Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
File: aMK1iNFoWlh0LYouGIhl2zEQPPc.mft (raw, json)
Hash identifier: f95mFlWulkrCy+V93nMClJ0Vzzy1z36SqFt31AY1GQ4=
Subject key identifier: BD:87:02:34:F0:01:49:1A:27:B7:20:13:47:14:D7:17:9E:7A:8D:34
Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
Certificate issuer: /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
Manifest number: 3A
Signing time: Fri 31 Jan 2025 06:37:56 +0000
Manifest this update: Fri 31 Jan 2025 06:37:55 +0000
Manifest next update: Fri 07 Feb 2025 06:37:55 +0000
Files and hashes: 1: aMK1iNFoWlh0LYouGIhl2zEQPPc.crl (hash: YfGj9BCstht7l/1j/vFGptK0etjypPKBQVGO/gC3eAc=)
2: 01BA52A28CF411EFAE6F7F10C4F9AE02.roa (hash: EDXTUfDV5y3+rKMOJtb6JOA7sYGQ4kz4K9vrUd4nHN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Validity
Not Before: Jan 31 06:37:55 2025 GMT
Not After : Feb 7 06:37:55 2025 GMT
Subject: CN=679c6fc4-55bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:26:4c:c4:dd:92:52:eb:92:78:04:91:98:
66:ae:1c:d2:5c:bf:11:9e:03:ba:6e:ff:a7:07:50:
0f:84:d4:44:bf:8e:4a:36:3e:65:e3:8e:e7:e8:f1:
c9:8c:b7:24:ab:61:58:9f:20:43:8b:4a:09:c2:05:
e9:df:6c:69:fd:7f:2c:42:a6:9e:da:38:42:f6:23:
d2:5c:d7:90:c9:de:5a:8a:85:ec:a4:a1:c0:fc:1a:
85:fd:e1:b6:f2:90:35:ef:71:57:1c:b0:87:de:ca:
ce:ed:b2:d2:c5:69:2f:9b:24:96:e1:ac:1e:17:33:
66:1d:17:d8:06:ca:a1:6b:82:80:d9:3b:5c:71:a9:
a3:45:61:96:f9:bc:f5:ae:48:b8:aa:97:4c:95:39:
17:90:d2:42:38:88:3a:22:f2:5c:4b:a5:45:62:f8:
de:24:c5:c0:16:a1:c8:f7:7f:51:13:9f:9f:dd:c3:
dd:37:18:22:cc:32:9d:93:bd:38:f1:a6:14:e3:8a:
1e:72:6a:a7:a7:3d:03:08:a5:2c:32:0e:e2:1c:7a:
58:75:ec:38:5b:1e:9b:e1:e4:62:79:9a:16:63:56:
2d:e5:77:19:2b:0b:6e:fe:c4:1b:f0:4d:f8:1c:51:
6a:7a:9f:a0:23:9f:cc:a4:ff:32:42:8a:d5:94:70:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:87:02:34:F0:01:49:1A:27:B7:20:13:47:14:D7:17:9E:7A:8D:34
X509v3 Authority Key Identifier:
keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0d:a7:77:e9:3b:05:3a:c2:1f:ed:6b:15:b0:c4:8c:4e:30:
7f:8b:25:23:67:b6:ac:7a:b1:27:38:9c:6a:c3:34:84:d6:c7:
bc:b7:e5:7d:5e:e9:65:d4:b8:64:04:79:a6:a4:0b:2c:1e:1c:
79:07:f7:8c:8b:33:9f:0c:11:6b:2a:84:ae:c5:04:86:bd:3f:
ac:6a:f8:3b:19:1c:48:c7:34:c6:fc:2f:9c:4b:de:bf:aa:75:
51:05:32:35:92:e8:14:e5:96:5f:b8:f6:03:77:24:46:08:7d:
08:ca:ed:46:57:b2:83:e4:cd:85:1f:ed:e4:10:23:5b:3c:e7:
51:51:28:d4:9b:00:67:7f:b6:fd:45:42:6d:9f:c2:83:07:bb:
7e:d1:96:24:ca:e6:b4:fc:3b:ea:a4:1a:4a:4b:f6:4c:68:b9:
9c:10:1f:c5:6b:fa:16:00:1a:31:c6:da:4f:f8:96:39:96:d1:
29:7b:29:a4:e4:82:fd:ae:5e:63:84:f6:7c:6d:fe:44:90:bb:
70:3f:68:08:05:c0:ee:2e:63:20:4d:71:27:a6:cb:51:da:95:
3b:20:83:48:5d:f0:86:25:35:34:99:86:d2:30:ed:3a:11:ec:
b0:39:da:7f:5d:eb:46:51:d7:a8:9e:c7:27:97:4b:ce:f6:6c:
2d:d2:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:34 2025 by rpki-client