Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
File: C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json)
Hash identifier: 44IAN1CEh+czmeINlp/7lJpEKYlf6fx/3zlJ1DQGZbo=
Subject key identifier: F8:A6:A2:D3:EA:38:0A:DA:F3:CC:90:37:4C:D6:C8:52:AB:A5:F2:EF
Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C
Certificate issuer: /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
Certificate serial: 0A71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
Manifest number: 0A64
Signing time: Thu 30 Jan 2025 19:47:54 +0000
Manifest this update: Thu 30 Jan 2025 19:47:54 +0000
Manifest next update: Thu 06 Feb 2025 19:47:54 +0000
Files and hashes: 1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: pNgRfn4V2FkWQA29FwTr5/WtYAWVgGAFsiawtRb+OL8=)
2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: WLUNLYOe6u3RXulXjPlFaJ14QsR/ucoW6q6I048by4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2673 (0xa71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
Validity
Not Before: Jan 30 19:47:54 2025 GMT
Not After : Feb 6 19:47:54 2025 GMT
Subject: CN=679bd76a-fda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:c5:33:13:1d:ba:2f:5c:89:08:59:1e:64:
96:0c:d0:19:42:cf:b3:4f:e6:4e:ea:1d:26:10:c2:
2c:ef:f2:d9:dd:23:f2:04:ca:d3:b1:fe:58:29:ef:
68:e6:c8:7c:cc:da:9c:3b:a8:9c:20:05:f7:42:0a:
fc:1f:9e:33:49:c3:0c:98:f3:84:e4:88:d5:25:26:
89:67:98:73:8e:f6:0c:3a:b6:0f:34:96:67:21:c5:
21:fe:de:11:f4:72:25:35:97:42:a4:66:f4:76:22:
1d:4b:b6:19:b1:42:eb:d0:98:9f:9d:e6:59:ee:49:
8c:30:30:d7:3b:8c:ad:30:71:41:5d:e5:b3:08:7b:
cb:01:8a:a2:1f:c4:84:10:df:24:4a:4e:37:54:a6:
54:fe:c8:f1:ee:f3:91:f4:e6:55:26:76:a5:dd:f4:
2e:1d:4d:89:bc:c8:7a:4f:47:69:e2:cb:0e:dd:b3:
d3:17:2d:77:f4:60:e3:90:b5:e5:79:15:90:e7:60:
34:54:a6:2f:71:c6:02:dc:5b:57:29:f9:78:4a:27:
43:54:4e:bc:80:2d:49:33:4d:fa:7f:d7:71:90:2b:
26:c0:ea:a6:18:eb:3e:07:f1:db:cc:04:6c:ff:66:
21:6c:7f:1e:1a:70:6f:83:a0:c3:86:ef:67:ad:80:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A6:A2:D3:EA:38:0A:DA:F3:CC:90:37:4C:D6:C8:52:AB:A5:F2:EF
X509v3 Authority Key Identifier:
keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:7b:33:e8:a4:35:6e:de:37:f4:d6:75:82:a5:90:dd:b1:c9:
1e:97:ee:53:1f:f2:b5:60:c9:cb:77:a7:65:34:0d:ff:44:19:
df:63:bd:b4:62:99:0a:b7:e0:f2:4c:41:83:a3:83:08:1c:a7:
e2:67:2c:3c:34:de:57:69:4d:bc:98:59:54:92:31:b7:3a:34:
ef:9b:57:b8:2b:39:e5:87:ad:67:a2:c7:68:02:c4:fc:0a:5c:
0e:c6:5e:61:2d:5a:21:02:c2:9d:91:6f:0b:cf:c6:cf:ec:d0:
e5:75:1d:c4:31:8c:08:6f:fb:37:c9:92:41:04:92:af:ee:17:
25:33:da:39:e8:0d:d8:ae:60:01:3a:86:ec:45:90:5e:21:43:
bf:77:36:3c:96:e7:a3:72:0f:76:2e:b8:3c:1c:1c:ea:0b:89:
51:3a:66:3d:9d:4a:91:60:a4:fd:8b:37:28:34:33:93:d4:f2:
b6:a3:32:b3:d1:ab:06:83:0f:06:d5:72:7e:e7:f9:d2:f7:49:
09:b5:59:ef:b4:19:b8:59:54:b9:c8:93:d3:57:50:b3:53:95:
97:ab:51:8c:ae:5d:5d:ba:1d:c8:a6:38:70:3a:04:06:f1:aa:
64:31:27:4d:c8:f9:9f:8f:f1:93:64:6e:cb:32:ea:ec:c9:35:
5d:34:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:21:28 2025 by rpki-client