Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
File: FOZzxKcds0p1aBNYfkghLaLnczA.mft (raw, json)
Hash identifier: onu5LV5wz+PfisqmadxBA7tRe2lmRawZPF35/WL/Q1E=
Subject key identifier: 5C:A9:FF:1B:71:55:FA:80:69:C1:D2:39:27:E4:3B:F8:D2:B2:FD:E4
Authority key identifier: 14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30
Certificate issuer: /CN=A91A2F33/serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
Certificate serial: 09BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
Manifest number: 09A5
Signing time: Thu 30 Jan 2025 20:10:15 +0000
Manifest this update: Thu 30 Jan 2025 20:10:14 +0000
Manifest next update: Thu 06 Feb 2025 20:10:14 +0000
Files and hashes: 1: FOZzxKcds0p1aBNYfkghLaLnczA.crl (hash: zPfe1NggqBd6Gc/BeiXi6I6YP3l50CHbBCwkrwBwpAg=)
2: 344644CC1DC511EF95607948C4F9AE02.roa (hash: QybxAW0JZTcm7NugQTpG8Jw3MBZeFtzVHU/nStVlT58=)
3: ED99CAA81DC411EF9E620C48C4F9AE02.roa (hash: STg8SBnaSzWjKmwuI5mayylMKelnZKOmUJFv9qSfaQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2493 (0x9bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2F33/serialNumber=14E673C4A71DB34A756813587E48212DA2E77330
Validity
Not Before: Jan 30 20:10:14 2025 GMT
Not After : Feb 6 20:10:14 2025 GMT
Subject: CN=679bdca6-845c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:bf:39:16:80:a6:0d:25:8f:bb:10:62:50:
d3:4f:fc:93:2c:77:69:ff:78:84:fc:09:fe:48:9e:
6f:2a:ce:61:82:48:28:c8:c2:5e:12:76:62:9a:36:
73:20:89:2e:32:6d:01:30:07:cb:24:c9:f7:ce:86:
7f:6d:a8:33:9b:51:de:d3:1d:6b:bc:6d:14:22:72:
ce:91:f2:94:71:79:ce:67:49:53:6e:a0:16:cb:9f:
df:3e:ef:a8:3d:26:96:fa:63:b3:8e:99:18:c7:eb:
b4:5b:70:fb:61:48:23:af:3a:37:16:b4:c2:ca:1f:
62:03:d9:88:56:0d:14:3b:94:ce:28:ca:4f:12:4c:
d4:23:4a:85:3e:66:ec:13:89:64:8c:c5:d2:da:fd:
30:20:05:66:42:17:37:65:93:7c:2c:45:3b:de:43:
c8:44:64:7d:1f:9d:e4:d4:f3:3c:03:8d:4f:b9:b4:
e9:78:68:db:2e:39:cb:26:56:6c:6c:23:05:6e:44:
6b:69:1e:d3:13:16:d3:b4:bd:97:d2:c4:97:0c:8f:
82:78:48:5e:ac:dc:93:8c:ce:2e:05:38:83:66:80:
6c:6b:06:0d:32:a8:69:19:75:ef:05:32:d1:46:09:
fc:31:1c:34:4e:0d:69:a0:83:ee:f1:13:27:d2:ba:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A9:FF:1B:71:55:FA:80:69:C1:D2:39:27:E4:3B:F8:D2:B2:FD:E4
X509v3 Authority Key Identifier:
keyid:14:E6:73:C4:A7:1D:B3:4A:75:68:13:58:7E:48:21:2D:A2:E7:73:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOZzxKcds0p1aBNYfkghLaLnczA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F33/E6EC2D92809111EAABCDFF6CC4F9AE02/FOZzxKcds0p1aBNYfkghLaLnczA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:95:fa:74:af:c4:c3:99:55:aa:b0:06:7b:20:a9:a1:49:ef:
d7:23:1b:c7:3f:16:6f:4a:13:e6:04:71:e2:0a:a0:2b:3f:27:
5e:1f:6b:62:2b:9c:12:0a:e2:b2:e1:81:cf:07:dd:61:85:5f:
97:57:21:3c:b5:3c:50:7b:fa:1c:6a:89:e2:17:ca:62:2b:3d:
e9:c3:9c:04:fe:8d:ef:f6:8c:16:2e:d6:e8:f1:24:72:12:e9:
45:74:a8:2f:20:64:0e:ad:c2:80:0d:6a:cd:a8:83:9a:bd:76:
7c:ef:7d:e7:17:fd:c4:0f:de:27:d8:a8:30:fb:42:66:61:37:
ee:5d:6d:86:19:51:2b:5a:cd:82:a0:fa:6c:1d:94:d0:54:9c:
4f:8b:44:93:24:9a:d6:db:82:2f:6b:b2:88:3c:62:ff:dd:d1:
72:7c:1e:5c:20:25:bb:d5:92:8f:af:2c:51:15:f9:7d:98:3c:
61:0e:f9:73:ae:ed:06:38:aa:eb:9c:99:33:8a:ca:53:98:d5:
40:3d:29:82:84:6e:82:02:ce:8d:c4:55:23:67:6e:1b:dc:fa:
9c:0a:e8:58:ab:05:7e:ce:bb:ad:d5:89:36:39:e1:c1:0b:dd:
a6:f9:13:40:21:8f:3f:88:83:0e:5d:bd:4b:7f:4b:95:25:20:
44:4d:a8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:14 2025 by rpki-client