Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
File: csG8nD23m0PzVvI_lWiEjJz7jdU.mft (raw, json)
Hash identifier: Hdc1IMSyfzGXB3d3GLBwkbpEUioOd0lN+y2ESJTq+NA=
Subject key identifier: 19:C6:1D:97:5A:C9:CA:7B:9F:37:CF:72:F9:05:31:0B:2D:BC:5C:B8
Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
Certificate issuer: /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Certificate serial: 0663
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
Manifest number: 065E
Signing time: Thu 30 Jan 2025 22:25:14 +0000
Manifest this update: Thu 30 Jan 2025 22:25:13 +0000
Manifest next update: Thu 06 Feb 2025 22:25:13 +0000
Files and hashes: 1: csG8nD23m0PzVvI_lWiEjJz7jdU.crl (hash: TK7tzU5q+xOqTXaP83hu6vKe3yA5a5HQA240jBFap30=)
2: EB292D8A6BF811EB8E899650C4F9AE02.roa (hash: haQ1wVHCjiOBIUnT4Cwar2Iew7eXxoRUFslAJoKYOBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1635 (0x663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Validity
Not Before: Jan 30 22:25:13 2025 GMT
Not After : Feb 6 22:25:13 2025 GMT
Subject: CN=679bfc49-ef8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:85:53:6d:90:3f:93:da:b2:52:e3:26:d3:
82:ad:d7:3d:b6:e0:47:8c:ac:41:0e:43:d2:5a:5f:
cf:c7:a9:ea:a5:9d:ad:c5:92:a4:e9:7b:f3:fd:4c:
88:3b:26:c6:ac:c1:78:f2:31:97:59:9c:f8:b7:1a:
05:78:9c:20:17:38:2a:aa:a2:65:9d:a6:bc:06:5d:
eb:27:3d:f8:41:e1:27:e0:4d:e2:b7:b9:ce:b3:35:
b0:96:5c:0b:e1:51:03:19:53:9b:ed:19:fa:5e:3c:
11:23:19:cd:6b:6c:49:82:03:ca:fd:6c:79:d9:8d:
a4:83:c5:f2:74:f7:39:24:cf:bf:a8:39:96:d9:29:
b3:31:29:07:2b:06:17:da:77:5a:d2:5d:15:83:f5:
86:e9:c3:11:ff:e9:a9:ce:9f:37:72:9c:8b:dd:cb:
3d:c8:78:95:30:bc:07:88:f1:b7:7b:84:dc:e4:28:
56:07:d7:8c:d4:8f:e7:b6:4f:9f:f5:37:a6:8a:1d:
6c:ad:aa:ac:42:72:15:20:ab:73:1c:3f:36:b0:0a:
e0:3d:39:0f:77:08:5f:53:16:99:22:89:7b:1b:98:
70:05:f6:dc:74:40:8a:81:a1:3a:1a:b4:c4:c6:bc:
86:52:47:45:70:c2:0b:5c:b6:8c:cb:9c:9f:30:af:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C6:1D:97:5A:C9:CA:7B:9F:37:CF:72:F9:05:31:0B:2D:BC:5C:B8
X509v3 Authority Key Identifier:
keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:37:85:04:08:7c:ec:77:7c:f2:e4:a5:2a:2d:7a:ac:55:dc:
85:e2:43:27:8b:4c:cf:09:bb:4d:d6:0c:15:fe:51:df:31:1e:
8e:8c:67:d9:b5:6d:07:db:83:b4:0e:9e:1b:2d:c7:96:9f:74:
5c:07:d9:3b:83:47:07:4c:64:4c:3a:d4:32:20:e0:dc:85:21:
0b:8d:d6:62:ea:a0:5c:b8:30:c3:7b:8f:10:bc:9b:b6:ba:86:
2e:1f:0c:d8:8b:42:b9:22:b8:6d:7e:c0:cd:9f:19:b9:4c:1b:
8e:69:e1:aa:7e:98:ba:59:d7:75:ab:e1:00:04:17:05:94:1e:
83:68:fd:d8:84:b0:f0:cb:bf:d9:81:ce:de:46:11:55:b3:f5:
ba:7e:96:54:5d:a9:a4:ce:2e:08:e0:0f:6d:23:0f:2c:c0:f9:
d0:b9:1f:a8:44:e1:e0:05:d7:9a:50:49:c7:4e:d0:67:a6:aa:
42:8d:b2:a8:20:7d:92:e5:ee:bb:60:3e:13:40:9a:6e:93:fd:
80:a7:78:0a:10:05:14:3c:e1:a7:e4:0c:c5:2b:89:d1:34:b6:
33:0c:0f:58:9b:06:b9:2c:f9:d0:b9:9a:54:ca:3f:ff:26:03:
d1:3c:cf:52:52:89:08:e5:27:e3:2a:48:c8:b6:71:67:70:68:
53:41:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:47 2025 by rpki-client