Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
File: FTtjqTdzsliYghhmVd7zBEbdhg0.mft (raw, json)
Hash identifier: S1vZ7+IguvKwNrTFKSpIC13w5rQVn4J77NgKb+r5TOw=
Subject key identifier: 54:6E:A6:AE:C3:50:15:7E:7F:C3:0D:71:30:C8:28:0A:3D:1A:C5:CE
Authority key identifier: 15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
Certificate issuer: /CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
Manifest number: 0224
Signing time: Fri 31 Jan 2025 02:05:43 +0000
Manifest this update: Fri 31 Jan 2025 02:05:42 +0000
Manifest next update: Fri 07 Feb 2025 02:05:42 +0000
Files and hashes: 1: FTtjqTdzsliYghhmVd7zBEbdhg0.crl (hash: OnCcY38BGI+kYHpxNSEV3ETQedWoS18oT1/xKo6DSys=)
2: 27A32D7A16BA11EDB0E9E464C4F9AE02.roa (hash: uux+o2sOdsirWh/aoHrxCjsCKmrUczbEHaZJtHyFOgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D
Validity
Not Before: Jan 31 02:05:42 2025 GMT
Not After : Feb 7 02:05:42 2025 GMT
Subject: CN=679c2ff7-9e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:b1:41:44:40:27:c5:8f:cc:ee:d7:ab:4a:
1c:3e:42:74:05:e3:7d:06:15:9c:2f:70:6c:09:08:
48:ee:20:70:36:12:1e:0e:91:4a:67:0d:ed:6e:d5:
0b:5f:2d:e9:d0:f9:85:13:c2:92:3b:ce:1f:e3:a8:
15:a9:76:02:95:04:bc:f2:1a:3f:37:42:f0:07:7c:
02:48:9c:51:19:30:e6:fd:03:fe:d3:06:73:61:2f:
cf:26:1f:44:aa:04:3c:23:aa:87:eb:78:a7:95:b3:
a6:8d:70:00:53:8a:3b:35:20:90:22:60:46:9b:72:
8d:be:2f:af:12:af:7b:1d:d3:d9:d6:1a:d5:5a:51:
6f:dd:af:fe:1a:86:13:5a:3e:1a:71:69:c3:30:90:
c9:30:8d:c6:5a:41:e2:26:13:ba:61:94:77:a5:3b:
cf:65:7d:ec:b9:74:88:74:e2:75:d0:06:3e:d0:bb:
a2:ee:d7:46:31:56:00:7c:d2:5c:2f:7a:01:2c:c0:
7f:d7:49:07:b8:ec:c6:38:2f:2d:29:bb:e0:ad:1f:
1c:13:3a:c7:fd:94:e2:b5:59:f1:c5:8c:41:70:05:
39:71:aa:ca:f0:a9:57:81:f5:59:a4:41:12:86:a8:
a1:0f:53:0f:93:24:f0:56:eb:0d:e3:7f:c8:c6:49:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6E:A6:AE:C3:50:15:7E:7F:C3:0D:71:30:C8:28:0A:3D:1A:C5:CE
X509v3 Authority Key Identifier:
keyid:15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b3:0d:9f:14:1f:49:0b:9b:6b:f9:2f:f4:fc:fb:7f:38:f5:
98:9d:7b:1e:6a:f0:a0:dd:ec:4a:a7:1f:d1:d8:fd:b5:89:99:
61:3b:2c:02:f1:fa:d6:2a:e9:81:67:96:6f:25:35:02:01:d1:
58:05:08:4f:30:28:06:35:25:cf:94:b7:01:9d:26:19:ec:7f:
8b:0f:f1:bd:6f:b7:85:08:88:e4:c6:24:ab:d9:34:e1:2e:3a:
5c:6d:d8:ba:fc:b1:ed:d3:0b:fe:13:d5:28:58:8f:c9:4b:f0:
4c:b4:97:75:85:7e:de:59:f1:44:5c:8a:d1:4b:97:21:ac:04:
30:96:5b:33:4f:c0:04:22:5c:d3:a4:91:3b:fd:67:7b:d9:ea:
a9:35:18:68:05:16:ee:e1:16:3b:fb:3b:89:37:4b:30:35:d4:
62:b7:d4:d2:52:34:39:59:07:2b:d6:3b:f9:20:ca:0a:fc:8f:
20:4f:fc:3e:f1:b4:1a:3c:21:b5:bb:e8:56:6e:d1:83:fa:6d:
b1:00:05:b7:72:fa:98:cc:89:c5:8e:8c:f2:6d:1e:d5:3e:c9:
d7:0e:40:d6:7c:ce:dc:42:a7:28:a9:26:f0:70:a2:e8:10:70:
d2:f5:7e:6b:97:80:62:5d:64:f4:3b:46:b9:c0:3c:5b:8b:14:
bd:04:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:12:31 2025 by rpki-client