Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json)
Hash identifier: XSFdUislO9muQEoTmeIhytDnaDbBdQorA6Xbnej1Eiw=
Subject key identifier: 32:25:3C:9F:A9:3D:E8:B1:72:DC:BB:A6:2A:96:78:39:D2:D7:3F:15
Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29
Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
Certificate serial: 093E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
Manifest number: 092E
Signing time: Thu 30 Jan 2025 20:22:26 +0000
Manifest this update: Thu 30 Jan 2025 20:22:25 +0000
Manifest next update: Thu 06 Feb 2025 20:22:25 +0000
Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: 280jjiZqNJh+KqmV/9cuRVHnKqKSmkmhDjVIcKglas4=)
2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: Xd/9pByFb2cbZ9xoUnmDVjNmjmus87X0lFOERhfsZNI=)
3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: N79J5/addSjvuTRJUjHpGEDoonJ5OZtfdl2v8Aonsr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2366 (0x93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
Validity
Not Before: Jan 30 20:22:25 2025 GMT
Not After : Feb 6 20:22:25 2025 GMT
Subject: CN=679bdf82-917b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:b2:64:29:1c:8f:b5:30:f4:9f:72:1f:c1:
d1:25:43:13:40:52:a8:ac:be:51:6a:03:f9:8a:e4:
0f:3f:4d:b7:1f:13:20:7d:ad:ce:f7:90:1c:26:33:
cb:82:9f:64:12:dd:40:aa:48:68:3d:9e:23:fe:13:
23:92:d9:7b:68:ea:df:58:3d:1b:f6:8d:09:64:bd:
66:31:5a:8e:a3:f4:29:bc:71:cc:51:ba:1a:e0:2f:
77:f6:88:d0:94:9d:89:2b:07:06:ee:f6:fc:9a:5f:
36:bb:70:ce:08:1a:fa:f8:55:8a:bb:e2:c6:6f:25:
99:e5:1c:91:31:8d:ff:3b:03:17:5b:b7:81:68:ad:
fb:59:da:5c:8e:b5:f5:4d:94:fb:97:4f:30:66:13:
77:50:d7:e3:bf:8e:c3:4d:c9:ab:7d:f8:91:48:c2:
31:e5:c9:53:6e:15:c1:53:c9:92:28:88:e7:2e:d8:
80:32:54:28:2f:a7:19:6d:c9:e2:ce:02:39:ea:5d:
5b:6f:55:76:af:90:ee:e8:c3:9a:35:fa:7e:4d:ba:
a4:38:d2:e4:41:50:43:67:7f:1e:53:ae:65:4d:dd:
ff:76:87:e9:17:22:af:91:2d:72:a1:7e:08:7e:c4:
0c:39:0c:6c:d1:b4:df:57:4b:a6:dc:2e:aa:60:e2:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:25:3C:9F:A9:3D:E8:B1:72:DC:BB:A6:2A:96:78:39:D2:D7:3F:15
X509v3 Authority Key Identifier:
keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d3:c3:52:2c:2d:7b:93:1a:31:85:0d:3e:3d:6b:3e:ea:8d:
ce:6d:a3:c1:21:2a:19:e3:0c:95:29:8c:c9:e4:3d:6f:a9:48:
b0:65:1e:2a:4c:49:46:9d:72:b0:00:1f:9e:e9:5c:29:fe:d6:
65:8b:89:bc:35:82:06:9a:11:c3:92:fc:38:70:86:68:b9:33:
22:5a:e2:f4:95:78:d6:70:f1:22:f9:4c:cc:4b:58:25:b1:2d:
6a:24:48:57:4d:7f:48:da:a1:58:ea:bc:f9:a9:b9:42:05:00:
21:d6:ff:57:dc:67:ad:f4:20:0a:2c:2b:f3:ad:43:95:fe:7f:
a6:6d:ed:64:e5:ec:fe:8c:8c:c1:d3:c5:db:48:88:1a:8e:a2:
f3:e1:40:0f:c5:16:4f:61:e2:e5:f9:75:98:e9:02:d5:37:9a:
4d:17:9e:fe:6a:2a:e1:43:ff:9b:05:dd:ca:6f:36:e7:ed:ab:
85:dc:14:4a:fa:64:8c:8b:08:ec:e3:f5:45:26:98:9a:72:e6:
10:4d:54:2b:2f:14:be:3e:4b:7f:9f:4b:58:e2:44:7d:2b:9a:
4f:36:47:93:d5:13:0f:15:2f:66:c6:4f:c5:b1:a8:5b:20:a7:
cf:6d:eb:9f:17:f8:cd:a8:4f:54:76:2b:c4:71:2e:01:69:93:
23:b6:48:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:30 2025 by rpki-client