Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft
File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json)
Hash identifier: WtISwJ9dg5i4BXeO8VPO1vtHwIW2/XIGZ4cq6zt4P3o=
Subject key identifier: C6:AE:30:8A:B9:BB:8F:A7:46:51:53:87:EB:90:AE:34:9D:D9:D4:16
Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF
Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF
Certificate serial: 1FC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft
Manifest number: 1845
Signing time: Fri 31 Jan 2025 17:18:13 +0000
Manifest this update: Fri 31 Jan 2025 17:18:13 +0000
Manifest next update: Fri 07 Feb 2025 17:18:13 +0000
Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: Dn9Z5sPJ0LVyE3sClheGmChmZRIM8zBk7WB2NlNARtA=)
2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: zrGhz5eTWvxDs7l8u0FFEcHmthdaKI1r05igm+ZZOCA=)
3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: 8vFyR44qzve6eQFGrf+0iU1ZgE7HJhnti0y5mu5nwao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8132 (0x1fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF
Validity
Not Before: Jan 31 17:18:13 2025 GMT
Not After : Feb 7 17:18:13 2025 GMT
Subject: CN=679d05d5-0a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:4a:08:e9:8d:02:91:1c:15:7f:b2:0a:1f:
5b:47:90:8c:57:22:db:9e:6a:8b:36:18:dd:8d:17:
01:f1:d8:dd:78:fe:96:81:40:21:29:3f:d8:7b:68:
f5:f1:c5:26:c0:a5:e6:2c:5c:31:6c:02:21:c8:15:
0d:a8:9f:ed:ef:34:dd:1e:cf:a5:32:9b:86:07:c4:
41:25:07:e1:b5:5f:60:d6:fd:1c:fe:cb:ef:12:70:
f1:54:55:f1:66:a0:77:61:75:12:f3:b5:05:45:a9:
1a:57:0c:60:55:53:87:da:c4:24:87:8c:00:38:39:
b4:4b:56:57:b6:2c:a1:ef:91:f3:cd:00:47:5a:76:
f6:a1:7b:0e:be:d8:69:ac:8a:1b:a8:81:2d:25:fc:
7b:54:c9:33:d4:5b:e8:6c:3c:45:75:00:08:e8:ed:
3e:28:f2:a3:4d:00:f3:ae:d7:0d:c5:bc:32:15:d9:
51:4a:7c:65:49:e3:e6:57:df:e3:e8:e1:cf:5d:66:
95:0a:93:07:8f:03:79:1e:56:2c:62:cb:4b:43:28:
02:e9:8e:6a:99:56:8e:8e:ec:a7:98:32:48:18:f7:
cf:5a:5b:d0:a1:52:87:79:b3:10:b4:74:8a:87:42:
5a:df:58:4b:0a:47:8b:96:07:94:6c:06:5e:5c:ea:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AE:30:8A:B9:BB:8F:A7:46:51:53:87:EB:90:AE:34:9D:D9:D4:16
X509v3 Authority Key Identifier:
keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:73:0b:f1:a0:d1:5b:10:af:97:c7:59:e7:34:69:46:69:40:
e4:62:30:94:a6:57:d2:b1:f0:42:f9:52:21:14:f0:2b:ce:57:
d4:eb:73:c1:47:54:f3:84:93:f8:17:60:bc:58:8e:89:ae:83:
22:b1:0e:b9:02:03:6d:bf:69:55:a5:fb:c7:20:a5:ca:75:10:
f9:70:33:12:5b:1d:a2:a9:24:bc:4f:65:c2:b9:96:ba:11:d4:
cd:85:dd:ce:a3:8a:2a:0b:0e:3e:e6:5d:c5:a7:9a:d6:85:77:
a3:7d:ce:72:fa:c8:3b:cf:c8:59:16:83:87:09:d6:98:f1:5e:
5c:fc:9b:bb:16:44:37:68:2f:33:09:4b:99:ac:44:96:3e:de:
31:bf:17:3f:a7:bf:dc:bd:6e:7a:21:2a:8f:69:ea:3e:0f:2a:
ac:e3:93:eb:39:79:40:1b:3f:01:22:99:97:2c:9a:dc:d1:01:
a5:e3:52:e3:53:92:1c:e4:f1:fd:24:58:2f:57:24:97:3a:7f:
d5:bf:d1:67:4a:d1:49:c6:d1:da:7f:3e:ff:af:58:32:59:51:
e7:4e:7c:66:82:99:6b:73:c1:f2:6d:a6:e0:f7:2e:7b:78:ac:
e8:fb:9a:d3:d1:1d:db:63:24:cb:64:75:66:d7:ed:48:34:7c:
a9:c7:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:03:04 2025 by rpki-client