Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
File: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json)
Hash identifier: DQgrRuwwYHCf6QMjcEys626G/VDl/CcyqGIXRdbE91w=
Subject key identifier: A3:5E:7E:14:EB:D8:F9:B7:93:19:D5:DD:1F:2B:14:8C:9E:51:88:C0
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Certificate issuer: /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 06:49:14 +0000
Manifest this update: Fri 31 Jan 2025 06:49:13 +0000
Manifest next update: Fri 07 Feb 2025 06:49:13 +0000
Files and hashes: 1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: K55bVdRhcQ/og6QB7yC502IveSnLdBgTf54SHWscyYw=)
2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: 97I65+Q066TDiRkq5FVajUp8ATxWSUAGmGMHS8ACfSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Validity
Not Before: Jan 31 06:49:13 2025 GMT
Not After : Feb 7 06:49:13 2025 GMT
Subject: CN=679c7269-3332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:51:d8:5a:d2:34:94:c5:76:cc:96:76:c1:
59:b0:7b:30:36:1e:9e:23:7b:75:b0:b4:03:33:c7:
9a:e9:63:d2:f8:81:d0:9b:b3:d7:58:46:fb:b9:3f:
8b:90:cf:3b:23:e5:e7:52:73:1f:2a:21:4b:50:52:
fe:d9:a5:51:07:92:0c:5a:c5:ca:79:0b:58:ae:cf:
3b:74:c5:96:b0:cb:b4:f5:b0:60:86:56:7f:01:20:
a4:7f:27:00:95:1f:f2:ab:9d:60:b8:86:f8:b0:66:
38:b1:0d:11:12:db:a5:15:3b:09:1e:ce:99:28:41:
75:b0:6d:0e:12:b5:9d:1e:a8:4a:9e:df:fa:1f:04:
72:b1:14:3e:03:93:91:f1:0d:c0:89:6f:fc:f0:c3:
11:78:b4:a0:c1:b7:35:cb:85:07:64:d4:81:db:ef:
83:e5:8a:aa:86:eb:53:fe:98:19:55:f7:94:8d:39:
f3:47:7e:c8:df:73:8d:d1:72:86:31:00:aa:41:22:
29:24:03:a8:98:8a:ec:78:55:b9:34:b0:ca:1c:ed:
58:b5:3e:34:25:34:c1:2e:b3:bb:1a:9b:4f:3d:47:
ec:55:8e:af:c1:3b:d6:be:e8:0c:9e:b0:52:5a:94:
62:9a:9f:34:8e:62:e8:c1:9d:11:79:f3:e0:8a:95:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5E:7E:14:EB:D8:F9:B7:93:19:D5:DD:1F:2B:14:8C:9E:51:88:C0
X509v3 Authority Key Identifier:
keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:c8:27:29:cc:0b:b7:38:e0:37:6f:5c:6a:be:41:23:ad:02:
93:e3:d9:8b:7a:11:83:86:b3:9b:b6:5e:86:54:69:e6:01:06:
62:c0:12:2d:9f:f4:53:4f:8d:77:d8:f2:05:e1:cf:a4:f4:45:
8d:19:ea:aa:07:62:19:bb:9b:24:80:c0:d5:ee:7b:b0:15:74:
03:09:76:06:c0:0f:73:59:d4:a7:40:b4:05:a2:a4:78:0f:8d:
fb:22:1c:dd:1a:d9:21:7e:e4:2e:3c:e0:e7:dd:8b:21:b6:8c:
80:87:1a:c2:ac:e3:e0:c0:94:a9:db:ef:08:51:46:70:a0:96:
b0:ef:4b:bf:02:5d:22:16:0e:60:09:71:e7:87:01:08:06:7d:
25:b0:7f:2e:ec:c1:d6:15:77:bd:cb:50:34:8f:03:d1:5c:96:
8e:d7:54:7c:c1:39:be:5d:ad:37:2d:67:37:1c:81:67:f0:4c:
f2:d6:3a:4e:93:02:87:73:fa:90:59:24:56:f6:ac:39:e0:1f:
45:5c:fe:d7:f5:8c:4d:06:59:66:b6:b1:8c:0c:ef:be:37:f5:
cf:37:dd:4e:dd:1d:15:63:39:68:52:72:a5:b7:4f:e3:2c:d3:
70:07:30:f7:0a:25:46:4a:11:83:19:ab:cb:0e:26:57:3a:2b:
88:7f:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:30 2025 by rpki-client