Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json)
Hash identifier: r/pl/5KTo4FXrnzt+UEuOrCAdUgY+8TnwN7jUK2neCA=
Subject key identifier: 1F:FA:D3:B6:AA:88:5A:4B:8D:72:11:AD:25:B1:81:F8:92:E0:DC:A6
Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11
Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
Certificate serial: 061D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
Manifest number: 0619
Signing time: Thu 30 Jan 2025 22:42:11 +0000
Manifest this update: Thu 30 Jan 2025 22:42:10 +0000
Manifest next update: Thu 06 Feb 2025 22:42:10 +0000
Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: fiA8kRlNhq5YmmupKYr2AYMY3gRUvw+D1g8ecKgIQG4=)
2: 813CF67A858111EB914A5377C4F9AE02.roa (hash: QEOVhybwf6Wz+3qRFXxn3E9W4TWcZxLHMSU1XgjYyAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
Validity
Not Before: Jan 30 22:42:10 2025 GMT
Not After : Feb 6 22:42:10 2025 GMT
Subject: CN=679c0043-8bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:79:af:00:44:ee:14:eb:be:70:c9:6a:0b:
ec:fe:b4:4f:1e:08:ee:37:fb:cd:cd:8e:26:54:f8:
b3:bc:c6:e3:d9:34:05:38:72:c9:53:89:ab:80:06:
0c:b9:de:75:74:c9:a4:a8:3a:a1:ef:7e:dc:91:9b:
0f:f5:e2:ff:e1:1f:8f:94:59:0a:19:f8:10:d3:44:
ff:af:88:7a:02:2a:43:84:5d:d5:d1:16:3b:b0:45:
e4:03:4d:b0:19:45:db:45:d2:85:65:3d:7c:e0:17:
9c:83:62:5d:c2:db:4c:fd:f3:95:0e:c8:0e:e7:07:
9f:e1:b6:46:13:c0:29:fb:4b:ba:bc:c7:53:57:14:
8a:5d:0f:7e:86:65:d2:1c:68:70:31:e0:93:ed:72:
30:ec:df:f2:1b:e6:3b:41:f6:62:c1:8c:d7:1f:50:
e5:ed:f7:fb:00:43:13:9a:eb:c9:7a:b0:8c:24:45:
a4:c9:36:51:09:22:4e:ac:06:0b:f7:14:89:86:90:
81:f4:03:c7:a7:57:d0:35:64:d9:27:84:a6:f3:a9:
23:e2:90:fb:44:56:27:54:04:92:4f:2e:94:71:0f:
d4:04:93:05:2c:04:e6:15:e4:d6:88:2f:c9:94:8e:
0b:05:3f:ae:40:a4:f1:e4:9e:9b:d6:6c:73:b9:86:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FA:D3:B6:AA:88:5A:4B:8D:72:11:AD:25:B1:81:F8:92:E0:DC:A6
X509v3 Authority Key Identifier:
keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:38:0d:d9:51:50:58:17:a3:0a:72:cd:c6:af:a3:34:7e:18:
55:88:2f:4b:24:f0:de:4c:22:bf:2a:c2:3c:5b:60:e6:cb:b8:
57:0d:3c:32:91:78:9b:f2:76:45:fb:b5:58:32:92:35:10:74:
17:ce:c7:e6:9e:92:33:92:23:50:ac:bb:09:c1:6b:21:76:80:
a9:9b:e1:c3:2d:61:91:3a:2b:b7:de:87:5f:4a:e1:bf:80:ed:
37:c3:6e:92:72:90:65:4e:3a:09:6b:69:aa:61:bd:47:55:4a:
33:84:99:16:a6:c5:1f:87:22:c0:84:a6:61:b9:b8:5a:dc:99:
0b:ee:5f:21:87:ed:23:17:8c:b8:ce:24:77:6b:1c:7b:16:49:
48:8a:d1:08:b9:e2:82:5b:42:15:41:f1:94:f4:3d:1e:a5:36:
96:f3:30:98:e1:83:1e:b1:fd:c9:31:e6:5f:dc:dd:6a:a0:f1:
77:55:cc:e6:5b:6c:a9:d2:8d:4c:10:20:38:a2:84:0c:c8:9a:
7e:16:88:00:b5:ae:58:35:c4:16:64:09:64:28:fb:ff:00:3b:
62:01:c0:fc:e2:5e:74:25:45:65:a0:80:47:65:d1:ef:3d:24:
1a:c0:7d:d4:de:be:87:7d:3b:9f:e9:1b:63:f0:8a:bd:96:07:
6d:e7:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:26:30 2025 by rpki-client