Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json)
Hash identifier: 1q7qtCom/ASWgTfhVjnmR+55nHsoeVSSgUs9aljm61c=
Subject key identifier: D4:CF:19:CC:EF:29:C1:E9:6D:27:D1:18:3C:C3:90:9C:E7:B4:FF:12
Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
Manifest number: 0224
Signing time: Fri 31 Jan 2025 02:05:36 +0000
Manifest this update: Fri 31 Jan 2025 02:05:35 +0000
Manifest next update: Fri 07 Feb 2025 02:05:35 +0000
Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: QFv1+/y+0iTOkqAgFSugs6ZkViz1bW/1+RWP3UEtdTU=)
2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TZ/n2fdCp6It0G4ugsLwMjkFuDgasyyKStMAe77+R34=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7
Validity
Not Before: Jan 31 02:05:35 2025 GMT
Not After : Feb 7 02:05:35 2025 GMT
Subject: CN=679c2ff0-bf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:d4:31:0f:12:c0:67:ee:6f:89:f9:17:ee:
e0:22:bd:05:cd:b4:fe:41:58:ac:9e:01:ee:6b:1d:
9d:e4:8f:e6:a5:ff:24:bb:be:9e:5e:27:cb:ad:a7:
0b:51:de:0b:08:f7:06:fd:c4:3e:0a:d1:c1:66:7c:
70:ea:0f:ef:0b:94:75:78:81:f9:43:35:88:08:cb:
9a:26:4e:9a:ec:78:93:57:5b:68:de:cc:ae:c2:4c:
a3:50:f8:56:c7:91:8e:4b:49:8f:75:56:ce:8a:27:
2c:43:d0:33:42:a7:f5:9b:57:11:5a:6e:61:23:48:
85:63:cd:ed:fc:d3:7e:21:7d:55:e8:b3:b5:5b:06:
f3:59:13:8e:f7:d0:ed:94:fa:cc:09:f9:91:f6:53:
39:6d:4c:f4:40:c2:85:f9:c6:04:4f:a2:33:f0:a6:
33:fc:fd:21:41:7c:3f:24:7f:59:fd:cb:11:9a:70:
9a:ee:38:52:01:3f:07:f6:7d:05:c1:0f:0e:9a:85:
6b:cc:f1:52:63:6a:b5:ec:ea:9d:1f:66:1b:df:da:
15:1b:45:37:34:a7:cb:ad:21:42:57:cd:22:11:2d:
dc:ba:24:27:79:d8:49:1a:84:63:02:88:d6:aa:af:
b2:ed:0a:6c:fb:7c:ad:24:3e:75:5f:90:57:81:84:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CF:19:CC:EF:29:C1:E9:6D:27:D1:18:3C:C3:90:9C:E7:B4:FF:12
X509v3 Authority Key Identifier:
keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5a:81:f0:a4:af:47:83:a9:81:ad:a2:a1:b4:96:c7:56:c4:
8b:ba:36:d0:d9:0f:8f:6d:57:cc:f2:7d:b2:90:82:f3:97:b8:
8e:9f:83:73:5b:7c:98:a5:a8:b2:ee:78:67:9c:9e:51:02:c6:
f2:15:2a:84:3b:de:58:f7:77:1b:e2:74:e8:17:6c:b4:a9:77:
d3:ca:8c:99:27:f3:d4:05:c8:44:1d:56:f8:43:14:c5:71:10:
0e:79:97:58:86:ec:cb:4e:ad:b6:a5:b9:20:86:85:e0:fb:d8:
d2:34:5b:2e:e8:ce:58:da:7f:a9:b4:af:60:a0:cc:63:b2:ca:
85:a0:45:83:99:c6:8c:e7:50:17:27:50:73:0c:e9:c7:3f:50:
e7:36:ee:5a:8e:f8:1d:f4:49:1f:4c:8f:04:35:5d:c8:55:5a:
04:e3:f4:50:53:20:af:c4:6d:02:60:7a:50:7e:14:3a:b3:ef:
d3:56:e0:56:63:30:11:8a:c7:a5:b8:9a:18:83:e2:44:be:ee:
44:ea:d2:54:6c:c0:02:3a:fc:0b:a2:1b:00:20:63:0a:54:f8:
ec:b8:1e:5b:b1:06:66:5a:36:df:d1:0c:15:23:03:08:85:f2:
8b:b4:d3:0e:54:7b:63:32:f4:d4:ac:51:01:12:30:37:86:e6:
6c:54:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:03 2025 by rpki-client