Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json)
Hash identifier: WBNH1A2+BExOV52mS3rmCZFxFrRE7fUq0pdRp6h9pdE=
Subject key identifier: F2:EE:C1:A0:02:63:9D:32:C5:63:FB:A4:F9:A6:A9:94:EC:36:F0:FC
Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A
Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
Manifest number: 93
Signing time: Fri 31 Jan 2025 05:35:06 +0000
Manifest this update: Fri 31 Jan 2025 05:35:05 +0000
Manifest next update: Fri 07 Feb 2025 05:35:05 +0000
Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: MLJTV/Y20oufjqIaPX0k+2alTcz8rANzUdtfgDo7g5Q=)
2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: C3Ga1a9eb1Df3VllPQUKdb207TqBrmGNq5XYCS2u3O0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A
Validity
Not Before: Jan 31 05:35:05 2025 GMT
Not After : Feb 7 05:35:05 2025 GMT
Subject: CN=679c610a-3e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:d8:37:18:b4:ae:40:8c:41:d4:80:26:e7:
9c:18:0c:22:cb:b3:57:c9:85:09:19:fc:7e:97:a0:
73:2e:af:ec:7e:17:63:fd:4d:51:e8:91:4f:4b:aa:
86:4d:25:b9:e2:61:84:48:51:da:c1:ba:eb:96:e0:
4e:fe:54:94:47:3e:c7:42:1c:18:f0:ac:53:96:03:
86:a5:64:55:7c:aa:31:82:ed:5c:83:f6:aa:68:d6:
28:a9:1e:5d:94:6a:95:58:ad:74:57:06:12:f4:3c:
d4:bc:6c:22:2b:dd:c1:34:85:d2:23:d6:e4:78:13:
6f:68:0a:b7:88:e7:9b:eb:6c:9a:68:6c:8a:28:69:
47:aa:12:68:8d:3c:75:4d:75:9e:a9:b8:be:7a:17:
36:82:3d:54:b2:b7:ed:0d:94:3e:17:eb:75:c6:29:
66:62:92:64:68:94:b9:b9:5f:a7:af:dc:2c:a5:68:
33:24:11:ee:4f:6b:2f:ee:b8:f7:56:7c:e3:64:cb:
45:0c:49:48:a0:1a:46:2d:89:ed:36:89:38:f3:fc:
dc:f8:8c:8e:bf:92:10:03:39:0d:f6:c0:ec:d3:77:
a1:a5:73:1f:d0:27:05:09:a5:50:80:c6:58:e0:ab:
33:f1:fa:fc:e1:f3:b2:3f:0e:9a:5a:28:b9:e2:83:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EE:C1:A0:02:63:9D:32:C5:63:FB:A4:F9:A6:A9:94:EC:36:F0:FC
X509v3 Authority Key Identifier:
keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:91:54:d3:28:81:d7:92:18:5a:01:d0:b8:53:43:c3:41:c4:
e5:1f:d6:84:7d:00:11:c4:ef:7d:8c:3a:2b:dd:2e:86:de:b4:
21:f6:69:b4:cd:62:4b:6d:7e:69:49:2d:c3:89:bc:7e:10:3e:
2c:39:03:44:43:47:31:43:1d:90:0d:0f:7f:96:71:fc:c4:f0:
14:e4:78:6f:03:68:02:ae:f6:ce:c0:a2:d3:7f:21:bf:97:40:
06:2c:90:2d:c6:c8:87:86:79:15:c9:c2:68:12:78:0a:ec:7e:
c9:de:20:e8:81:6b:53:34:d3:4a:48:5c:e8:c0:e1:07:0f:08:
6f:d0:4d:58:74:ae:ad:d9:4f:af:7a:06:1d:4e:72:d3:d3:0d:
6c:f1:0e:d6:61:4d:17:f7:2d:5d:c1:bd:3e:4b:c2:69:44:7c:
66:e6:1e:0a:2b:85:2c:b3:6a:46:00:63:99:41:38:25:a6:04:
1c:7f:20:5b:f9:a1:d9:4b:ff:f9:b7:9f:dc:ed:b5:9f:9a:e7:
12:bc:1b:06:bb:c2:12:4a:64:80:ea:ad:26:de:71:66:10:b0:
d2:b4:c9:e6:c6:71:73:d5:29:d2:bf:79:fd:7e:0c:01:ff:84:
68:72:82:59:9f:33:72:5f:f7:e6:e8:a1:a9:af:a5:b0:83:8a:
2d:fb:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:03 2025 by rpki-client