
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json)
Hash identifier: CZo06iOwhSOJd7rT0uhyUqBNKrPrBPPN28/fTlOcyos=
Subject key identifier: 0D:BE:49:D1:81:E1:5D:43:D9:77:06:3D:F3:F7:E8:A9:E9:48:07:86
Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Certificate serial: 0461
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
Manifest number: 045A
Signing time: Fri 31 Jan 2025 15:53:48 +0000
Manifest this update: Fri 31 Jan 2025 15:53:48 +0000
Manifest next update: Fri 07 Feb 2025 15:53:48 +0000
Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: 5haY+q0/xmiI7a+yeEfA0lTOoQca2BzbZSh5oaAJ6PU=)
2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: rIHf5i83E1p5Ri/ttyh1R45twa+CCKGykvEfpC6f2Dg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1121 (0x461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Validity
Not Before: Jan 31 15:53:48 2025 GMT
Not After : Feb 7 15:53:48 2025 GMT
Subject: CN=679cf20c-e563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:02:a6:4c:54:5c:a6:34:0d:1b:55:29:14:
ca:8d:96:07:46:02:14:0f:5a:5c:ef:96:0a:7e:28:
a1:de:e3:32:f7:26:77:fb:1d:39:9c:e0:7f:e3:18:
2a:c6:3a:69:df:af:b9:d6:29:ae:d1:ac:30:24:76:
2c:94:a6:f8:8d:8f:1a:6e:94:c8:07:0f:6a:ab:38:
c9:34:cf:f3:c5:6c:0f:87:0f:3d:41:03:56:49:2a:
4f:d6:34:38:84:43:82:da:22:13:8c:ba:ea:f9:3d:
68:bf:a9:97:7a:80:a2:89:da:bb:17:b4:3e:d5:e9:
79:b6:f9:9c:e4:38:00:f1:49:60:73:60:d8:e1:97:
99:7a:3e:17:08:11:f3:a2:79:78:5b:7a:61:87:db:
dc:fb:87:73:44:0f:80:ec:61:58:c7:59:84:2f:42:
10:b4:d0:32:91:e2:f3:c0:a1:3f:5b:61:a3:ec:9a:
41:ca:6a:5c:22:1a:5a:7d:65:a7:2f:39:c6:30:ce:
a6:0b:67:13:dc:91:46:f4:7b:e3:c4:5a:db:a5:18:
cb:e0:4f:26:8c:21:83:54:32:4f:04:8a:e8:5f:bf:
41:e9:bd:db:1d:84:55:93:18:be:c0:e6:37:f6:ee:
13:ff:8d:14:3d:47:38:63:ed:0a:99:fe:97:65:75:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BE:49:D1:81:E1:5D:43:D9:77:06:3D:F3:F7:E8:A9:E9:48:07:86
X509v3 Authority Key Identifier:
keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:5d:d3:88:d5:84:7f:f4:bf:5d:d2:bd:9f:16:4f:8a:b3:da:
a7:9a:bb:21:1d:12:89:a2:cc:b0:71:1e:ff:37:48:75:52:53:
44:98:c1:9f:16:42:c4:dd:b3:27:04:c7:cf:cb:75:69:94:6b:
f0:04:67:d0:2c:f8:68:2f:59:82:ec:96:12:4b:57:32:87:92:
55:73:a9:cc:21:f1:fb:dd:be:95:02:10:57:9a:95:4b:28:7e:
71:8a:22:a4:0d:ed:aa:3e:7f:4e:7c:c6:43:96:13:3d:b5:13:
c0:be:13:fa:82:64:a0:a7:2e:f7:26:1c:d8:69:03:c9:df:f1:
73:ad:87:98:06:30:02:ce:5d:c8:ce:cc:aa:cd:6c:c5:61:3a:
05:be:0d:c7:8f:5b:e3:cf:9b:f5:bb:cc:c8:07:1b:0c:bb:e0:
39:e0:37:4b:8e:f3:db:25:9e:61:78:ef:27:6e:e9:a6:a4:0f:
df:16:44:06:5a:91:f4:02:3e:e9:f6:b0:f5:a9:ab:17:57:b3:
23:2e:b2:ba:a3:ef:4c:6d:a2:f7:5f:b6:c8:a1:21:b5:bc:31:
e4:f4:d1:3c:fe:1b:cc:b1:13:88:c1:50:15:7d:72:13:ae:0d:
1b:4c:b9:44:0f:b8:f0:7b:fd:d6:16:26:65:f9:30:38:dd:9b:
d0:8c:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:04 2025 by rpki-client