Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json)
Hash identifier: AmuL1kHpaVipn4O8EtUFI4QSKZc7H5xMLwVy4tTml8M=
Subject key identifier: 4B:B9:50:C1:CA:01:A6:A5:B4:FD:0B:87:16:6E:08:AA:7E:D2:7E:6A
Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD
Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
Manifest number: 0116
Signing time: Fri 31 Jan 2025 03:59:36 +0000
Manifest this update: Fri 31 Jan 2025 03:59:35 +0000
Manifest next update: Fri 07 Feb 2025 03:59:35 +0000
Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: w8YoYSJqEyYwSimUd6B7Crk8xM3mCUmn3oal5diaWiA=)
2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: 40lvaLr1gKHAad8xOy7yfS2hh56AhlCYkcilzIpf0Sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD
Validity
Not Before: Jan 31 03:59:35 2025 GMT
Not After : Feb 7 03:59:35 2025 GMT
Subject: CN=679c4aa8-6939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:2f:b0:39:76:04:f4:ae:01:e0:dc:7b:df:
5f:1e:f6:41:44:ad:cc:07:b7:22:24:cc:ae:a0:5c:
e8:88:c3:11:75:ed:83:10:04:b0:44:d0:35:76:29:
e4:30:c4:36:33:59:3b:83:8b:d1:16:90:61:c9:ad:
77:6f:74:32:1a:9f:48:38:12:d0:a1:03:92:1b:81:
f6:84:e2:db:01:03:68:d4:6e:6e:94:43:dd:b3:fe:
0f:1f:4d:c0:a8:2e:9d:9d:2b:1c:15:72:5b:e6:d6:
47:ef:e2:80:a4:3e:42:50:95:4e:31:5a:7f:9f:04:
8d:1e:59:2c:af:95:12:9e:9b:32:e3:0d:dd:10:02:
1a:4b:4b:15:33:47:2f:66:26:1a:76:d1:49:b8:1d:
85:72:c4:e9:38:97:2f:35:f8:65:b6:a5:0e:fa:49:
4e:dd:d3:1d:63:c5:ef:f6:fe:1e:cb:90:81:d1:9e:
1b:22:77:c5:81:d9:db:fb:c7:48:13:c5:8c:1a:c6:
54:96:48:72:ad:50:79:33:94:c7:4d:8f:d9:b7:14:
a1:7d:53:eb:00:2a:18:b2:a7:28:76:ec:79:b0:56:
11:25:e6:b0:02:31:93:bd:7b:03:88:62:98:c3:3c:
3f:f6:ea:08:d7:48:21:94:fb:05:6d:e8:0d:75:99:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B9:50:C1:CA:01:A6:A5:B4:FD:0B:87:16:6E:08:AA:7E:D2:7E:6A
X509v3 Authority Key Identifier:
keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cd:2f:60:2c:32:ae:0d:b6:4a:17:e8:22:0d:46:16:5a:95:
5e:af:e1:42:a9:46:ee:95:d0:43:91:44:fb:51:d4:f0:c8:03:
66:d6:a3:0f:ce:4d:e4:79:d3:b2:94:d3:27:ea:bd:21:91:d0:
57:79:15:b5:b1:a9:6f:d6:72:7f:21:f8:24:58:91:d1:dc:32:
f1:26:ee:67:7c:ba:80:03:c3:61:0b:c2:31:b1:7b:84:b9:ee:
22:f3:58:0b:33:1a:58:f7:02:ac:64:21:61:91:d4:05:ce:98:
a7:5c:1b:ce:fd:6d:f9:d7:10:57:fd:94:0a:29:49:53:17:03:
38:b3:93:e9:79:de:02:e1:34:12:84:7f:96:30:ed:de:28:6e:
64:44:83:85:9e:88:4a:db:87:b4:5b:e4:82:fe:6d:77:d8:b3:
6e:93:07:9c:8f:1a:22:a4:8d:18:82:54:2f:11:e7:13:bc:cb:
d0:24:06:34:f9:77:6e:f6:50:b0:39:b1:2e:25:3b:a5:f3:48:
fe:45:bf:11:32:20:20:dd:8f:c2:01:1d:bd:a0:dd:2f:5e:21:
70:69:5d:60:99:e1:9f:88:14:22:33:9e:cf:b0:00:9b:01:ee:
ac:c4:82:fe:e4:32:ba:99:38:6a:1b:a7:e7:42:c9:58:e5:a7:
9c:f2:26:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:49 2025 by rpki-client