Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json)
Hash identifier: 6LQbXOQHv1XihV5KxZsRWP319kq029AcHfr/JQq2OVQ=
Subject key identifier: D5:F4:A9:FE:2B:DA:BA:05:10:93:E4:06:BB:D0:ED:0E:A2:76:AC:EC
Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
Manifest number: 5B
Signing time: Fri 31 Jan 2025 06:07:20 +0000
Manifest this update: Fri 31 Jan 2025 06:07:20 +0000
Manifest next update: Fri 07 Feb 2025 06:07:20 +0000
Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: OzAUhAg9amK8oRCYSfYpId0iibLKDpJWJi5x9nVY6r8=)
2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: FxzQ/fIjW3ehlt8HpKRH7n5BfwlAuKegJIAFiGlOhTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Validity
Not Before: Jan 31 06:07:20 2025 GMT
Not After : Feb 7 06:07:20 2025 GMT
Subject: CN=679c6898-cb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:82:43:85:c4:c2:75:59:68:42:3f:4b:6f:
41:ec:06:81:d7:d2:77:67:17:95:9e:db:ac:19:53:
ef:3c:c2:e7:ef:c5:9c:22:e5:66:47:4f:48:be:e1:
25:40:cd:96:11:11:5a:ed:64:1e:21:07:b1:fb:9c:
d6:b3:c8:4b:dc:f4:c2:e5:b4:e5:6b:05:b8:fd:1a:
8b:9c:64:3f:92:2e:80:fd:34:31:2f:eb:1d:c0:7a:
0d:3a:99:8b:90:47:ca:22:c9:73:b2:2e:c8:0d:60:
8c:6d:ec:4a:e5:c6:92:fb:08:ba:76:87:da:52:b5:
f4:80:2f:1b:f6:26:d2:a3:18:c4:65:27:94:4e:aa:
0d:38:6b:71:c9:4b:90:0a:35:e4:48:6d:4b:74:92:
fc:1e:6a:5e:bd:92:51:d3:ee:a8:a9:d1:3b:7d:b1:
24:e8:ca:d1:e4:bd:f8:55:86:6c:e2:b8:ae:1d:f4:
df:42:e8:06:00:f6:f1:4c:25:f9:27:5f:c6:66:c6:
64:1b:1c:bf:f4:98:1c:5f:a2:7d:f7:a0:2b:1f:fa:
e8:9f:1c:5e:c2:17:29:81:ef:12:b9:ef:5c:db:0c:
0c:22:38:a9:17:af:17:b5:14:03:f6:b1:00:6f:70:
3a:21:c1:25:7c:38:f2:62:b8:dc:96:7d:6f:c8:f7:
1f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F4:A9:FE:2B:DA:BA:05:10:93:E4:06:BB:D0:ED:0E:A2:76:AC:EC
X509v3 Authority Key Identifier:
keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:25:f3:cf:a8:ec:5a:46:6d:51:c4:c3:e9:f3:45:91:a0:d5:
b2:83:f6:ff:18:1e:4e:9d:8a:a6:90:77:c8:a2:f3:59:88:f2:
e2:2a:65:b6:b3:c9:e0:92:90:ac:c3:5f:83:80:7c:fc:c6:47:
76:41:ea:00:d0:61:cf:d7:fa:78:7f:4a:af:56:cc:cd:07:a5:
32:be:b5:e2:67:e6:b9:ec:6b:26:12:21:dc:d7:89:7e:cd:78:
f5:b4:d7:f9:13:25:89:50:44:d2:76:34:22:fb:f1:8b:65:9d:
d8:ca:b5:45:c8:65:6d:bb:92:b5:94:19:99:b8:16:ec:6e:07:
97:45:18:b6:20:40:dc:68:a9:55:aa:e2:cc:e5:3f:fd:c2:08:
c2:9d:d2:39:65:e1:8f:97:9e:e0:07:f0:79:f7:f5:0f:b2:67:
5d:e7:8a:3b:4d:da:c3:7a:1d:74:ec:ca:78:79:92:79:fb:f5:
70:ac:1f:94:db:98:2e:08:9e:c6:fc:4c:44:87:d6:21:86:5f:
d4:5e:c2:ca:af:16:39:76:f0:f1:8e:a7:57:90:0f:8e:f2:c4:
12:47:43:6c:41:d0:2b:7e:cc:2e:de:be:b5:c4:e6:9d:7c:4d:
07:e3:b6:70:76:97:0d:7d:e4:f8:f1:7b:3c:85:62:b9:2e:a2:
e9:43:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:00:37 2025 by rpki-client