Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
File: Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json)
Hash identifier: XaWLGJxxUipEcjqQ2qQsi5spr9Nt7mMPW9lD27gNwgY=
Subject key identifier: F0:BA:F3:75:0F:8E:16:C8:CF:CC:53:64:CD:07:42:43:EE:3C:66:44
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Certificate issuer: /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial: 28D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
Manifest number: 28B4
Signing time: Fri 31 Jan 2025 15:38:07 +0000
Manifest this update: Fri 31 Jan 2025 15:38:06 +0000
Manifest next update: Fri 07 Feb 2025 15:38:06 +0000
Files and hashes: 1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: SPJd0XY7n5P5DayyI6MZDOU18IgAj7nsT9R2pFn82hA=)
2: F4246CDA561811E98A165872C4F9AE02.roa (hash: MjUj12ziCX5FsiArxAOt+CGQVqMG8r/+AxNd8FxrlXg=)
3: 5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa (hash: rwCF53o/2VLZF/xLvGMTlFyQCHhpOILr4tGZzUzVyo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10450 (0x28d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Validity
Not Before: Jan 31 15:38:06 2025 GMT
Not After : Feb 7 15:38:06 2025 GMT
Subject: CN=679cee5e-5815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:db:64:68:cf:e9:bb:fe:66:e2:78:50:d9:
9c:a2:f3:56:f9:b7:c8:19:08:e4:0c:5a:cf:5f:0f:
4f:40:b1:fb:e9:14:28:00:49:b5:30:e1:a7:a1:72:
b0:00:aa:e5:e0:5f:ad:6b:7a:50:9e:79:c8:3c:8b:
22:bf:17:d1:51:7b:6f:92:98:7d:f5:46:3c:f3:39:
1f:b3:2b:39:6b:fd:8a:d2:42:2c:af:28:da:2a:06:
c3:ee:27:43:56:f4:1a:7b:c7:99:09:9c:6a:52:fd:
9f:67:99:47:71:58:33:2d:66:cf:03:52:91:a4:fc:
77:8f:d4:9d:77:15:f1:2d:e8:67:84:31:25:e8:3b:
fb:c9:ce:e8:5b:4a:b7:cc:61:80:2e:5b:6c:f3:b3:
32:fb:50:b6:ba:4d:b2:cf:0a:9e:5b:37:79:a6:30:
aa:1e:11:30:c3:c6:4d:e5:56:3b:68:a8:cd:11:a5:
25:4a:17:3e:d1:19:08:b6:97:be:7d:74:04:66:9f:
39:58:f8:26:7a:b0:ce:7c:2e:d3:4f:45:8c:ba:29:
26:7d:df:b5:5c:09:39:fa:1b:27:61:de:af:3a:50:
82:6f:99:a2:9f:a6:33:b8:d0:eb:13:41:3e:75:c6:
62:3c:41:b7:26:a8:4f:ac:7f:8a:14:5a:83:1c:f6:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BA:F3:75:0F:8E:16:C8:CF:CC:53:64:CD:07:42:43:EE:3C:66:44
X509v3 Authority Key Identifier:
keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:5d:d3:09:9b:ec:23:93:b8:75:32:85:ea:be:9a:2f:ce:a8:
bd:95:d4:c4:d5:8f:aa:77:d9:5b:5f:5f:94:c8:6a:9f:44:31:
20:d6:38:bc:28:86:3c:86:06:86:15:94:fc:3c:2b:b6:d0:dd:
22:3b:41:0b:98:f4:9b:55:7a:fc:af:d4:76:4f:8e:85:24:69:
d5:26:08:79:e3:7c:6e:7e:a4:3b:dc:e2:30:ab:fe:79:bc:51:
9c:92:dd:d9:83:10:a4:65:9c:d4:db:e1:b5:d2:8b:66:60:aa:
ff:b0:2d:db:55:bb:33:0c:f8:4f:04:3e:9e:ec:2e:ac:77:21:
29:fa:5e:ba:12:46:4f:4c:36:38:d4:4a:39:90:19:ac:43:b2:
aa:7f:e2:1d:df:33:31:10:7d:ce:95:8a:37:4b:79:86:11:88:
ae:56:f2:b5:e2:6e:ba:a6:af:50:f9:cd:0f:97:d6:07:e8:2a:
fb:3e:2e:ce:e8:71:e2:1e:79:ba:98:5b:df:80:db:9d:6a:2e:
f0:82:59:88:4d:e6:f3:08:d4:fd:fe:22:1a:a0:9f:14:bd:d7:
25:47:ba:de:60:10:7f:6f:38:0e:65:93:0d:d5:57:f9:0e:cb:
5c:25:08:94:8e:5c:ac:06:2c:0d:e9:92:fd:5d:b0:f0:cc:d0:
70:95:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:30:41 2025 by rpki-client