Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json)
Hash identifier: H50lC8M5oKXqLDF16TG9srW74lpm1XVjkQZjeNwBn7Q=
Subject key identifier: D6:D9:9D:DE:EF:3B:90:55:09:E1:C2:3F:4E:23:7B:45:1F:F8:09:FA
Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
Certificate issuer: /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
Manifest number: 40
Signing time: Fri 31 Jan 2025 06:29:01 +0000
Manifest this update: Fri 31 Jan 2025 06:29:00 +0000
Manifest next update: Fri 07 Feb 2025 06:29:00 +0000
Files and hashes: 1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: SeINBA1vKr3IL5imIL2Ty/oR1h8oUX1HmNIhq0E7Dq8=)
2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: K3X3GoEdbp40UjZvhBO+XoTewllnOfMeBiUtz3yrvW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Validity
Not Before: Jan 31 06:29:00 2025 GMT
Not After : Feb 7 06:29:00 2025 GMT
Subject: CN=679c6dac-f62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:96:9c:2f:47:30:25:fa:07:ed:d3:4a:64:
2c:fb:ac:46:89:bb:40:bc:05:c9:80:7d:de:ca:e0:
d0:3a:0b:f2:ff:98:af:60:49:eb:6a:f7:2f:57:48:
19:53:c5:c7:92:db:11:c4:e0:f0:2a:f9:18:08:8a:
45:cd:41:a5:85:d0:cd:2f:00:e1:ec:49:0f:a4:f3:
3a:10:48:51:b9:7f:2b:13:4a:3f:15:9a:e0:27:62:
2a:f0:1a:00:68:3f:e0:ae:d1:ca:9b:be:9c:fd:5d:
b6:26:10:2c:e8:f1:0f:d8:77:49:fe:9c:83:d6:1f:
f3:aa:a9:bc:02:40:d6:16:da:39:e4:19:96:b1:f6:
c8:1c:60:e6:2e:ab:e3:c9:f6:da:69:a6:49:2c:71:
0e:01:b2:d7:69:9a:6d:b9:87:54:15:95:ab:e7:aa:
5c:ca:c8:13:ec:b6:8f:bc:5b:7e:ff:e2:b9:ee:c3:
1d:2b:d2:79:b9:02:4d:4b:db:81:0b:e3:f4:6b:14:
66:e5:47:0a:ac:a6:73:e1:06:af:08:b1:d0:04:6a:
2e:83:6a:87:b6:4d:b3:c3:44:4d:1e:c4:bf:d1:93:
4b:c3:a4:ad:8b:10:c0:ab:87:0a:c0:67:f5:2c:6f:
08:35:2f:12:e7:8f:c3:44:52:96:60:b2:5a:ed:82:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D9:9D:DE:EF:3B:90:55:09:E1:C2:3F:4E:23:7B:45:1F:F8:09:FA
X509v3 Authority Key Identifier:
keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:f3:3e:6f:fe:0c:7f:8b:d9:41:56:7e:53:d1:bc:ae:43:64:
0c:f7:3b:54:ee:4b:90:61:39:5a:f1:9f:f0:cf:af:dd:46:de:
cc:c9:c0:ef:19:96:4c:e1:36:b0:75:f2:ae:0c:3c:6e:76:ef:
d6:2e:11:62:fb:79:79:21:34:6f:c4:e3:00:33:db:db:34:1e:
b4:01:8d:e9:65:b4:de:72:a7:36:c0:79:8e:ec:bb:e6:22:78:
57:38:23:84:f0:bc:e6:22:2c:5a:2f:21:27:ec:1d:61:2f:8f:
71:90:8c:fe:a1:d1:bd:ed:ca:8d:7d:d4:fa:c6:17:5a:9c:e2:
a7:c7:57:2b:39:d6:4b:a5:29:64:db:5c:0f:4c:01:e5:5d:d7:
7b:11:41:89:fc:df:5b:fc:5d:51:b3:ea:19:25:bc:80:56:61:
9e:9e:92:9c:d5:ca:5a:84:3b:70:83:69:e3:1f:6c:4e:b8:57:
c9:97:31:ae:1d:b2:18:4d:fd:ff:3f:6b:64:21:51:5a:a0:a7:
3c:60:ca:b4:b1:47:f3:08:21:b1:dc:52:a1:b0:80:58:6d:ea:
41:9b:6b:4d:68:cd:a8:db:b8:e0:c1:7e:0c:8c:f2:32:08:6b:
40:5a:bf:5c:c8:a4:d7:6d:88:7a:fc:93:4d:54:82:0d:75:f8:
67:1f:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:39 2025 by rpki-client