Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json)
Hash identifier: YE8TXlUXxqCAH79JxGdyHK15DeDzniK2NahuljDr2JA=
Subject key identifier: 4C:A6:2C:DA:C7:7A:7C:21:F2:65:7E:C2:D7:48:97:78:FC:0D:D6:67
Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Certificate serial: 3450
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
Manifest number: 344D
Signing time: Fri 31 Jan 2025 14:51:39 +0000
Manifest this update: Fri 31 Jan 2025 14:51:38 +0000
Manifest next update: Fri 07 Feb 2025 14:51:38 +0000
Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: udKn1F9XOhuw0/JuqyOGYzUIwewO0Q6sKg+pAhyI/xo=)
2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: OUXfbXIv2KGUcMt1yzZeYDgmZBLfK/Afrx3klkuMb44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13392 (0x3450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838
Validity
Not Before: Jan 31 14:51:38 2025 GMT
Not After : Feb 7 14:51:38 2025 GMT
Subject: CN=679ce37b-bf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:82:3f:c7:d2:44:95:f2:fa:e1:7c:53:c6:
30:9c:4d:a6:6c:5d:b5:4e:4f:ec:e0:ed:a8:cc:6c:
e3:54:75:24:02:b4:fb:5e:64:52:3b:e9:8e:4d:38:
5c:e6:cb:20:74:cd:b9:c1:4e:3c:e0:5f:4c:c1:23:
f9:da:57:66:71:14:2b:d1:c7:7d:17:66:53:b4:9b:
47:a9:3b:15:00:06:83:92:84:4a:fc:8e:fc:bc:da:
96:86:94:4f:1d:c7:e8:53:10:72:85:62:e5:69:34:
e7:1a:62:19:a5:b2:bc:4b:d9:6f:1e:54:8c:f3:20:
3e:8a:23:ac:45:3c:06:18:17:8f:1e:75:05:28:87:
2c:75:25:05:a8:96:a2:e3:4a:6e:e9:2b:20:ff:d1:
ea:1a:e5:49:a9:8f:b8:4f:31:1c:e8:87:35:46:e1:
82:cc:eb:e9:bc:db:b3:04:45:d0:c2:cd:d4:c3:14:
f1:86:8a:b7:fc:71:7f:79:f8:85:a2:44:a4:a1:18:
1c:6a:69:a0:57:f9:36:cc:9e:b2:b9:8f:25:42:f2:
78:5e:9a:0b:47:61:6b:c0:b0:6f:0a:52:a3:e6:9e:
68:4d:c4:3b:9e:03:88:3d:d4:2b:79:eb:b1:28:94:
98:12:69:c3:0c:79:fe:22:02:ee:dd:57:8a:25:f0:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A6:2C:DA:C7:7A:7C:21:F2:65:7E:C2:D7:48:97:78:FC:0D:D6:67
X509v3 Authority Key Identifier:
keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:38:9f:90:13:1d:73:22:9b:e4:cd:b1:d4:8f:e6:4a:3a:f3:
7b:b7:4d:0c:d4:b9:94:8e:1b:30:e4:bc:38:b7:88:b6:be:0e:
c3:09:3c:f3:7f:ff:99:53:0a:2f:2e:a9:9f:33:e5:23:8b:9a:
93:f6:82:5d:76:02:54:b9:ca:88:2f:f3:61:b8:6e:44:ce:65:
d0:48:a1:89:3a:e2:28:51:c5:aa:eb:f8:3e:bb:98:9f:e3:ec:
f3:2b:76:56:c0:4b:e4:12:9b:c5:70:96:1a:1c:b8:71:0a:88:
c6:2b:8f:3f:1c:f8:5b:1a:aa:08:3f:22:73:30:f9:36:3e:fd:
a3:9a:de:c7:c8:e8:3d:f9:95:6d:57:70:93:b9:98:37:39:2b:
2d:a6:8a:3d:24:10:e4:6f:c9:6c:b3:d6:97:ab:b7:dc:d7:2e:
b2:86:7a:56:0b:30:83:6d:a5:39:60:74:78:89:c6:53:4b:7e:
bb:f8:2c:61:4b:6d:fd:73:fa:94:0f:e8:9e:32:53:bb:31:84:
8c:9c:30:52:04:46:0a:59:e1:af:5e:8d:25:7c:af:cf:47:14:
80:84:f8:e1:63:f1:c3:91:c8:8e:2e:6a:29:75:63:bb:7f:c2:
a4:a8:29:fe:e1:b7:b5:da:ad:97:5e:83:2f:71:6f:99:2b:8b:
a7:43:8a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:28 2025 by rpki-client