:42 +0000
Manifest next update: Fri 07 Feb 2025 04:52:42 +0000
Files and hashes: 1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: oH9mbhUAhhbvNICBfIry7hZ0jXjkpEAkJoLbinf2/sM=)
2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: eBM1U0C9BAgz3z+X5mRsroakC5anBwEWYdlHygNX0ws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Validity
Not Before: Jan 31 04:52:42 2025 GMT
Not After : Feb 7 04:52:42 2025 GMT
Subject: CN=679c571a-ce65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:39:e4:3a:9d:3f:ac:56:85:c3:b4:df:96:
68:6a:3b:46:fd:bc:36:23:ae:40:19:fa:5d:2e:4a:
c9:cd:73:17:ab:19:1d:5d:09:f0:66:c7:12:ea:b7:
89:4a:01:75:6a:3e:72:c2:52:4e:b1:a2:67:4e:5e:
95:49:d7:e4:4d:b8:14:0b:90:10:12:fe:4d:df:92:
4b:9f:22:d7:59:3a:1c:f2:8b:06:e7:ed:82:b6:75:
ec:45:6a:eb:6b:cd:45:06:41:09:d4:d2:64:5e:37:
51:0a:5b:b9:5b:c2:a6:95:56:fd:14:5c:af:6d:49:
f0:e2:99:68:c7:67:96:15:c4:6c:ba:4e:0f:df:7b:
a3:cf:43:33:5a:35:b5:2f:11:71:c3:21:c7:86:f5:
34:26:3a:20:b5:fd:d5:ed:16:13:7f:74:b8:26:68:
1d:55:c3:7b:94:7a:1b:4d:b2:31:13:50:4e:02:f5:
ca:c8:59:03:30:30:0a:3f:38:e9:91:fc:c5:7d:ce:
8b:a3:b4:ec:e2:63:9f:ff:75:7a:a1:50:4e:1e:52:
36:06:52:51:5a:5d:f1:ce:81:d5:0c:2d:68:aa:e5:
51:92:90:16:3f:de:eb:e4:22:6d:1d:28:e4:92:81:
aa:01:00:f4:8c:cc:97:28:78:5c:52:d1:d7:cc:30:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A8:4A:9A:3A:EE:04:1C:A5:43:CD:CA:CC:49:E1:03:1F:D1:27:C9
X509v3 Authority Key Identifier:
keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:11:2c:9b:1f:e8:46:61:fe:33:a2:ef:b9:7e:de:d6:fe:81:
ae:f5:90:82:a9:b3:64:b3:54:d9:bb:d8:b6:a3:25:7d:4b:23:
cd:ab:97:16:b1:37:2d:84:d2:d2:e1:d1:05:17:96:1b:e4:b7:
6d:9c:3a:62:8f:2c:5c:8f:8e:d3:3a:ce:2e:d1:a0:34:da:76:
be:80:2e:c2:15:8a:e2:5d:19:22:db:b7:5d:30:97:35:a5:79:
3a:31:a4:7d:82:5c:22:98:e3:24:07:27:ca:1a:55:24:a6:78:
6e:4e:50:ae:39:4a:70:9f:ff:d5:a5:88:45:9e:c5:5b:76:58:
41:d8:d3:00:39:0b:e3:06:f6:dd:65:3c:f9:6c:4a:56:3e:ce:
ed:56:dc:95:b0:74:db:cb:6d:3a:13:71:ac:64:be:ea:36:d3:
ca:92:10:11:4f:06:92:49:de:73:90:1d:b3:c0:4d:7d:b7:90:
5e:9e:9c:f9:00:0f:9a:e7:3f:28:b4:6e:53:fe:e3:6b:04:89:
45:e0:8d:cd:7f:43:f9:78:31:bc:a0:fb:a3:ea:46:59:ae:0d:
fa:31:17:b9:f3:f8:33:f0:e1:aa:cf:41:d4:fa:5d:41:35:15:
c6:e9:ad:3f:3c:8c:9a:36:2e:ba:e8:71:8f:43:e1:30:af:02:
1e:3f:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:15 2025 by rpki-client