Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
File: V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft (raw, json)
Hash identifier: PPSf8BAxKdIib3ZvejJJwZAqRiSOfRPpXvwMvEmxVsA=
Subject key identifier: 90:EF:39:A7:75:26:5F:8C:30:F7:24:18:82:5E:D4:4B:97:5B:0C:10
Authority key identifier: 57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
Certificate issuer: /CN=A91955D9/serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 06:49:10 +0000
Manifest this update: Fri 31 Jan 2025 06:49:10 +0000
Manifest next update: Fri 07 Feb 2025 06:49:10 +0000
Files and hashes: 1: V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl (hash: nzX6orOCbGlkD0X2TWb6abGRmkYNGeq22LjbYD+0kfk=)
2: 0C55FB74A28611EFBD5A8C11C4F9AE02.roa (hash: gwKslIrZuBEZHnnxWdG6o9381Edd6Jf5bzL+EIGR9Fs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955D9/serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Validity
Not Before: Jan 31 06:49:10 2025 GMT
Not After : Feb 7 06:49:10 2025 GMT
Subject: CN=679c7266-846e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:8c:f9:22:6e:16:ec:ea:dd:b7:5f:17:2e:
ab:32:68:4c:b4:b3:71:30:09:5a:7a:40:b4:cd:d5:
64:4b:04:1c:3a:aa:c1:f3:62:83:21:12:12:61:60:
8c:45:37:ed:86:cf:1d:2f:1e:fc:e4:31:ec:84:3e:
97:45:d6:55:35:26:4e:50:7f:cb:95:dd:27:71:14:
4c:e8:68:5c:47:c5:d0:df:2b:fc:d8:d4:54:22:02:
03:14:1d:6e:4c:dc:91:f1:74:ad:e7:5e:41:45:ad:
78:bb:53:0c:af:59:8f:bc:ea:3b:35:c3:24:99:19:
e2:9e:df:24:91:0e:0b:ee:84:6b:d5:52:4b:e5:44:
51:10:26:e3:42:4d:6e:98:3b:d9:fe:a9:d9:50:37:
83:6b:a5:38:14:62:87:b4:50:80:99:74:1a:f5:5d:
d2:65:53:94:7f:6c:e7:b5:d9:28:21:80:b9:53:35:
11:9d:89:6a:af:50:f1:e5:c5:75:fa:4d:91:0d:06:
dc:9e:ac:01:73:18:38:6a:f7:f7:89:c0:bb:a9:13:
35:bf:e7:90:d5:a3:15:2b:89:1d:03:3b:b1:48:a7:
98:15:c3:a3:0a:d7:51:51:1b:d0:55:e1:99:57:c6:
4e:9d:92:59:88:ad:4b:c6:6f:14:3b:a5:11:da:8c:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EF:39:A7:75:26:5F:8C:30:F7:24:18:82:5E:D4:4B:97:5B:0C:10
X509v3 Authority Key Identifier:
keyid:57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:58:18:85:a1:ac:fa:17:34:30:48:7e:0e:95:03:b1:e3:70:
cb:04:85:0c:05:dc:dd:d4:39:e4:3e:3d:89:bc:f2:69:a7:06:
4b:ee:35:5a:7f:4a:1b:09:dc:48:2e:40:ca:46:33:df:86:6a:
93:76:8d:6c:4a:6a:2c:13:39:14:73:68:8e:8b:32:ff:b8:b2:
87:48:e9:07:72:55:a4:cd:5d:7c:44:27:64:6d:90:b9:da:67:
44:10:a3:43:b7:a0:43:40:f5:ab:95:b9:2c:8c:53:2e:ae:20:
f5:ab:91:ac:36:f1:5a:56:25:24:c1:0a:31:28:43:f2:b2:84:
3e:5b:de:16:38:58:8e:b4:b7:4f:20:78:c3:e4:f1:56:bf:b8:
b4:ab:c4:5a:56:5d:e7:a6:03:dc:f1:e2:b4:52:2f:9d:f4:a8:
30:d0:55:b6:48:99:d7:17:a4:f1:e0:82:ff:a9:64:39:2f:d1:
92:ad:d5:5b:23:a7:04:4b:d0:91:09:2b:45:37:c4:51:45:f9:
97:38:51:2f:a3:cb:ed:d4:1c:c9:2c:42:ad:b7:f7:9e:bb:86:
b4:b5:43:17:35:43:f0:62:48:4c:6f:5e:91:60:cf:63:55:05:
68:9c:05:b4:44:50:b2:40:e9:5d:92:77:8b:9c:14:c5:bc:6d:
2a:b5:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:25:55 2025 by rpki-client