Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json)
Hash identifier: AitrdSxTKGZEpNZKl9m5cScAUQ56lHJASWA4QjIR/d8=
Subject key identifier: 17:53:37:83:7D:C1:7C:08:CF:98:9E:24:2C:42:C8:9F:D8:F2:1A:B5
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial: 22F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
Manifest number: 22C8
Signing time: Fri 31 Jan 2025 15:52:07 +0000
Manifest this update: Fri 31 Jan 2025 15:52:07 +0000
Manifest next update: Fri 07 Feb 2025 15:52:07 +0000
Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: 9V+/+kdkGAp2D93GyO8NTtSjLrt8SLhiOoN+ARUin1Y=)
2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: lXOFb0YJQZdFFX90oDPgUqBGFkT5p8wJoFtkhJ/Uo9A=)
3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8950 (0x22f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Validity
Not Before: Jan 31 15:52:07 2025 GMT
Not After : Feb 7 15:52:07 2025 GMT
Subject: CN=679cf1a7-f9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:66:1c:ff:8b:06:ce:ba:ec:0d:58:c6:39:
da:4a:a8:2d:aa:d4:af:4b:32:0f:6a:89:39:d2:bb:
90:e0:22:55:ff:b6:9b:9c:4f:88:ed:64:90:8c:f2:
8b:59:a8:8c:e1:79:a3:59:2f:6f:c8:95:6e:df:af:
ff:7d:8d:b6:44:a5:f0:0d:e8:0a:78:d3:4e:69:21:
b4:04:f1:6c:b6:15:cd:8c:df:e9:e5:d5:0c:ba:84:
25:7d:4b:89:cf:11:4d:48:65:ab:c5:c0:8c:19:01:
f5:7f:f6:01:50:b9:2c:65:19:7d:65:b7:52:49:03:
26:2f:20:27:d7:1d:0a:9c:86:b5:03:5f:77:e6:9c:
5a:f3:79:30:2e:49:00:fc:f8:a3:72:95:35:4a:d3:
64:a4:68:43:a0:6f:17:db:35:3b:8e:60:b2:db:b3:
a9:d6:14:5f:11:3f:dd:7a:03:a6:26:30:7d:61:70:
71:e1:e5:f3:0a:4b:c0:8b:3c:a8:4f:49:85:35:11:
a2:fb:b7:d6:9b:16:ff:e8:15:a8:1c:48:de:13:1f:
7e:43:51:f5:3d:cc:72:84:8a:2a:1d:79:85:35:dc:
6f:8c:e8:42:4e:2a:4b:58:b9:fd:cb:10:fd:00:d6:
65:63:8f:a3:e8:a0:e4:f2:70:a7:41:fe:22:66:94:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:53:37:83:7D:C1:7C:08:CF:98:9E:24:2C:42:C8:9F:D8:F2:1A:B5
X509v3 Authority Key Identifier:
keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ab:9e:ca:55:a2:5b:b4:e5:d6:58:49:0e:70:d3:84:1a:b0:
47:aa:a2:e4:a8:fe:99:95:11:51:25:d9:5c:10:ca:70:6b:5b:
4b:da:f8:fc:53:55:07:17:ee:bd:3f:34:bb:52:5c:c0:c9:90:
30:31:d5:d2:19:b5:3c:75:b0:9b:f6:b4:ef:8b:e3:f2:48:f9:
9f:96:11:b9:b4:fa:cc:3c:bd:a0:dc:a1:f8:15:d0:44:94:6f:
00:fa:ee:ac:d5:6d:c4:d5:75:33:6c:ae:f1:7a:81:dd:3c:a0:
4d:5f:9a:4d:b0:9b:68:7b:8e:8d:8f:9f:ac:36:6f:f9:e1:1a:
53:1f:4c:db:46:67:82:28:6f:35:6e:a6:d2:7e:78:58:d7:ce:
af:c0:74:f6:74:6d:ff:c6:14:c9:91:ec:91:d9:c5:10:f5:95:
2b:9e:89:eb:0b:f1:5c:30:53:df:e9:1f:30:ac:e3:92:31:bb:
53:db:13:f3:7b:76:31:f2:92:26:db:c1:7a:eb:4f:a4:e5:3a:
1f:3e:50:d5:39:83:b4:4a:e8:d9:38:e5:c9:88:0a:27:a0:3b:
f2:3d:84:1c:e1:76:21:d0:51:40:c9:b7:ad:17:59:97:29:2c:
56:45:cd:9b:a5:23:ba:2d:df:5a:ee:42:85:3d:97:c4:da:6b:
20:d7:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:09:44 2025 by rpki-client