Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft
File: NpQoPSE6XlZ5WORs29gStcxynXE.mft (raw, json)
Hash identifier: miTIC0Il6DGvDQ0QjpmIW4XHhIqD2MMVk8yVfCZUNSs=
Subject key identifier: 67:AE:44:35:E4:A6:42:3F:37:F0:00:41:C0:0F:6E:35:F1:15:AD:BF
Authority key identifier: 36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71
Certificate issuer: /CN=A91A2F88/serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71
Certificate serial: 02B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft
Manifest number: 02B1
Signing time: Fri 31 Jan 2025 01:34:56 +0000
Manifest this update: Fri 31 Jan 2025 01:34:56 +0000
Manifest next update: Fri 07 Feb 2025 01:34:56 +0000
Files and hashes: 1: NpQoPSE6XlZ5WORs29gStcxynXE.crl (hash: DsTevfYBCjdU47SK2/HoT9dQpdYgeST1eu0rXIxPRUw=)
2: 54467164E0A711EC8F4D5B5FC4F9AE02.roa (hash: 8iGFuZI4O9j0Gdt93MzFvxSKeiFq7gMt0350fxzYb8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2F88/serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71
Validity
Not Before: Jan 31 01:34:56 2025 GMT
Not After : Feb 7 01:34:56 2025 GMT
Subject: CN=679c28c0-010c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:50:d7:c5:19:da:53:59:de:14:74:e3:a8:
4b:83:f9:67:54:1b:03:1b:a6:88:bf:a7:60:7f:03:
99:e4:04:6d:5b:82:f8:e0:e2:5f:cd:75:5f:4f:f4:
73:81:0a:e3:80:ad:b6:aa:4a:3d:fd:09:72:25:df:
3d:92:00:65:86:7d:53:82:ad:29:4c:d4:96:4c:ba:
19:6d:ed:76:52:ac:d7:77:41:06:a0:cb:5c:5e:65:
ab:68:7e:a1:86:71:ae:36:a9:8e:18:20:d3:db:66:
95:66:dd:28:1b:ed:d6:f5:5c:4a:a9:a2:f5:a0:43:
10:87:b4:70:e4:50:8d:d9:e5:b9:bd:24:f6:61:6f:
03:72:9e:2e:83:1b:4b:0f:70:f8:c1:6b:96:ff:a2:
17:87:92:dd:69:e2:e7:6d:57:b3:2d:c8:2c:2d:3c:
cd:3a:de:90:32:4b:ff:ca:02:5f:cc:33:7d:9a:83:
e6:25:d9:45:ff:fe:7f:d3:39:0b:49:03:5e:ea:23:
b3:bd:4c:49:91:95:2d:55:bd:c3:8d:ca:89:ab:50:
ae:68:40:47:f7:0a:96:3a:30:6f:a8:2d:42:b8:f3:
d2:10:47:c0:14:c7:78:c1:25:9b:34:3a:8b:17:16:
7d:94:f2:c4:4c:aa:d7:8a:ab:29:24:94:69:7a:9c:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AE:44:35:E4:A6:42:3F:37:F0:00:41:C0:0F:6E:35:F1:15:AD:BF
X509v3 Authority Key Identifier:
keyid:36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:93:cf:d0:b0:64:5c:ec:12:6f:38:e6:39:5c:66:6e:52:04:
5b:c5:de:52:d6:64:92:33:ba:c0:42:73:a0:41:35:9d:7e:55:
a2:45:4c:03:7f:2a:73:1e:5b:ef:62:c4:2c:86:e2:eb:43:a4:
cc:8b:32:f8:d0:f5:5d:0f:63:77:ba:a0:ef:ef:c1:ab:35:5d:
5d:68:5f:1c:d5:bc:b7:71:4a:73:ce:35:3d:d6:93:92:e8:14:
d2:a2:bc:93:da:e4:72:70:bf:ce:67:11:28:9d:b5:1f:1b:3c:
4a:63:fa:ce:e9:c6:d6:14:5c:07:45:79:ac:5a:90:be:31:4a:
09:45:a8:29:b8:19:28:da:8d:8b:48:3a:ac:96:ca:18:bc:e7:
f3:64:ed:ff:78:12:40:3b:7c:bc:36:37:05:11:4a:9d:f8:cc:
bf:7d:15:e7:5a:ea:e6:27:76:5d:d2:1b:1a:21:64:6e:59:44:
33:96:f9:0b:09:e7:21:7d:03:5a:84:e5:70:74:1e:69:8d:dd:
da:71:96:52:84:eb:01:1f:c4:33:b4:c5:e9:d8:1c:bc:ca:0c:
3b:69:f6:b5:36:d2:79:4f:c1:92:ce:ad:fc:fc:99:2e:48:62:
eb:30:21:bf:28:84:23:62:05:24:07:2b:0f:f9:53:c8:cd:38:
3d:4b:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:40:22 2025 by rpki-client