Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json)
Hash identifier: yuarMEFBrvXpKVl8OYZOxpbbaTN5C4UV9uorOExb5E0=
Subject key identifier: 42:DD:A8:F5:07:19:58:20:0D:58:58:10:FC:25:69:C7:28:FB:BF:60
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
Manifest number: 025B
Signing time: Fri 31 Jan 2025 01:50:50 +0000
Manifest this update: Fri 31 Jan 2025 01:50:50 +0000
Manifest next update: Fri 07 Feb 2025 01:50:50 +0000
Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: ZV3LxUyokKdjP28MYzZWiMX0JUrgz1eidhDuTdOZ+Cg=)
2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: Vaf/2IuP6hiZHVP/Zzaz4dOsvcYmitwX0HNjNxuvpnM=)
3: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: TagIMdFi8Wzn09/Ge5pL8woV36T21sjYNdiET9ad6yQ=)
4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: OYepGimgXK3MUKlDDQh6/2vOomTeihklKTqr9GGXQtI=)
5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: isQopsFQh2QLJz7fDjuOZ5S4zYi6+htYHq2GDQnVE+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Validity
Not Before: Jan 31 01:50:50 2025 GMT
Not After : Feb 7 01:50:50 2025 GMT
Subject: CN=679c2c7a-56c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fa:0c:15:09:e1:b7:31:a7:97:ac:6e:73:9f:
31:93:7a:b6:16:48:a4:b1:64:eb:70:12:13:78:e9:
e0:51:e8:61:9e:13:24:47:57:6f:19:8a:5f:b6:59:
c2:fe:e6:b0:29:0a:85:4d:2d:cf:ec:9e:ec:8a:91:
ad:49:3a:04:02:0e:78:12:e0:82:1e:98:d6:36:e1:
9a:79:55:00:ea:63:94:7f:cc:a9:cb:c8:b8:16:67:
15:bd:bf:60:1e:ee:d2:4c:b0:f9:3c:70:d5:9f:8c:
a8:b0:54:c2:e7:e8:e7:ef:b1:80:ee:ec:2a:ad:5d:
2a:ce:70:c3:ed:20:e1:1b:66:56:16:87:2c:cb:19:
4f:ad:72:4d:e7:12:06:ee:23:ec:c0:8b:5d:41:4c:
77:c6:37:93:98:4b:38:1c:10:a4:03:04:61:bb:0b:
42:4d:d9:72:8b:60:16:fd:92:31:bf:85:f7:10:04:
98:b5:23:43:42:cf:e2:10:e7:aa:f8:31:cc:7d:ac:
1b:fa:c0:34:ca:b7:4e:a9:4f:13:93:55:84:4d:02:
59:eb:5f:c4:23:6d:d0:50:4a:9e:e4:47:3a:36:1d:
a1:60:b2:4f:6f:e2:ce:34:60:02:eb:64:3e:0d:c2:
cc:5e:44:4e:10:8a:b0:54:20:b7:5a:1d:a6:ab:9b:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DD:A8:F5:07:19:58:20:0D:58:58:10:FC:25:69:C7:28:FB:BF:60
X509v3 Authority Key Identifier:
keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:30:b1:7b:46:30:1c:bf:f6:54:79:b8:0b:49:b8:0f:af:11:
4b:f7:58:9c:22:ae:cd:10:4e:e0:ef:af:27:fb:10:c3:35:78:
e9:ea:34:cd:72:1f:b3:53:3b:36:75:a6:88:b5:79:b7:b4:91:
16:32:9d:99:81:a2:0e:40:31:4d:0e:c6:0c:9f:a3:dd:bf:56:
a8:94:21:5b:09:1d:f1:11:c9:2b:f1:01:03:eb:ae:72:2a:a8:
11:49:3c:54:a9:b3:41:01:37:a6:cb:8a:c5:55:95:6a:08:71:
dc:1c:fb:0a:a8:d5:eb:9d:3c:ac:63:d0:9f:8c:08:f0:ae:bd:
49:ba:b7:be:b9:5b:d5:97:1d:1a:ec:59:db:b9:64:1b:37:af:
2a:6c:7b:61:f8:ae:3a:9f:ce:9b:d9:b0:94:24:f6:56:1a:eb:
60:1b:09:dc:89:ad:e9:e4:0d:89:07:bb:bd:46:17:33:4e:7c:
c0:4c:d1:80:de:87:87:43:f3:fb:ed:95:3a:8c:0c:25:07:8d:
7e:72:f4:ae:1b:6a:bf:fc:e6:99:24:cb:a9:98:05:66:c1:7d:
b7:84:f7:92:e2:dd:ea:f8:69:6d:f3:4a:70:e8:1b:c9:28:fb:
65:f9:f3:d3:29:de:c5:78:ea:9a:b7:7f:d3:22:76:1d:4f:d0:
f1:b6:31:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:38 2025 by rpki-client