Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
File: KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft (raw, json)
Hash identifier: niDhZ4bT4leMyOg877kwQYVh/BSqi0uupHLzEaIXuYo=
Subject key identifier: 56:DA:AE:A2:4A:6F:4F:8A:7A:4E:DE:56:9A:B0:A7:BE:E0:0D:9A:E0
Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
Certificate issuer: /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Certificate serial: 0AD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
Manifest number: 0ACE
Signing time: Thu 30 Jan 2025 19:29:13 +0000
Manifest this update: Thu 30 Jan 2025 19:29:13 +0000
Manifest next update: Thu 06 Feb 2025 19:29:13 +0000
Files and hashes: 1: KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl (hash: FSGLOTcPXMnxnC7a+lK1DfuYVyCro7TRyT6+s7/60nE=)
2: 496096EE41A311EABAADCE0AC4F9AE02.roa (hash: c6hB6o27DTn4G9KshxwwCrACiildcNHuM9kyD7kWDTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2772 (0xad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Validity
Not Before: Jan 30 19:29:13 2025 GMT
Not After : Feb 6 19:29:13 2025 GMT
Subject: CN=679bd309-32d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:41:d9:7c:c7:1b:4f:73:4e:57:64:94:31:
d9:79:de:09:8c:8b:b5:37:00:88:c6:f5:fb:a2:c2:
0a:b2:93:05:41:c4:17:21:73:6d:19:79:ab:2f:89:
2f:bc:6a:47:72:1b:4b:08:71:b6:16:b3:84:cd:9b:
46:7f:9f:fc:83:78:2b:54:4b:14:1b:26:2c:13:f0:
f3:cf:1b:33:62:11:90:a1:c3:e0:d9:4c:ce:15:30:
cf:2e:2f:37:21:2b:66:00:a7:7a:df:45:bd:1c:14:
e2:44:39:e6:54:d6:9e:3d:6e:c1:25:e5:ff:7a:12:
0c:d0:1d:a8:eb:0c:df:9e:c5:54:2f:48:2d:06:52:
a8:75:ca:0b:7a:18:bd:ae:b7:3f:ac:dc:5a:27:3b:
ed:09:a3:5e:98:76:a7:80:17:0a:e7:c0:f1:53:6b:
bf:c8:b0:60:a2:84:53:84:42:d4:71:cf:03:5b:db:
7e:c0:b4:97:64:c8:06:e1:72:00:c1:bb:77:dd:8f:
91:63:f5:8a:d8:85:3d:b9:93:f9:a2:99:75:3d:18:
0c:36:65:a4:74:04:43:6d:6a:73:e9:7a:3f:92:d6:
c7:61:7a:76:d1:9a:43:0b:0c:50:de:4d:94:5d:03:
dd:ea:63:16:55:f7:fa:02:d7:7e:34:20:06:01:e8:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DA:AE:A2:4A:6F:4F:8A:7A:4E:DE:56:9A:B0:A7:BE:E0:0D:9A:E0
X509v3 Authority Key Identifier:
keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3b:63:1e:da:1e:7e:3f:e2:84:f6:8a:0e:e4:a1:2b:d3:b5:
f1:ed:9e:00:23:d3:d5:78:cb:80:b6:50:f5:7e:4a:b6:94:73:
cc:20:21:a3:ba:dd:7e:c0:ed:7e:98:5c:b7:2a:f2:29:8e:61:
e6:03:aa:6e:bc:23:3c:40:dd:f7:ba:f4:5b:a6:44:bc:7c:63:
c7:a1:03:67:be:82:9b:03:59:db:8c:aa:58:14:4a:c6:70:05:
6b:68:b9:33:9f:f3:cd:6a:c7:08:53:46:21:9a:e5:78:77:af:
3d:38:a5:5e:0f:fc:04:ac:69:1b:65:69:29:8e:e4:88:0c:9d:
8a:5d:1b:50:8c:c9:69:f6:1b:58:15:6b:b3:11:10:67:3a:cf:
29:11:10:25:7b:61:2d:73:38:f4:88:05:b7:27:4f:c1:06:08:
a6:55:10:99:68:2d:10:bf:c3:b5:a5:95:55:33:cc:00:86:90:
7a:7d:e8:05:37:92:3a:35:42:a7:5b:44:90:8b:dd:c2:b9:5c:
33:6a:57:0f:97:2c:ba:b8:8d:e1:02:27:f0:87:0d:47:9c:95:
3f:07:dd:16:06:a7:19:fd:92:e9:d8:8f:84:67:2d:31:c4:9c:
7a:31:f8:8d:17:fe:8c:67:0c:56:12:28:3e:1b:df:f7:ca:66:
a5:6b:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:15:10 2025 by rpki-client