Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json)
Hash identifier: 3W3+e+dV2PF+nGdAFyNCBWHdSHLYw7A8zAUD0rXA5EA=
Subject key identifier: 22:B8:E4:14:47:B6:6E:92:67:90:C2:2F:8D:6F:F9:0B:9B:43:C3:5A
Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
Manifest number: 016F
Signing time: Fri 31 Jan 2025 03:05:02 +0000
Manifest this update: Fri 31 Jan 2025 03:05:02 +0000
Manifest next update: Fri 07 Feb 2025 03:05:02 +0000
Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: yT0bzY44lnEeCBdfJ8K6MIAaS2ykdHEwqEL7Q+nXsGs=)
2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: XONGVvjvwqUG2k0rcMxU+8QUhjI2+qT2DM4JudN4zmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Validity
Not Before: Jan 31 03:05:02 2025 GMT
Not After : Feb 7 03:05:02 2025 GMT
Subject: CN=679c3dde-9020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:61:45:6e:1f:5e:09:45:2d:1b:b7:ae:15:
ae:cb:a2:49:06:d7:c6:57:03:2c:66:82:4a:90:a5:
6e:f8:32:0f:2c:d5:0a:62:3c:12:20:bf:32:e9:ea:
87:c1:64:ba:37:a7:53:24:4d:e4:92:de:c6:39:fa:
ac:ad:92:ea:ac:e2:03:3c:66:3e:12:69:be:83:1d:
9a:0b:00:ba:61:83:a3:c6:6c:49:d3:b7:2c:a4:2f:
36:27:aa:38:77:0c:2f:af:d6:21:20:fe:72:10:35:
0b:24:65:97:39:19:d9:5a:c2:b1:5d:56:4c:4f:82:
a2:7f:36:10:7b:c1:9c:19:d6:de:cf:ae:bf:b0:52:
5e:53:01:cb:ce:01:da:2c:8e:f3:1b:46:cb:98:2e:
b3:71:05:77:cc:55:d0:38:f2:8e:82:db:d2:50:63:
7f:4a:1a:f8:14:bc:89:54:63:a0:f5:68:e3:08:c8:
02:4c:58:cd:1b:2d:81:b6:61:1e:81:c0:b2:89:b3:
2a:f7:a3:43:a0:4b:4c:d2:f4:76:32:0c:b7:7f:73:
f3:d5:70:21:86:2c:8e:4d:75:6a:be:b9:4e:7c:90:
0d:b6:57:e4:f3:f8:96:e8:68:32:be:a4:50:57:81:
0d:44:4b:2f:79:1b:ff:61:b1:94:d6:9e:3f:21:1f:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B8:E4:14:47:B6:6E:92:67:90:C2:2F:8D:6F:F9:0B:9B:43:C3:5A
X509v3 Authority Key Identifier:
keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d1:1d:8e:c9:cb:8d:98:ed:66:c7:bf:f4:91:c2:c5:ca:46:
a5:db:70:27:a1:23:80:14:0e:5e:53:20:a8:c8:16:9a:cb:dc:
00:d8:40:ce:28:b6:fe:5e:08:8a:76:6a:15:96:83:38:63:7c:
77:14:01:55:35:25:05:dc:33:13:71:be:bc:5c:2b:da:58:25:
9d:aa:70:82:6e:ee:8d:8d:92:3a:3c:f2:bd:4b:d1:83:db:e0:
78:d8:71:5e:8e:2a:77:f1:ad:17:df:be:9a:cf:1f:41:35:6c:
62:91:4e:ad:cc:a8:80:0a:90:cd:9c:6f:b7:ce:b9:a4:8d:d5:
ac:66:7d:ae:25:95:c4:ea:1d:d4:2d:cb:35:f1:c0:da:1d:7a:
17:72:9c:2b:4f:50:4b:bb:64:ad:6b:25:38:2f:98:5b:de:00:
0a:3b:27:59:c0:3e:58:6f:89:7e:39:fe:de:56:60:06:b9:20:
be:a4:06:f7:c4:01:80:7c:c5:ba:cc:09:99:2c:1d:4f:2f:92:
6e:8e:e4:d9:a3:71:c7:d6:a0:67:4a:68:5b:de:e6:d7:50:99:
7c:9b:57:21:32:d8:c0:11:96:3e:c4:e4:5a:5b:2c:e7:bb:dc:
9f:f0:29:8a:ff:0c:d9:40:c6:26:a8:57:1a:2b:20:8f:0d:33:
cf:fe:53:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:17 2025 by rpki-client