Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft
File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json)
Hash identifier: Qqz56M/0RGc0KxqznI6EG1ipohaxgYwCPSezJ+++CcI=
Subject key identifier: 43:C6:2D:24:EB:0D:2E:2C:8D:59:77:05:53:57:B0:0F:89:CF:C4:74
Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97
Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597
Certificate serial: 0FE0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft
Manifest number: 0FD0
Signing time: Fri 31 Jan 2025 14:24:15 +0000
Manifest this update: Fri 31 Jan 2025 14:24:15 +0000
Manifest next update: Fri 07 Feb 2025 14:24:15 +0000
Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: Y/viIA38ByUhPbfUhYu7Mf9hwAtWcH5yZaElpDoUzHI=)
2: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: 7YuoX9OkBSRUQiHpsiuHEMGmDB7ygNEWHmpkRA4QfgE=)
3: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: Mjf+9MFV/8wopOF7hLs3Tt14yZvRKLf5RcXcRhi35uI=)
4: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: vv5/sNroDyn31EV1FuwDRkKZ1Ky/CQIEoorZo83v9h8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4064 (0xfe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597
Validity
Not Before: Jan 31 14:24:15 2025 GMT
Not After : Feb 7 14:24:15 2025 GMT
Subject: CN=679cdd0f-a87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:87:01:75:05:ae:34:56:02:34:69:45:f7:
11:16:03:d7:47:5a:2e:60:ca:8f:9b:55:3f:54:1a:
9b:94:19:df:d2:a2:29:f5:14:3d:31:57:48:db:73:
7a:b8:84:39:e4:e4:fc:cf:fb:a9:02:14:62:99:cb:
81:c1:03:6f:5f:0d:3b:39:c2:88:c0:41:eb:e7:74:
e7:ec:17:e3:9a:96:ed:42:d6:e8:0a:d1:32:84:b0:
e6:ed:ce:f3:ca:15:19:06:3a:4a:bc:1b:d6:73:2c:
99:85:e3:0f:04:b0:a5:bf:a0:10:f1:c2:b6:45:8f:
5f:64:50:3c:09:6f:5b:5a:1e:72:6e:c5:2a:a6:9b:
dd:ef:6c:2d:0f:52:c4:02:f2:49:da:57:00:60:73:
e5:f0:92:8a:34:45:76:81:4e:f5:e8:d9:d0:57:ec:
f2:3a:84:2d:4d:c9:77:35:5d:25:f5:40:8b:cc:6a:
2c:d4:05:f2:34:01:03:37:3a:0a:59:d9:71:04:64:
b5:de:b0:2a:c9:3e:77:f2:7b:68:d7:67:b4:b5:f8:
31:68:fe:bf:8d:0e:7a:e1:22:16:4d:9d:9e:4f:06:
8b:12:42:ee:15:1e:fa:3c:c9:3b:7b:f1:b4:61:4a:
e9:d5:48:a3:f2:ee:9e:e1:aa:24:26:77:e1:9c:32:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:2D:24:EB:0D:2E:2C:8D:59:77:05:53:57:B0:0F:89:CF:C4:74
X509v3 Authority Key Identifier:
keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:c4:4b:50:a2:ca:dd:b7:bb:7d:92:20:6d:b2:e3:b9:5d:53:
ab:67:e3:58:4a:cb:7a:d2:0d:ef:0d:55:c3:ac:c5:68:ec:5b:
08:17:5b:a4:b7:fe:20:c3:a9:c7:53:3e:99:64:10:31:04:3b:
20:fd:ee:6d:6f:52:a3:e8:34:62:53:58:29:b1:95:5a:52:08:
12:7a:75:3c:28:59:64:ae:96:e7:33:82:fe:c7:bf:25:75:7a:
15:67:ba:a1:22:11:1b:d6:29:63:ab:4a:99:ae:f3:b6:79:b3:
92:61:81:31:0a:8d:9d:52:7a:21:f8:93:f6:21:fd:3b:0c:d5:
f4:83:38:6f:5e:02:c9:a3:50:6f:39:52:d7:f5:b5:1f:ba:b4:
d6:71:33:9b:6a:fa:a0:db:91:ec:79:3a:18:b7:eb:3a:be:cc:
c3:c7:43:d0:d4:ed:59:b9:e6:73:fa:57:14:de:fd:5b:17:9b:
45:e8:a2:62:8d:1c:58:92:6b:2c:b9:14:a7:66:45:cc:cd:2c:
0c:6a:50:89:4b:18:a0:80:82:5b:a8:bb:36:92:7d:bc:20:95:
0c:8c:ac:cf:88:d8:4a:3f:f4:b4:55:c5:1e:eb:61:f5:10:04:
fa:9d:b7:8a:5d:18:90:85:eb:8e:cc:a9:fe:2c:c9:ad:b1:ae:
91:0f:22:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:20:38 2025 by rpki-client