Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft
File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json)
Hash identifier: u732Sl0jDmpwXFqWdMAjb2eWPoEyCZEs/GUSq5AmBcU=
Subject key identifier: 3F:0E:C7:78:9A:F9:5A:2D:96:FE:27:AB:EC:A5:39:16:23:A5:28:23
Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8
Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8
Certificate serial: 0BEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft
Manifest number: 0BDB
Signing time: Fri 31 Jan 2025 18:41:48 +0000
Manifest this update: Fri 31 Jan 2025 18:41:48 +0000
Manifest next update: Fri 07 Feb 2025 18:41:48 +0000
Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: RLg45T/A+jZg9jviiPO7l9s7/EjiQVTuJsK8TjQ6SzE=)
2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: AXlGmtPAr/+ZjGZEvsdIuhh3ValXH523UgvEJrH07C4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8
Validity
Not Before: Jan 31 18:41:48 2025 GMT
Not After : Feb 7 18:41:48 2025 GMT
Subject: CN=679d196c-97b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:ad:cf:6d:ce:78:ac:8e:c4:5a:17:76:a5:
b5:e8:11:a5:3c:96:fd:5c:7a:ea:35:d7:94:44:9b:
48:d2:27:ee:64:dc:a2:6d:77:d8:bc:d3:5c:37:a4:
22:5d:06:6b:b6:c5:37:47:83:d6:f1:18:1e:68:6d:
81:31:a7:c1:f4:23:8f:f1:c4:ba:46:63:37:a2:ca:
10:5e:da:a4:e6:3d:8f:b3:a7:82:e3:82:f4:df:c8:
a6:07:42:ab:13:0a:f4:a6:df:39:15:6e:92:39:24:
aa:f2:d3:aa:b7:3f:b0:a4:5a:b4:c3:a1:5d:08:f3:
5b:95:31:60:b7:28:90:4f:53:04:95:02:81:fd:8e:
2c:4a:5b:e3:cd:9e:13:cf:be:b5:8a:df:5e:39:b5:
64:ac:54:25:94:d5:4e:7e:93:8c:95:f3:5d:91:0c:
ed:dd:49:04:87:4c:17:e4:14:23:6a:e6:3f:b7:c3:
bc:54:ef:0b:7a:96:a8:82:cc:0d:04:f9:3a:04:a7:
e5:61:20:a8:6d:15:61:07:d2:f5:5d:78:87:53:d7:
78:54:d1:bf:b0:f4:de:09:68:a8:43:3f:1c:dd:ab:
44:55:1e:8a:dd:35:04:ce:84:54:8c:c5:48:23:a5:
47:24:7c:72:95:16:37:55:6a:f0:65:be:2c:59:5a:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0E:C7:78:9A:F9:5A:2D:96:FE:27:AB:EC:A5:39:16:23:A5:28:23
X509v3 Authority Key Identifier:
keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:10:5d:66:f5:fc:a4:1d:4f:f2:e3:b9:7a:04:8a:41:d9:bf:
51:38:a1:b4:5f:c3:ce:e0:25:c8:20:f6:06:b7:bf:17:a9:07:
f9:67:67:d5:52:f4:b2:dd:38:91:e4:89:2e:d3:75:7b:d4:58:
f6:34:90:fc:28:36:6d:6d:0b:4d:f5:77:3c:dc:e3:38:f4:b7:
24:0d:78:e5:ca:03:ce:04:53:57:03:a4:11:ff:0e:54:45:40:
34:b1:61:e6:ec:c9:ae:b0:24:f9:f3:55:0b:52:9a:e0:7c:2d:
13:f0:12:ac:a1:02:26:43:74:fb:b9:31:e0:30:9d:90:93:76:
69:7a:73:b6:53:19:07:28:2d:cc:5e:ba:0b:86:7f:66:8a:2f:
69:d3:65:10:fa:7e:7c:d7:eb:48:f0:58:3a:0e:f9:c6:f1:44:
5d:ad:8d:9b:8d:4b:2c:fe:6e:ae:db:be:76:b2:c5:0c:61:3c:
1f:a7:9a:3a:09:0c:fd:43:33:96:38:f4:ac:0d:27:8c:45:f6:
0f:b4:13:e0:a8:c3:e3:79:8b:5a:2a:e2:d5:32:10:26:03:46:
55:e6:ff:7c:1a:5e:92:0b:20:44:3c:2d:88:5a:5f:e5:59:95:
40:c2:99:72:66:55:3e:a4:03:48:09:80:f3:08:58:18:03:e8:
a0:3c:ee:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:20:42 2025 by rpki-client