Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json)
Hash identifier: qTDx/ZS4Fm6EKMl9+mS/6t3yF3T0iCP29wnfhLq8G7U=
Subject key identifier: F6:7F:82:76:88:AA:70:7C:BB:BE:1B:44:C5:08:3D:D6:FE:33:26:40
Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Certificate serial: 1018
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
Manifest number: 100F
Signing time: Fri 31 Jan 2025 17:25:20 +0000
Manifest this update: Fri 31 Jan 2025 17:25:19 +0000
Manifest next update: Fri 07 Feb 2025 17:25:19 +0000
Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: vu890SuQPE/k6gR4WiBtiLcquQNRrUj+Z4DE+uVFMBY=)
2: 691023063A8311E99AF5572DC4F9AE02.roa (hash: l1yNy5wosDr6TY3WBCB5bde6OHwXT+S3VSRcd8EQWZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4120 (0x1018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Validity
Not Before: Jan 31 17:25:19 2025 GMT
Not After : Feb 7 17:25:19 2025 GMT
Subject: CN=679d077f-cf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:b7:4f:e3:3a:3d:c4:08:23:34:da:bd:7b:
ae:ca:46:6b:e1:99:e2:76:ff:cf:e5:b4:2b:ad:69:
23:60:d3:d4:01:5b:97:97:9d:00:28:b4:a7:2f:de:
62:7a:e0:38:ce:06:31:74:2f:8e:55:a5:aa:c3:79:
12:77:c6:97:61:1d:8a:ba:8d:b9:a1:c9:5e:7c:68:
9b:45:3b:dd:9f:da:f0:8a:71:55:c2:f5:ad:86:9a:
d2:14:cc:5d:5e:71:f0:3f:73:a9:99:e7:5a:13:4e:
46:f3:cd:d6:61:f3:c8:91:ae:a5:23:82:61:33:42:
51:ae:cf:52:29:ff:24:4a:bc:06:f2:86:a4:bf:60:
95:d5:11:4c:77:15:a2:99:9b:30:4f:fa:04:20:e0:
c6:21:08:fe:d7:b8:73:15:dd:42:48:ec:72:61:6b:
49:7c:f4:47:a5:66:80:12:4c:9f:17:67:00:7a:24:
9f:01:fb:44:6c:7f:83:d3:d9:70:c9:ca:85:9c:97:
5b:e9:8a:8a:42:cc:4f:86:07:d8:c1:0c:28:9a:89:
72:2b:30:86:fe:01:ef:af:6d:1d:d6:ca:a4:c8:f7:
21:26:1d:e7:8c:6a:97:09:ab:1a:46:2b:eb:f6:62:
6c:62:e1:7b:d6:ee:37:6b:e2:cc:31:82:b0:84:c6:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7F:82:76:88:AA:70:7C:BB:BE:1B:44:C5:08:3D:D6:FE:33:26:40
X509v3 Authority Key Identifier:
keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:96:cb:5a:39:13:bd:bf:f1:5e:91:90:84:97:bb:a7:fb:af:
1c:22:2f:ed:a6:4c:5f:f6:83:f6:6c:7c:88:a3:36:f9:cb:0e:
45:39:5a:12:fb:fc:d2:65:69:bc:76:db:7d:7c:d0:c1:49:be:
7c:d8:a0:b6:e1:63:b0:1e:4e:c5:48:be:c2:f1:d7:cc:5e:4e:
f6:ac:f0:2b:6c:2f:b0:a6:7b:d9:e8:6e:ae:e6:c2:2d:32:c2:
ff:0f:1a:01:27:cd:45:34:52:cf:ff:24:8e:8b:55:06:12:1c:
68:ea:80:ad:85:78:1c:1a:3f:86:6a:01:f0:d9:37:35:a1:60:
4f:0d:e8:aa:e8:78:70:eb:73:8f:60:2c:c6:91:72:c3:a7:a7:
11:f1:c1:42:5e:8e:69:29:00:cf:0b:ce:88:27:b7:22:4d:8c:
d8:8a:ae:06:7f:bc:7b:9f:9e:7b:ae:f6:25:f6:56:63:08:c5:
d1:36:ef:ea:0b:99:8b:98:98:1d:7d:69:6d:a3:91:d4:26:d3:
ab:c4:c6:c5:18:6f:72:d6:e5:d7:21:c4:da:14:1f:61:3b:90:
62:98:0a:72:34:2e:16:6c:ab:29:1a:24:02:a7:de:f4:b0:28:
99:73:58:b6:00:3a:20:fc:c6:53:72:b8:5f:c4:5b:1a:a1:5e:
77:60:14:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:08:54 2025 by rpki-client