Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft
File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json)
Hash identifier: smNz0XmnVYv/vk8FtIeXyN6Dtve5L0CW5p7Q182Hi2E=
Subject key identifier: 67:DB:CC:CA:90:B7:DC:78:68:86:D3:B5:B6:B9:FD:2D:5B:21:9F:31
Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30
Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30
Certificate serial: 0CAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft
Manifest number: 0CA6
Signing time: Fri 31 Jan 2025 18:07:30 +0000
Manifest this update: Fri 31 Jan 2025 18:07:29 +0000
Manifest next update: Fri 07 Feb 2025 18:07:29 +0000
Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: s0DGkdGhOL/YeStiXhaYN8tHmij26/Ih1En09UDpDj0=)
2: 41A8E738045111EA9C7DF516C4F9AE02.roa (hash: 549cEJi0czWRyHHS6o5u4NQ6YCs80VKq9MH5xptp8mg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3247 (0xcaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30
Validity
Not Before: Jan 31 18:07:29 2025 GMT
Not After : Feb 7 18:07:29 2025 GMT
Subject: CN=679d1162-9916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:4c:1d:2b:06:00:e2:98:1c:ef:34:db:19:
51:39:af:24:1d:57:73:34:d6:bf:e6:2f:fb:c9:fb:
b2:61:8b:d5:ac:08:7f:60:3a:eb:d5:cf:13:9a:72:
8a:1b:91:eb:3e:30:ca:cb:62:b5:99:41:fd:33:8b:
b4:67:84:16:f3:3a:7d:f8:ce:e6:72:41:08:7f:c1:
23:7e:6a:20:17:51:43:f8:d0:c8:61:c3:bf:d3:bd:
8a:c6:21:90:7b:3c:cf:37:20:2a:ee:3b:9d:3a:44:
22:42:8a:5c:cf:cc:6e:e7:2b:4b:1f:8a:9f:81:e0:
f0:04:bb:4d:ee:36:3a:c6:8e:82:c1:02:ae:30:4e:
58:60:d0:fe:f6:96:1a:ea:43:b3:8a:e3:ff:d8:76:
f2:4c:24:b5:6c:94:f0:07:fe:04:11:2b:5f:f8:6e:
91:bf:e6:4a:08:2d:0a:9b:6d:cd:dd:af:00:a7:61:
b5:1e:cc:2c:34:20:26:05:ab:9d:fe:d8:f2:27:19:
87:8b:78:7f:67:23:d2:48:9f:8a:e6:ff:f6:94:ea:
3f:eb:aa:25:9d:ee:34:19:63:1a:3e:3f:2a:60:92:
9b:89:c7:40:18:27:a8:4f:07:d8:9c:45:b4:7e:0f:
49:45:29:9e:97:c8:fc:9f:1b:ee:99:a6:f9:4d:2f:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DB:CC:CA:90:B7:DC:78:68:86:D3:B5:B6:B9:FD:2D:5B:21:9F:31
X509v3 Authority Key Identifier:
keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:b6:cc:f6:f6:b9:47:08:53:0a:2f:a0:e8:dd:90:53:1b:16:
29:bd:8f:c8:2d:24:0b:a6:ca:1a:07:db:9e:d4:28:c4:e8:ab:
51:73:b2:8f:03:91:9c:89:c2:f1:0b:b6:f2:44:0b:50:f8:7b:
70:a1:10:df:c2:72:44:19:30:cd:26:4b:6f:05:0f:e5:37:fe:
02:53:97:71:c8:c5:2a:c5:60:57:90:60:e6:8e:4f:2f:de:55:
b9:ff:fe:f3:d3:3c:35:5d:a6:dc:c8:de:54:b2:01:a6:fe:ad:
bf:00:54:49:1e:ff:3f:d8:67:89:b3:77:96:a8:d8:5a:37:88:
24:e6:69:57:8a:3e:47:fb:93:f5:d6:ce:c3:60:0b:c6:1c:38:
7c:12:41:c2:76:e3:54:3b:3b:db:44:a5:a8:b0:cc:02:02:e1:
05:90:22:93:89:ac:85:00:61:2b:45:05:33:9f:0f:42:1e:e3:
82:6e:9b:32:27:a4:c5:b4:51:53:1b:65:44:be:e4:45:24:8e:
c2:d5:a5:38:3b:4d:7b:e6:5b:9d:4b:c0:7b:fa:0e:a6:41:a3:
c8:8b:dd:17:3a:f1:f8:b1:87:10:e2:e0:19:79:b7:da:24:3d:
d5:78:8e:19:f0:ca:33:99:f7:ed:ad:47:25:65:ca:ba:06:f6:
d5:a0:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:28 2025 by rpki-client