Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json)
Hash identifier: 4Yp69TKUW+gUzAHzIj6TS1jOLGUDB0vqbTCIXK4lxAI=
Subject key identifier: 08:DB:05:AC:C9:EC:03:4E:FB:39:BF:AE:2A:98:34:68:DF:0C:DD:B3
Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10
Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
Certificate serial: 0B95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
Manifest number: 0B89
Signing time: Thu 30 Jan 2025 19:01:48 +0000
Manifest this update: Thu 30 Jan 2025 19:01:48 +0000
Manifest next update: Thu 06 Feb 2025 19:01:48 +0000
Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: p+VJtWgR9A5uZ/UJMxAHgh+yhZrTzDR3ShvrBQehqTE=)
2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: Ds+NhA319pny+P4IRt5z4T91HtH5A62GJ0ezQK1TtfA=)
3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: aCDVqL+/mM6LYQbOqfYbo7QgHkUrD6MbyKhMbVWHThI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2965 (0xb95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
Validity
Not Before: Jan 30 19:01:48 2025 GMT
Not After : Feb 6 19:01:48 2025 GMT
Subject: CN=679bcc9c-71e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:87:ba:c9:ff:e1:f2:66:76:fc:4f:5c:b1:
87:8a:9d:1f:68:f0:c3:4b:22:7f:cf:ce:45:6c:fd:
5e:e9:88:b3:12:3e:ae:52:3a:7d:b8:50:6c:92:d7:
ea:29:63:03:e2:f8:9f:27:0e:3d:8c:8d:86:7b:83:
4b:8b:7b:74:57:9a:e3:3e:4b:cf:2b:c2:01:92:ca:
5d:e7:3e:27:f2:47:03:25:51:92:f0:d1:12:5c:84:
42:bb:70:46:3b:b4:d2:2c:97:94:c7:8f:6b:41:08:
5b:ae:9f:16:2c:e0:5e:3b:80:92:cb:84:fe:52:20:
21:00:be:2a:8b:b9:f4:fa:42:99:d9:ca:7f:80:f9:
c9:42:15:e2:eb:23:aa:ea:5d:c6:61:93:81:16:4f:
9f:65:ce:5a:33:72:e4:33:e9:f3:da:f8:5a:9a:e7:
2f:0d:a7:b4:8c:de:55:a9:c1:68:a5:47:8b:2e:56:
4f:a3:6a:57:a8:1b:f8:5a:83:13:76:4b:80:ff:44:
1a:2e:91:8a:20:16:5e:e2:b5:55:72:2d:96:20:f3:
c1:6a:f9:f8:3d:3f:88:22:43:32:19:48:ec:a5:93:
6c:71:b4:6f:59:42:22:5c:65:b6:93:c2:43:a0:40:
d2:42:ea:34:11:15:7a:8a:f9:4a:46:33:29:c0:b7:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DB:05:AC:C9:EC:03:4E:FB:39:BF:AE:2A:98:34:68:DF:0C:DD:B3
X509v3 Authority Key Identifier:
keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:3b:96:57:85:d4:04:8e:db:9e:08:cd:82:15:ee:36:2e:c1:
30:fe:e7:f9:2e:6c:e9:bf:9c:0d:ab:9e:41:e3:de:1c:11:21:
85:94:96:eb:ad:07:05:72:f6:a3:dc:73:9a:74:db:e2:25:2a:
bb:c6:21:fe:c3:bf:d5:0c:f2:b4:1a:d9:d6:15:69:f6:26:4f:
6a:03:6e:a5:a0:12:65:93:c6:3f:b1:d9:7f:f1:97:51:ba:72:
59:d9:69:ba:87:7a:c7:cf:a1:15:eb:5b:7b:0d:12:5b:95:14:
88:1b:c9:eb:6f:d0:10:15:18:74:30:fa:3b:8a:aa:6a:65:35:
2f:28:a2:8f:7f:c8:ff:65:c4:24:02:3b:e8:d0:02:b5:cf:3b:
80:ae:a9:80:b0:d0:2a:ca:58:01:a3:a5:28:28:5a:fb:76:61:
0e:db:2e:97:fc:8f:04:9d:14:37:49:49:53:26:96:2f:4c:17:
0b:df:5b:f6:d7:1b:ca:d8:f6:45:7e:cd:00:b9:1c:1f:3a:81:
27:e9:0b:69:67:4e:e5:03:2a:9a:aa:ce:c2:dc:49:43:df:9c:
82:17:07:2f:e0:b8:18:6c:9d:45:e5:ae:f3:fe:b1:0e:cc:7f:
7f:a7:29:71:38:8b:bc:12:77:99:1b:7d:11:10:26:fc:9c:b5:
21:d3:a6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:58 2025 by rpki-client