Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json)
Hash identifier: KTJYFvrmH5mp1doQPl36c7bcAhc3m8GlfCPCHPi9m6Q=
Subject key identifier: 98:6B:2E:D4:AD:4F:60:58:3E:37:81:EB:2C:84:78:78:CE:C1:43:9F
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
Manifest number: 01B5
Signing time: Fri 31 Jan 2025 02:23:01 +0000
Manifest this update: Fri 31 Jan 2025 02:23:01 +0000
Manifest next update: Fri 07 Feb 2025 02:23:00 +0000
Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: kEDTsHA449uHzbcazxlANgejK9YXTeraaXpZrZWGPq8=)
2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: xvgbQt4eEZhtv3D2xw3qg4iJxZwYxghUdqa6K5JPB6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Validity
Not Before: Jan 31 02:23:01 2025 GMT
Not After : Feb 7 02:23:00 2025 GMT
Subject: CN=679c3405-6ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:3b:d4:8f:45:2b:2d:cd:1a:67:5c:8c:6a:
fd:4a:05:4e:0b:10:11:e6:16:2c:47:30:60:d4:cd:
15:25:eb:6b:b9:e7:93:e4:a7:6e:e6:4d:ef:ee:27:
64:3f:71:cc:07:bb:ed:71:ca:a6:a7:f1:a2:0d:b4:
13:d9:e2:32:27:07:ee:3f:63:c0:e3:b5:56:ed:8e:
33:8e:7e:70:7d:7d:88:63:1c:df:22:88:75:f2:ac:
86:17:af:4b:7c:4d:4a:23:05:af:4b:a6:b6:76:a5:
e3:e2:5a:a6:fb:94:a7:87:e1:fd:39:c4:0b:a1:3a:
4d:76:57:e2:8e:d2:dc:56:3f:1f:44:77:bf:0a:9f:
21:74:01:f5:5f:39:c5:3d:5c:4b:f4:7c:7c:35:e4:
90:ae:28:85:31:5e:98:11:97:d7:af:ac:d8:4c:57:
3c:a7:94:d6:cf:9d:bd:d8:66:7a:95:50:dd:ab:60:
6a:df:28:60:e5:4d:a0:2e:72:25:38:0a:75:35:0f:
ea:32:65:6d:fd:bd:14:06:24:ed:8e:e9:d9:64:03:
d9:cb:05:b7:75:df:e9:66:3a:00:9d:72:cb:b3:9d:
d8:62:d9:e2:b9:13:b2:a7:44:55:36:a8:e7:e8:d4:
72:a9:0b:87:52:e4:35:3b:02:52:3e:f5:99:92:18:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6B:2E:D4:AD:4F:60:58:3E:37:81:EB:2C:84:78:78:CE:C1:43:9F
X509v3 Authority Key Identifier:
keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:4d:03:63:e8:bf:db:cc:33:12:14:1b:a9:20:25:75:5f:3e:
ad:10:41:83:a5:27:2e:48:84:59:e4:5a:45:46:1b:62:16:ec:
10:9b:5c:03:8f:c3:59:d2:0d:be:fa:29:91:2b:dd:10:e7:f7:
93:66:09:dc:9b:3b:7f:39:d2:8a:4f:4b:a0:b2:8c:41:7c:b9:
b2:53:6e:75:1d:8a:07:83:cb:39:fb:f2:94:f9:40:f7:25:7f:
f7:9c:a3:ac:23:91:39:b5:09:ce:01:5a:a5:fd:bf:81:2f:95:
20:75:8f:12:74:b0:77:c6:a3:e5:f3:f5:03:53:63:5a:76:ca:
bb:cd:eb:5e:61:b1:c7:ca:50:2b:0f:76:29:51:b0:20:42:5e:
b7:6e:15:70:86:4b:d6:1a:51:3d:17:b1:16:31:23:54:ca:e5:
92:a1:a1:31:eb:66:2a:7c:98:86:4c:ae:9d:10:37:4d:ee:06:
9c:e8:5a:a1:4c:50:75:f7:d0:8d:62:d4:2d:c1:8f:3c:d2:7d:
6f:6e:5f:ae:b1:a7:22:f5:bf:55:04:50:89:65:dd:2a:fd:f3:
d0:76:48:90:ba:4a:8a:48:49:05:32:1c:1d:fd:6e:ce:46:00:
7f:6c:ce:ed:4c:06:cf:03:80:df:7f:be:f0:fc:f5:fb:08:be:
30:2c:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:36:40 2025 by rpki-client