Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json)
Hash identifier: FlRdImd6/Z2qtKoJg8yae1qpv5gDDpsnsQKWH+MOdw0=
Subject key identifier: 98:D0:F4:AE:70:91:E2:F0:5C:91:D1:55:E3:B7:7C:FD:91:46:A6:35
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
Manifest number: C5
Signing time: Fri 31 Jan 2025 05:02:55 +0000
Manifest this update: Fri 31 Jan 2025 05:02:55 +0000
Manifest next update: Fri 07 Feb 2025 05:02:55 +0000
Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: s70KJ85W5FkuKTlLJ97K8f+BNnjRVlMVyzcz4sDHS08=)
2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: I3e2WX5FkLj8fgNCFQ6jmYeDVClwmyXsyQxKDqP/I1s=)
3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: +TwqMYXAUfRYKT/rIoFMc4HTsejtvJHJifZgXeXwhTg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Validity
Not Before: Jan 31 05:02:55 2025 GMT
Not After : Feb 7 05:02:55 2025 GMT
Subject: CN=679c597f-db94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:47:ae:c4:f8:5e:71:f8:e1:a9:91:60:24:
ae:29:8a:f1:3b:b4:fa:b9:f9:ed:e0:c1:77:d6:29:
fd:f4:6b:25:a1:84:b5:f5:46:20:46:5a:c9:d1:35:
46:74:d7:07:d1:c9:0e:81:3a:e4:d6:a7:02:81:ab:
7e:89:92:7d:e7:d3:40:4d:7b:34:7c:26:e7:ae:1a:
02:f3:98:fc:91:4e:44:54:60:ba:e2:b9:e9:17:b6:
32:a2:dc:ac:6b:fe:62:42:67:f0:5d:42:5b:f2:67:
41:76:11:80:96:2a:49:a8:36:12:99:a4:30:59:38:
90:8f:0a:ce:be:03:68:36:e0:78:0b:4b:9c:dc:66:
7f:bc:90:8c:18:60:12:1a:24:dc:9a:c7:53:62:7c:
da:af:d0:cf:5a:c9:9f:ad:5b:5a:11:2d:40:26:df:
fd:ed:c5:ec:00:c1:fa:77:d5:24:c4:85:6d:9e:b7:
df:21:76:81:00:57:5c:e8:db:f7:a8:ad:59:37:cc:
e9:06:af:a7:85:01:7b:80:b2:d4:91:24:e4:07:15:
e2:9b:3e:d7:3d:1d:f2:65:d6:fa:50:b5:3e:7b:c7:
03:fb:ab:86:02:ac:a1:59:38:dd:7f:e0:d1:b4:21:
90:cd:58:dd:9a:55:1d:80:05:fc:0b:1f:3a:39:a2:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D0:F4:AE:70:91:E2:F0:5C:91:D1:55:E3:B7:7C:FD:91:46:A6:35
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:91:1b:2c:20:fa:6b:ca:90:fc:07:6c:ef:98:76:bc:e2:50:
07:06:49:5f:b9:9a:8e:88:b5:b9:d4:33:76:7c:f7:67:74:1c:
19:dc:ce:c0:79:9c:bf:b4:e3:2c:18:58:d0:54:97:cb:fe:3f:
7b:11:16:90:8a:b7:35:11:c2:89:da:aa:82:3e:45:b9:07:31:
ae:bd:7e:d0:c4:0b:e5:7b:2e:91:25:e7:07:13:18:88:2a:df:
a9:ca:90:e0:0d:9c:e7:f0:65:37:1a:1a:aa:6d:07:db:ce:7e:
9f:b3:b8:d3:c7:38:c7:56:e9:e3:10:75:1c:2b:ee:dc:74:fe:
4c:9d:12:61:7d:2e:80:3d:21:dd:d9:28:55:4c:31:6b:22:14:
b3:93:39:70:d2:fc:32:b7:24:36:12:23:bb:76:9c:87:16:bd:
0d:1e:25:73:58:02:bf:25:e5:d2:e6:e1:ac:33:f0:aa:3a:cd:
b9:5b:44:b8:53:9d:40:43:98:b5:72:cc:1b:a7:84:26:2e:af:
ad:82:cc:82:9e:52:a6:dd:71:cd:b8:20:59:3c:4b:5e:7d:08:
7b:41:e3:c0:8a:da:61:20:57:fb:bf:6f:f2:da:c3:80:37:70:
da:41:9c:a4:fb:ab:c5:22:5b:85:3d:0e:e7:a6:5a:c3:da:1a:
f0:71:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:43 2025 by rpki-client