Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft
File: XsGmrXajq_3B4TKesmN8AYZLSAg.mft (raw, json)
Hash identifier: nTFpK3D06yOwkqqYQlLu7bB5n7rFTkFDw9NrLIjarMU=
Subject key identifier: D9:41:4F:36:9A:74:C4:96:CF:40:F2:84:3E:6B:A9:7F:72:DB:5F:A3
Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08
Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
Certificate serial: 07A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft
Manifest number: 076F
Signing time: Thu 30 Jan 2025 21:34:13 +0000
Manifest this update: Thu 30 Jan 2025 21:34:13 +0000
Manifest next update: Thu 06 Feb 2025 21:34:13 +0000
Files and hashes: 1: XsGmrXajq_3B4TKesmN8AYZLSAg.crl (hash: Kp+leElwXv6611PTlU509+CBrJ4eVXBwZY8GXs1zlFw=)
2: 46D6261876A511EB82E04A2FC4F9AE02.roa (hash: Z0HHcyxz7rmGLBYwcIWDSL9D03AdZbtYiS469aOTikg=)
3: B512A570109211ECA693D74EC4F9AE02.roa (hash: AOyufc93Chw9bEWHvFa0LDI+LOdW3FqSZFo43ILQvd0=)
4: 82BB885E4B9811EB85F74960C4F9AE02.roa (hash: SIyPVzvdBUXV45MMJo7qH7it3raxM+Gi6MA1efnGzMk=)
5: E3AAE94243B511EB8DA3F473C4F9AE02.roa (hash: ftDRlCPQKF+Ib5B7VJZrq540hqlVUdTm8Q2C4Ih+cM8=)
6: 7CF84F084B9111EBBA09CA72C4F9AE02.roa (hash: HxA8u7nmZWUr6BPYIZAwMw8J3pQQtwxfZZvWeTi7tWI=)
7: CF41132A1DE811EB9DE34963C4F9AE02.roa (hash: YABaqUWE/JPdcjinbFv0PWoHHYymCq6aO+ylU5Xzjo0=)
8: 046130D225FC11EC9D57EA7CC4F9AE02.roa (hash: XhE6x9E/aZ957HcPZHgLlj7Fv56GEXE7hy1IWMNgX6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
Validity
Not Before: Jan 30 21:34:13 2025 GMT
Not After : Feb 6 21:34:13 2025 GMT
Subject: CN=679bf055-86bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:e8:a7:30:d9:f9:97:ea:69:74:8d:2c:ae:
9d:65:b6:bc:07:50:dc:af:bb:bc:fc:bb:57:51:2a:
cd:15:51:67:17:bb:52:ee:67:9e:9d:5f:e1:fa:01:
8e:44:52:d5:3f:0d:37:8c:82:2d:d1:3e:89:98:00:
87:5a:68:c8:9c:7d:92:31:bf:ce:00:59:d8:74:96:
12:33:1b:6e:a1:f7:ac:91:c5:f3:75:72:a4:f4:7c:
71:b7:e6:17:86:ab:80:d0:e4:50:ca:8d:51:4d:d4:
9b:ed:c5:d3:cb:01:57:58:4a:a8:38:b6:f8:01:97:
7d:fe:6f:ba:52:ac:1a:cb:42:75:d6:c1:68:90:7c:
ca:c8:0a:f6:8d:a3:af:f8:0a:34:db:40:85:36:41:
9d:96:b6:25:05:48:7d:37:4a:8e:da:55:dc:c2:3b:
4e:3c:ba:a8:a0:5b:50:fa:61:28:2a:1c:eb:79:44:
05:4e:12:70:93:7e:ad:83:73:05:4e:5d:1b:ee:33:
f7:0c:6a:93:df:c4:c7:e9:ea:34:0a:05:6c:15:33:
d0:d7:1a:1d:5f:28:a5:27:a5:ca:e2:af:fb:d8:4f:
a1:8d:c7:8b:b2:22:68:48:1c:98:0d:fe:a5:46:22:
b8:bb:3c:9a:3f:b1:1d:9a:1b:06:60:05:aa:86:bd:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:41:4F:36:9A:74:C4:96:CF:40:F2:84:3E:6B:A9:7F:72:DB:5F:A3
X509v3 Authority Key Identifier:
keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:01:ef:a2:20:69:27:57:5b:00:8d:b5:7e:10:46:e2:54:15:
80:b1:1e:e1:8f:65:80:9f:8c:b2:7d:37:67:7a:a6:35:75:70:
3c:bf:a0:0e:54:f1:5d:48:2a:36:f6:b6:a7:5e:dd:ef:3f:86:
99:22:eb:e7:8e:44:3c:89:4c:ba:58:a3:e6:90:f4:21:e4:18:
c5:62:92:d0:c2:92:29:63:22:30:00:e9:c4:ea:8d:eb:1d:d9:
9d:78:37:89:f0:49:6b:b0:84:35:be:be:1d:60:ea:4c:3a:6f:
92:c9:21:d5:f0:c1:ba:29:57:ff:69:9d:3e:73:d0:e3:d4:eb:
83:23:12:db:a1:ca:b2:81:cb:9c:15:27:98:c2:9f:33:40:a9:
c7:c5:0a:1a:a2:eb:69:37:94:da:70:14:2d:cb:49:6b:6e:59:
44:bf:ae:83:88:9d:c5:1a:be:98:c4:18:1c:b4:7d:63:c5:54:
5a:1f:7a:af:c3:6c:50:e5:be:8b:cc:f3:e6:43:ae:3b:37:cb:
51:bb:47:1b:cc:99:ae:24:7c:86:3f:38:79:ff:ac:9f:bb:bd:
ad:f0:6f:e6:4f:52:ac:6e:bb:2f:fa:c9:a5:0d:d6:27:e7:0a:
5f:73:3a:eb:5f:62:32:36:d2:46:62:bb:f3:cb:26:d8:97:f2:
2f:72:fb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:09:45 2025 by rpki-client