Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json)
Hash identifier: qP41idV2ka4IVvTdBZKxpaikeo3Ki50Kb2j+rlAcnec=
Subject key identifier: E9:8D:91:10:D4:33:D4:58:32:36:10:4B:A4:C1:87:C4:F9:37:3B:6D
Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Certificate serial: 03B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
Manifest number: 03A6
Signing time: Fri 31 Jan 2025 00:50:07 +0000
Manifest this update: Fri 31 Jan 2025 00:50:07 +0000
Manifest next update: Fri 07 Feb 2025 00:50:07 +0000
Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: HuohhRe9CBPLr+q8tOZa8bX79OCGP7B5t5RDqhTK4YQ=)
2: A98BD3DE91F211ECA28ADD36C4F9AE02.roa (hash: E8V1sk0D8i4WfgIIWQOrfA2cQHivc9el6REKMjdr7Wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944 (0x3b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Validity
Not Before: Jan 31 00:50:07 2025 GMT
Not After : Feb 7 00:50:07 2025 GMT
Subject: CN=679c1e3f-c209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:8f:7b:b2:22:1a:a2:e1:b7:00:b6:f1:7d:
7c:bf:09:1e:ee:d4:5e:53:3d:37:34:fd:61:b8:25:
eb:cd:9e:db:1b:ed:f3:e5:f7:e0:81:1b:d5:8a:05:
2b:4c:a7:35:d2:f5:0e:c7:f7:67:b5:5f:6d:24:28:
97:f2:63:0c:5a:6b:47:63:d2:4f:15:1b:30:c6:53:
5a:47:66:8e:c0:87:b0:68:f4:f3:d9:e2:f3:ff:f4:
81:92:08:d8:26:a6:b8:81:3d:95:92:c1:f1:72:9b:
3a:11:bc:62:fe:fd:10:81:b8:bc:4a:17:2a:9f:18:
5b:5a:cf:1c:27:a6:c8:80:e5:86:71:5e:68:f5:e8:
d5:10:20:b2:73:d0:f7:8b:f7:bb:03:c6:f9:d3:01:
a8:fb:05:00:52:c9:38:05:a0:a7:e9:a9:08:f9:27:
f5:42:d8:45:60:a6:76:65:0c:23:e4:51:5a:aa:35:
7f:09:fd:b2:a9:d7:14:02:61:2a:a2:b8:0a:92:8c:
97:ce:64:bd:e6:79:3f:d9:8a:a0:42:1d:c8:93:be:
0a:31:54:71:cf:f5:d1:a1:ca:cb:30:13:ed:f1:de:
57:56:63:e7:a7:cf:8c:f3:a7:d7:d9:9d:81:f3:21:
b6:7d:9f:42:cd:e2:49:6a:c1:6d:bd:b3:41:92:b5:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8D:91:10:D4:33:D4:58:32:36:10:4B:A4:C1:87:C4:F9:37:3B:6D
X509v3 Authority Key Identifier:
keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:51:aa:ca:5a:6d:41:d9:f4:b2:c9:1c:04:de:7c:9e:f4:94:
6a:f8:f1:71:e1:be:5a:9c:32:c7:33:02:b9:e7:38:17:33:ce:
60:0d:31:e8:22:28:9f:4c:19:3d:81:af:dc:ba:2a:bd:2c:8b:
f0:a0:77:d3:e8:91:55:28:75:a8:e7:86:b2:9f:3e:e1:51:48:
cd:19:6f:e0:d4:0a:ec:81:ee:dd:67:19:98:ba:b2:4a:31:05:
a2:51:53:8b:34:eb:bd:d6:88:5c:f5:04:72:6d:b6:74:db:01:
39:b2:31:b1:f9:71:c1:f4:6b:09:c1:0d:50:e9:eb:19:42:cc:
b6:05:ba:32:1f:22:5d:07:f4:23:fa:35:87:37:99:73:70:92:
f4:94:12:d6:1c:63:75:94:cb:fc:3b:39:55:e6:bd:88:cd:ae:
eb:da:e9:5e:5d:36:46:2e:bf:48:12:cc:83:a8:f9:16:63:f4:
33:7e:a0:6c:ec:d4:2c:fa:6c:83:32:32:78:d6:66:5f:0e:a5:
e9:a2:a2:e7:3c:c3:57:84:3a:08:68:02:f0:a8:c3:d8:53:1c:
3f:5f:69:88:98:b5:29:5d:22:3f:b3:75:ad:40:95:0a:91:8c:
c3:6d:96:e7:83:d2:79:d0:c0:1e:14:ea:fc:6e:31:0a:29:e1:
31:53:67:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:52 2025 by rpki-client