Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json)
Hash identifier: xvgYKdeibE0PFMatt/VLzUUpTf8bj/RbL+yodhMmL5I=
Subject key identifier: FF:55:C5:87:E5:32:BE:AA:DA:E0:C8:82:7C:01:74:AA:1A:7B:BE:64
Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Certificate serial: 231A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
Manifest number: 2300
Signing time: Fri 31 Jan 2025 15:51:41 +0000
Manifest this update: Fri 31 Jan 2025 15:51:41 +0000
Manifest next update: Fri 07 Feb 2025 15:51:41 +0000
Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: 8w5k6ecrr361kGRkF0EP0hz1AqfpcaDMfk6wEnwKkCE=)
2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: SVFtlSzgsbl94LKJE/MqOpvXoyEaSOVfShQjoppkD5M=)
3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: SmF6p3k95KsM+SMEI2F1sl2qA3ioWO3N9renwiZgrBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8986 (0x231a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Validity
Not Before: Jan 31 15:51:41 2025 GMT
Not After : Feb 7 15:51:41 2025 GMT
Subject: CN=679cf18d-04e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:29:4f:4d:76:0f:0d:7b:7e:3a:c2:df:55:
b5:df:0e:33:67:35:f6:9c:85:24:10:a4:27:70:b2:
6c:fa:68:e1:92:2b:83:19:28:dd:62:ef:19:a7:a4:
75:d0:2e:0a:6a:c6:bd:3b:d8:ad:44:b8:a1:14:4b:
59:25:b7:f5:b5:4e:cd:58:60:9b:8a:97:34:36:19:
4f:1b:a8:b8:5e:83:2a:8d:69:2d:19:67:d9:b9:96:
47:50:4f:9e:2e:01:f4:e2:fb:ea:03:cb:83:d3:6e:
53:a9:0a:aa:59:6f:4d:e5:61:49:d6:8b:22:e1:53:
cb:31:34:c7:7a:92:6f:14:a2:f0:9b:5f:aa:4d:2c:
08:1a:b5:57:e9:20:44:50:72:23:6e:24:a3:b9:da:
f4:ed:90:18:0f:7b:b0:d3:d2:d9:69:2e:c0:7c:b0:
ef:4f:3b:01:43:96:aa:cf:ef:a8:96:15:c2:ef:8e:
da:bf:6e:6d:1d:9f:e6:c0:85:cb:4c:7e:9e:0d:64:
6c:74:94:49:ae:2e:a5:a1:1f:19:9d:44:93:4b:b9:
92:52:32:21:9d:6d:99:85:21:6e:7a:01:e5:20:d1:
83:fd:24:f2:74:76:f9:26:24:c6:27:7b:d9:6a:96:
11:e4:ae:cc:9f:d5:30:c8:b5:ff:34:8d:e8:6a:eb:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:55:C5:87:E5:32:BE:AA:DA:E0:C8:82:7C:01:74:AA:1A:7B:BE:64
X509v3 Authority Key Identifier:
keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:da:cc:4f:cc:2b:61:4c:67:11:7c:31:d5:44:30:7c:0b:10:
e5:f7:e6:ef:d4:06:a9:5e:e1:c6:3b:ae:8c:8c:72:8c:8b:86:
b9:96:74:76:5f:88:db:e6:b5:2a:82:a9:af:d7:e1:e0:a4:6b:
ee:16:13:f0:a9:61:d3:cd:57:e9:7d:d6:95:f9:54:75:65:15:
66:ca:7d:1e:94:29:b5:08:f6:c2:78:1c:c8:d8:57:82:eb:1c:
95:48:56:40:5a:71:e8:8e:fb:2f:1c:32:eb:ba:57:37:a1:41:
83:ae:3e:1d:2f:ae:41:ac:9e:70:2e:e8:f7:a0:82:df:05:bb:
29:ca:8c:cd:ca:d7:3b:db:03:81:b9:1d:cd:da:41:34:43:82:
c1:2a:1b:ce:72:ba:97:aa:7b:91:5a:b2:a3:9d:54:93:35:8f:
f2:84:1b:90:03:5f:e0:25:b3:7e:a3:c5:89:b4:9c:64:db:df:
6d:b3:da:39:e6:0a:64:c4:b2:95:f5:c4:47:16:04:a9:58:ce:
85:f2:11:dd:d4:94:3d:af:4f:20:3b:a3:96:02:e5:18:48:64:
64:1a:95:4a:e2:57:f7:a6:ed:67:ef:46:51:dd:6f:f8:67:dd:
96:dc:5f:02:c8:ec:9b:61:26:f7:9b:e1:bb:85:42:b3:7c:8c:
9a:8e:4f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:40 2025 by rpki-client