Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json)
Hash identifier: qBtR8Dk4XCB/4Vm0ZvdAKhzKvYg3zlDUHBnvJhD5S64=
Subject key identifier: FC:64:60:BD:3D:DD:93:28:0D:4A:89:72:C1:77:19:85:24:6B:6F:58
Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
Manifest number: B2
Signing time: Fri 31 Jan 2025 05:09:01 +0000
Manifest this update: Fri 31 Jan 2025 05:09:00 +0000
Manifest next update: Fri 07 Feb 2025 05:09:00 +0000
Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: QKUB3DbB4bhUVUKIqlCN+IWPNiqw0lMKod7vXX4+pbc=)
2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: 7EFmQDZlzQkxykslosHAE0tEX7xAgoH8WsMXOqdO+RA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B
Validity
Not Before: Jan 31 05:09:00 2025 GMT
Not After : Feb 7 05:09:00 2025 GMT
Subject: CN=679c5aed-c6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:dd:bd:9b:a4:04:db:5d:fb:d6:6e:d9:e6:
bf:4b:58:b5:c6:c0:d6:bc:ae:21:d6:04:1f:de:48:
e0:4d:41:db:9b:57:bf:90:85:10:32:90:39:cd:c0:
47:da:c9:5e:20:7c:85:69:c9:0a:80:fe:33:87:2d:
8f:77:aa:9f:1c:a3:e7:de:27:7c:4a:ff:85:bd:8c:
98:32:41:dd:de:77:d6:01:7d:b2:91:bf:66:1e:ec:
68:c2:25:e7:98:09:21:2c:7e:f2:6b:00:9d:2d:d1:
a3:df:e8:e8:a1:f3:63:5f:67:eb:b6:17:cf:39:fd:
41:9e:d4:5c:30:45:d4:3b:fe:56:92:4f:5b:78:a7:
44:f2:9b:e3:30:29:e0:03:9c:d5:2b:a6:d2:1a:52:
f0:bc:63:ad:35:af:d1:15:8c:0f:92:4b:fc:84:4d:
f2:82:69:37:87:6b:bd:65:79:fe:e0:de:60:2c:2f:
41:46:20:76:3c:c2:00:ba:b1:86:34:02:47:4b:df:
77:12:40:2d:eb:03:a6:74:0c:16:a8:34:72:37:bc:
18:ba:0f:26:a0:89:28:c6:70:7a:e3:a5:74:35:21:
88:88:19:a0:af:af:6c:1e:e0:a8:20:83:0f:bd:ed:
3b:62:b5:3f:7d:30:56:7c:d5:30:90:e8:b6:95:ce:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:64:60:BD:3D:DD:93:28:0D:4A:89:72:C1:77:19:85:24:6B:6F:58
X509v3 Authority Key Identifier:
keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:61:ce:8e:ca:fd:83:b7:56:e2:4f:44:2e:dc:83:77:d2:db:
00:e9:f4:55:0c:2f:64:bc:88:68:cc:9f:ad:10:53:7d:82:75:
03:9f:62:6a:92:48:5d:0c:c4:df:bf:21:8c:bc:53:9c:62:90:
df:c0:22:00:fb:6b:80:73:6a:05:82:48:36:e9:ec:4e:d5:0d:
f9:97:b3:35:22:63:79:32:3a:88:34:9d:92:d5:b8:87:ac:66:
8f:f8:ec:3c:d9:53:23:bd:f3:2d:8c:22:d1:eb:ec:73:b6:4b:
75:84:2d:98:64:fb:0a:19:84:16:f4:64:5e:e0:56:c2:db:11:
b7:86:e8:8e:36:17:74:f7:26:c4:93:15:dc:81:60:42:ce:8f:
3c:05:8a:49:df:d2:3f:49:76:1c:63:38:80:34:41:f3:23:f0:
16:ed:45:ec:6e:3a:58:e3:f3:b7:60:81:00:cd:bc:09:96:2a:
44:fc:5a:b2:a3:63:fd:88:7b:f1:c3:31:d8:b7:82:97:f2:d7:
a5:2a:87:64:47:71:de:19:ae:e6:3f:73:f4:f8:11:c4:4a:67:
28:9e:76:ff:d5:32:31:46:58:33:22:51:96:d8:46:65:5c:ac:
f2:6b:47:67:fa:7b:03:cf:bc:93:66:bc:ac:e0:46:94:cc:47:
49:16:4c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:26:00 2025 by rpki-client