Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json)
Hash identifier: P/mw6XnJq4/IW9ps4aiAyPn73+gQvineHlhFJLOmTB8=
Subject key identifier: C5:C1:23:5F:55:F5:AB:EA:21:D9:46:3B:2B:2C:4E:9B:7D:55:6A:80
Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66
Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866
Certificate serial: 165C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
Manifest number: 1650
Signing time: Fri 31 Jan 2025 16:42:16 +0000
Manifest this update: Fri 31 Jan 2025 16:42:15 +0000
Manifest next update: Fri 07 Feb 2025 16:42:15 +0000
Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: 8C2mEQNAiS8NEmWzBwJGfAMbBWX4SJM43yHiyZuoq7Y=)
2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: rgg5mb9NaJrKC43B9kmiIIRXNUmpRJVP8cl+RRNBMZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5724 (0x165c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866
Validity
Not Before: Jan 31 16:42:15 2025 GMT
Not After : Feb 7 16:42:15 2025 GMT
Subject: CN=679cfd67-1cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:8b:a0:94:f6:49:db:f7:28:1d:24:48:c3:
30:c1:b6:2e:83:3f:00:48:64:50:7e:b2:20:19:84:
df:9d:fc:75:b7:66:3d:3e:2a:e2:80:52:a2:cb:43:
ce:62:2a:fe:a1:be:40:70:ff:5f:ca:39:91:9f:8f:
97:64:9f:d4:3b:04:23:c2:7b:2c:46:60:51:46:92:
f8:cd:2d:d5:a6:b7:a2:a1:bb:b7:2e:34:f4:de:8e:
01:50:80:14:64:7a:5b:31:6e:f4:e3:a7:b1:3f:9d:
5f:97:0d:c9:3b:e3:24:33:de:88:65:d9:76:1e:fa:
b0:ba:ba:cf:f5:ea:d0:54:0d:8f:7e:73:95:c9:76:
c2:60:e8:73:f3:90:84:2f:d1:a3:0c:a5:28:46:85:
ec:d1:68:28:61:02:c9:b4:bb:d9:99:02:e0:c3:e6:
02:d8:6d:a0:ad:c1:ab:d9:c6:02:e2:c4:8e:20:db:
5b:f7:e6:20:56:c1:8f:26:62:b0:7e:ee:ae:a5:a4:
a3:d3:3a:53:9c:74:7f:a9:5a:64:eb:fb:dd:fa:35:
96:13:4b:36:8b:d5:8b:b2:3e:f3:c4:5c:00:48:7b:
60:88:84:41:a0:78:77:08:6c:56:c9:f4:37:09:d1:
90:74:7c:fc:d7:bb:f4:55:01:f1:0a:c2:39:55:f9:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:23:5F:55:F5:AB:EA:21:D9:46:3B:2B:2C:4E:9B:7D:55:6A:80
X509v3 Authority Key Identifier:
keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:92:62:3d:c7:d2:17:cf:23:30:44:54:6f:07:a3:74:30:
2d:43:2f:e0:30:63:6e:eb:40:c2:53:a6:67:8b:4d:46:c9:46:
2c:3f:90:47:89:43:ae:af:ad:fa:7d:27:2e:0f:20:f6:23:90:
c5:cb:73:6f:f5:b0:d0:58:6d:e5:04:56:8d:45:ad:97:b9:c0:
b0:62:c5:b4:7e:d1:95:b5:14:9f:fa:2e:46:4a:aa:de:72:5c:
9a:7a:56:b3:63:4c:00:ef:87:b6:76:3e:c0:af:84:0c:d7:b5:
b6:46:fe:c9:84:3e:fc:ba:46:af:59:15:f4:93:20:e9:cc:39:
57:c0:cc:9a:f9:db:2d:c9:41:75:79:98:8f:e4:53:8c:fe:9e:
58:e1:bf:78:57:01:69:02:4e:fd:84:3e:e2:ca:78:7e:75:41:
3c:d3:96:c9:1f:27:df:bd:80:0a:b8:7f:7d:77:61:1a:78:fb:
2b:45:38:cb:4a:1c:33:3d:da:09:a3:ef:5b:bf:62:ed:86:1f:
99:00:48:eb:83:80:d5:93:07:59:d7:39:b8:af:7b:6a:5f:fc:
b8:88:aa:4d:27:86:21:7e:37:d9:37:6e:84:fb:15:98:5e:f8:
14:fd:0a:ed:7d:4b:64:95:4d:1d:ac:ed:5a:b8:f3:a0:28:4a:
eb:61:4a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:23 2025 by rpki-client