Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
File: yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json)
Hash identifier: tigWnFTIAH6n0g3eM5tisWMNmuey+OFiiXetTCa3XgI=
Subject key identifier: CE:C8:91:FF:B2:3B:B9:7B:2B:B8:F9:CB:7E:3E:97:CF:F3:99:B4:19
Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB
Certificate issuer: /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB
Certificate serial: 0722
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
Manifest number: 071C
Signing time: Thu 30 Jan 2025 21:45:05 +0000
Manifest this update: Thu 30 Jan 2025 21:45:04 +0000
Manifest next update: Thu 06 Feb 2025 21:45:04 +0000
Files and hashes: 1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: etTKf/CS3zq/SOGmiJzoAYAJaFxBjai2FTx52Zf7Ia4=)
2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: 6tZzkzjjo4oBxSeK/R1NOhuzbe0x0nCnZv7oHnkeXMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826 (0x722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB
Validity
Not Before: Jan 30 21:45:04 2025 GMT
Not After : Feb 6 21:45:04 2025 GMT
Subject: CN=679bf2e0-eed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:de:b4:64:37:cc:99:a5:12:0f:71:06:74:
67:61:03:c1:87:17:f6:a9:90:01:48:5a:94:a4:b7:
a1:f4:9b:97:67:d2:ca:8c:c2:1d:84:4b:5c:b6:80:
d0:58:6e:50:c0:b9:dd:1e:2e:f8:0a:66:d1:b7:bb:
05:61:87:48:e6:a8:19:3c:05:5d:78:0b:1e:4d:49:
df:b1:e7:4d:f1:bb:a4:ff:ea:5e:0c:9d:c8:bd:09:
2c:e8:0e:5f:33:f9:7f:d0:d2:b2:62:d5:45:6d:5a:
10:4b:34:bf:1f:9c:5a:c6:86:20:65:95:15:18:2e:
db:46:bf:72:49:30:1f:8d:70:3b:ca:53:c8:64:34:
5a:3a:7b:91:f5:33:54:49:01:78:a1:99:64:1c:70:
ff:55:07:f2:1a:51:e0:b7:f8:ef:b5:f8:38:ca:86:
28:ba:10:a6:1c:49:0d:7f:7e:a9:10:f5:16:c1:4e:
ce:bd:e1:c1:15:f8:f1:26:92:13:05:d0:da:28:c7:
90:51:ea:af:06:3a:e1:48:bc:1a:f0:8a:a4:0e:c8:
35:ff:0e:d2:50:0b:6a:06:ba:bf:87:c4:39:87:e7:
4c:5b:10:7d:c5:ef:a7:98:00:8f:b5:b9:04:17:8c:
4d:6c:fe:af:75:0a:c8:99:84:46:a1:7d:dc:07:03:
5f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C8:91:FF:B2:3B:B9:7B:2B:B8:F9:CB:7E:3E:97:CF:F3:99:B4:19
X509v3 Authority Key Identifier:
keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:a1:08:89:66:31:bc:e2:c3:c1:a6:33:6f:ae:c2:77:81:1f:
ea:8d:28:d9:41:88:67:9e:79:c3:92:45:e5:f8:e8:85:6f:9d:
25:2d:b2:4a:1c:d2:2b:80:be:cf:77:42:c3:c2:c4:36:d1:92:
02:2b:c5:eb:7d:75:59:5d:33:0a:e2:6c:5e:2a:fc:a9:da:1d:
6d:56:f3:f5:8c:f8:b6:1d:ce:9f:7b:b4:7f:fe:58:e2:12:d0:
ed:69:ad:3b:1d:ea:aa:81:66:d3:63:2d:83:63:3d:ea:9a:b1:
93:3b:22:54:66:03:db:03:a5:5e:39:3d:9e:af:22:71:19:dd:
97:ed:eb:41:f8:59:1c:a6:6c:6e:67:08:a8:e4:c1:45:d0:90:
59:6f:9d:3a:2a:10:3e:75:f0:79:64:ca:44:0e:15:1a:b6:75:
bf:35:71:3b:41:e2:a2:fb:70:fc:d2:03:91:b7:ae:74:dc:f1:
18:17:9e:ba:39:12:85:38:dc:37:f7:2c:7e:bb:46:cc:c7:71:
20:78:0b:c5:01:0e:44:f3:ae:bb:c8:e5:8b:f2:f4:08:6b:0b:
cf:b6:34:ed:63:6d:f2:c7:14:08:1f:b5:eb:f7:86:68:33:c4:
46:ca:dd:f9:d3:94:9e:b3:4a:af:b3:1d:46:9d:2d:4d:27:69:
45:aa:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:25 2025 by rpki-client