Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
File: 41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json)
Hash identifier: KeTVfnGzpsINf6XYJFpeEY4BB2iG60WTWhw4vyWuD2Y=
Subject key identifier: 95:84:55:7B:2D:A9:C2:45:E3:A8:AF:E9:F6:80:70:DB:B1:4D:1B:90
Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
Certificate issuer: /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Certificate serial: 075A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
Manifest number: 0752
Signing time: Thu 30 Jan 2025 21:31:54 +0000
Manifest this update: Thu 30 Jan 2025 21:31:54 +0000
Manifest next update: Thu 06 Feb 2025 21:31:54 +0000
Files and hashes: 1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: EC3SDgJH6Oj/lIlIVQL+LewdV8QfIeR5Ip9tAaorisQ=)
2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: Sy432PhWarPbK2JtP9nP+Bmc/mIHDONttgOLY2annhk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A
Validity
Not Before: Jan 30 21:31:54 2025 GMT
Not After : Feb 6 21:31:54 2025 GMT
Subject: CN=679befca-1bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:b5:df:6d:ad:79:78:a8:e4:de:e6:ab:dd:
c0:22:83:0e:8b:b4:9d:84:87:1c:23:d0:e4:e1:20:
d2:9e:ac:0a:57:a7:21:cd:11:1c:bb:9e:00:20:2a:
fa:a4:d6:98:72:8b:6b:18:15:36:1a:04:cc:10:cb:
c7:f7:47:5d:7a:4a:7e:64:f2:41:d6:6f:51:c1:7e:
6a:b1:36:2e:c9:d8:f2:48:1b:bf:2d:f5:85:d6:07:
75:d1:13:32:a5:9d:3e:f1:d5:c3:38:71:b8:98:93:
4a:fe:31:88:c1:77:d4:8b:ad:c1:fb:e1:5e:a6:6a:
a1:5e:f6:1d:71:5f:65:c8:0b:0c:40:38:b4:f2:cb:
ef:63:a4:84:14:97:8a:eb:fb:9c:6c:f1:79:ee:49:
9b:6f:cb:47:ba:6c:5c:ff:fd:d3:85:12:68:b7:63:
cf:5e:8b:2c:f8:33:d2:bc:46:3c:10:a1:ef:5b:dd:
4d:e5:bc:ec:1c:2c:e4:0e:97:fb:99:54:bf:47:9f:
0b:41:fa:bc:93:d3:81:0a:2b:4a:21:01:0b:b5:be:
cd:d5:e0:cc:e8:46:3d:af:4f:82:6a:04:ac:60:a8:
81:c8:47:9a:f7:dd:80:a9:e6:a6:c9:3e:33:e8:5b:
ef:92:b3:f9:85:6d:c0:13:3d:f7:88:a8:97:20:62:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:84:55:7B:2D:A9:C2:45:E3:A8:AF:E9:F6:80:70:DB:B1:4D:1B:90
X509v3 Authority Key Identifier:
keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:1a:f3:38:14:c8:4b:e4:71:61:ad:7a:e8:fd:d5:31:1b:b9:
97:d2:d7:0e:29:9f:b0:d5:ae:9a:b3:5e:f0:9e:05:b9:a2:ae:
27:21:ee:05:ae:b2:1a:22:f5:33:9e:cb:6c:b2:66:9b:24:e1:
39:10:ce:bd:87:96:07:89:41:ee:3a:3d:67:5a:a9:b1:f3:b7:
b6:01:aa:62:46:5c:99:79:3f:d6:ff:c3:72:aa:8f:2e:10:22:
fc:d6:5d:41:38:81:da:bc:d2:e4:be:c7:c7:6b:ea:d5:5c:4b:
aa:c9:d9:4d:47:90:7f:66:11:84:12:6f:8c:a1:ad:f6:fc:55:
e5:e4:b7:95:f9:8b:e1:90:d9:5b:0c:e5:76:c4:db:0f:1a:59:
b2:2a:79:fd:aa:63:0c:07:91:17:97:41:f7:3a:5d:14:65:f0:
f7:c1:5b:79:ed:fc:00:12:06:97:e2:9b:8c:40:fd:25:80:b9:
33:17:7a:ff:b6:8d:01:93:5a:d7:c4:07:70:9d:b6:69:68:94:
8a:1d:58:10:f2:1b:c3:62:bc:ff:40:b1:f5:3c:c9:05:df:f0:
e8:7e:84:49:24:fa:99:58:a8:f4:92:80:28:1b:09:aa:8b:5a:
6f:27:af:60:e5:e4:8a:74:34:c4:8c:db:0c:ab:82:66:3f:82:
63:d6:d6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:27 2025 by rpki-client