Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json)
Hash identifier: H/an46N5um0b8SjAt2Rk2YZq6wjFs3vJLhuKnSLEKHo=
Subject key identifier: 2E:24:25:A3:08:4C:73:BF:92:25:27:01:9E:97:5E:3A:4C:FD:D5:77
Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Certificate serial: 0455
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
Manifest number: 044D
Signing time: Fri 31 Jan 2025 00:15:49 +0000
Manifest this update: Fri 31 Jan 2025 00:15:49 +0000
Manifest next update: Fri 07 Feb 2025 00:15:49 +0000
Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: W66L+GPZaR+MzR7Z3aw4ocsHDVSlfhUKprOeWz0DeLo=)
2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: cJIs31sqlgOhonhzClBxUM9SmxEaq46WFcZovXHGcPw=)
3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: Mum2g6Ft9eC1OvjjJ0nqhQo1XRrbGEG1M1RHx+Vnh0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109 (0x455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Validity
Not Before: Jan 31 00:15:49 2025 GMT
Not After : Feb 7 00:15:49 2025 GMT
Subject: CN=679c1635-8d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:15:6e:d7:0c:f3:fe:2f:e0:1f:c7:02:73:
82:41:5b:39:7d:06:df:71:1d:c8:16:49:88:a9:0b:
75:51:e0:5c:c0:45:2e:9d:f1:86:02:e0:ae:f3:2d:
39:34:0a:bc:76:dc:81:19:8d:79:e9:90:91:df:01:
b4:af:13:95:81:43:29:00:36:86:71:33:be:8e:5d:
dc:16:c4:c4:76:c1:3c:47:a7:62:c2:cd:97:1f:29:
fe:e5:2b:d6:b4:c0:23:6b:d7:b6:70:5e:42:4e:3e:
9d:87:ba:0b:de:12:a8:15:da:be:a2:7c:ef:26:df:
d0:6d:c1:da:bb:f4:b3:b2:25:30:c3:5f:a0:ff:8a:
b8:82:21:aa:6e:a9:2e:f3:49:17:5b:96:d2:d1:26:
e3:45:2b:a2:71:6e:b0:08:c1:7b:83:c1:e8:1c:7a:
06:0c:4d:40:e1:b9:9b:41:24:f8:8f:fa:24:4d:93:
d6:4e:ea:57:de:61:e4:a1:d0:09:cb:aa:09:2a:b3:
46:99:a4:8c:59:79:70:ac:57:eb:5a:95:d0:d7:e2:
b4:b8:77:ec:b0:bd:45:c3:c4:c1:c2:33:d5:09:52:
4b:24:14:b3:23:a9:13:c5:87:f4:14:1c:ae:df:c8:
05:f3:df:1a:e0:74:98:cb:ed:be:09:06:f8:87:e2:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:24:25:A3:08:4C:73:BF:92:25:27:01:9E:97:5E:3A:4C:FD:D5:77
X509v3 Authority Key Identifier:
keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:87:f2:72:13:31:68:50:8f:4e:e9:d7:0d:6c:dc:a9:64:44:
a1:2d:62:0e:99:6b:a6:c0:2d:05:ff:e8:0a:70:0f:b6:0a:57:
05:bb:e0:5d:c2:8b:f5:84:30:67:c8:fd:86:1b:55:19:f8:42:
56:10:e3:f9:53:3d:76:7c:e4:1f:d8:73:b6:af:76:5c:ae:b3:
9c:de:22:cb:cb:c9:02:86:e4:7c:a8:69:ff:81:41:55:bc:c0:
7e:88:ae:8d:f6:6f:c1:fc:79:a9:78:24:87:7f:f6:d5:2f:75:
e5:00:a9:19:e4:9f:84:f0:03:21:1b:64:22:24:63:29:95:eb:
11:60:06:77:d5:82:cb:07:81:1c:2c:ee:94:ff:da:99:15:a5:
d6:3a:63:a1:57:4a:3e:3a:8a:90:07:b0:d7:51:c5:06:b1:76:
a8:d7:e4:ac:f3:ac:e4:f6:4f:f8:ac:1a:f2:94:59:05:6e:5a:
1e:d7:ff:12:74:ce:15:06:21:ea:08:55:4d:d2:10:33:fe:1f:
ca:9f:f1:4b:65:2f:08:29:ea:01:cb:7f:0d:74:83:60:6c:0a:
52:38:2b:14:04:72:47:bd:2b:06:1c:53:6e:66:8b:16:33:f8:
b3:32:8e:ad:4a:a8:0c:f6:d1:9c:a8:a9:ac:ac:79:e6:74:1c:
3b:61:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:41:09 2025 by rpki-client