Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft
File: s5MbVo8uudLtLKTWS-vAhvuduJo.mft (raw, json)
Hash identifier: k7p58+d6JSDrWhaY3S0ZjLUiV44dIeATMH8AC5DrR1c=
Subject key identifier: 4B:55:F2:1C:E7:05:78:68:3B:42:AF:4D:20:9B:7D:59:AA:D8:3B:EE
Authority key identifier: B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A
Certificate issuer: /CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A
Certificate serial: 0A58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft
Manifest number: 0A52
Signing time: Thu 30 Jan 2025 19:48:43 +0000
Manifest this update: Thu 30 Jan 2025 19:48:42 +0000
Manifest next update: Thu 06 Feb 2025 19:48:42 +0000
Files and hashes: 1: s5MbVo8uudLtLKTWS-vAhvuduJo.crl (hash: eX68QfiP8pyIIVrp8gnp6MwkoAgsbk3IJcAbwqKJ+Xc=)
2: 6FEF33E05C2B11EAAE63403FC4F9AE02.roa (hash: 2P+gDOnDDa6VcxpUk48B+SHGopeR5rQDNhRbAWvssIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2648 (0xa58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A
Validity
Not Before: Jan 30 19:48:42 2025 GMT
Not After : Feb 6 19:48:42 2025 GMT
Subject: CN=679bd79b-8415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:05:5f:1a:cf:2f:fb:f6:fa:58:f0:da:92:
d2:31:81:ce:41:4d:2d:5a:95:25:7f:2c:ec:54:3b:
a6:72:d9:50:f7:d0:d1:ce:3c:d5:2d:25:ad:78:4e:
8f:91:85:dc:e7:e0:ce:d6:51:c8:73:35:e4:1e:de:
48:b1:50:66:bb:2a:7b:2f:9c:b5:98:e8:21:84:6d:
51:3d:be:4d:2d:55:ff:02:5c:63:6b:b3:ab:5b:e5:
76:09:49:48:09:39:a8:38:d8:f0:e0:30:df:37:44:
df:e3:56:c0:c7:de:d7:a8:fa:de:5f:62:34:fa:20:
d6:e6:45:e2:f4:c4:dd:95:48:fe:d8:9d:4b:2d:7e:
82:de:44:2c:b9:4d:33:61:e9:b0:3f:4b:14:77:f9:
7d:8c:89:b5:db:63:53:97:1c:5a:f3:eb:77:0c:66:
8e:ed:fd:45:91:7d:1b:66:c4:a4:e3:e6:c3:81:a2:
65:91:58:4c:46:2b:58:94:f2:97:a9:2e:4a:ea:0b:
fb:1b:21:9b:bb:2f:6a:27:73:32:81:7b:e5:08:a5:
4a:86:09:1f:f6:f8:09:53:71:11:6f:70:bb:62:cc:
fd:32:b3:35:dc:e5:4e:a1:37:ae:ef:ca:cd:cb:8b:
a1:66:1c:59:61:ce:3e:a9:d1:3e:11:5c:6c:c3:f3:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:55:F2:1C:E7:05:78:68:3B:42:AF:4D:20:9B:7D:59:AA:D8:3B:EE
X509v3 Authority Key Identifier:
keyid:B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:16:06:57:41:17:ab:b7:e8:d3:aa:38:a7:34:38:cc:86:37:
a6:75:5d:2a:5a:ef:1c:6d:8a:f5:a9:35:34:b9:6a:6b:e2:3b:
aa:2f:3d:4e:43:f1:cb:a1:a2:cb:7b:bb:83:3b:f8:b3:13:ed:
2b:38:34:59:4f:27:dd:ae:1b:e1:65:61:d1:a1:9e:b6:0a:f2:
07:9a:82:3b:c2:15:a5:0b:5e:dd:40:e3:1d:8d:bc:0e:aa:95:
f7:12:d0:09:50:70:12:1a:a0:16:fe:4e:68:4b:51:0c:7d:03:
60:bc:a1:6d:08:5c:f9:5d:e0:75:c4:38:2e:a9:c3:93:37:62:
6a:0b:18:18:8f:e2:88:26:85:6b:2e:d0:09:e7:5e:3d:86:1e:
e3:e6:3c:34:73:c5:1c:9b:59:37:27:1d:19:f3:d4:b5:b4:49:
f1:3e:54:74:fa:e1:c5:b8:09:27:05:da:c9:be:00:3a:03:b9:
12:5d:0a:21:f5:46:20:e2:ab:f0:b0:de:d3:04:71:17:9e:fe:
46:b6:cb:d9:d2:e6:43:b2:d1:f9:81:6a:a7:16:d0:12:a8:bc:
a8:0a:81:25:bd:09:91:14:e2:b9:9d:a3:fa:4c:96:a1:75:8a:
b1:ab:2a:cd:33:b9:2b:f0:c3:ec:b5:57:85:a8:74:e1:80:0a:
6f:e3:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:52 2025 by rpki-client