Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
File: t3KDxTMROjkeMdlFJxhqz4OZol8.mft (raw, json)
Hash identifier: I5YPkhcSF0AMyabKIWqEFzUgRrUkK4hEWMgYDAPHcNk=
Subject key identifier: 89:F3:F5:E5:C8:19:E6:CD:DB:8A:56:2D:95:CD:A3:7A:B6:E8:0F:76
Authority key identifier: B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F
Certificate issuer: /CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F
Certificate serial: 0AC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
Manifest number: 0ABC
Signing time: Thu 30 Jan 2025 19:33:39 +0000
Manifest this update: Thu 30 Jan 2025 19:33:38 +0000
Manifest next update: Thu 06 Feb 2025 19:33:38 +0000
Files and hashes: 1: t3KDxTMROjkeMdlFJxhqz4OZol8.crl (hash: pqEMgNfBgUSMfNfcrmp4u8nmTlMtVk7eP71Ubju34v8=)
2: 02F1850E45A611EA81CD145AC4F9AE02.roa (hash: +dnFv6At/j+rB10C6K34OqDt094wwEbkgdTC71u4hkg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2757 (0xac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F
Validity
Not Before: Jan 30 19:33:38 2025 GMT
Not After : Feb 6 19:33:38 2025 GMT
Subject: CN=679bd412-f096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:5c:18:12:cc:c1:06:7e:02:d3:6e:2f:99:
fe:01:ce:80:31:5f:f3:0e:39:1e:d8:fc:5e:19:4f:
14:4f:b9:6d:1a:f5:08:45:53:e5:ae:6b:58:6a:f3:
73:62:5a:de:93:4b:ed:ea:94:cd:d7:93:e4:a9:03:
fa:ce:9b:21:81:34:ab:5b:a4:0b:f2:b9:89:9c:52:
58:6c:e2:51:5a:41:d6:f0:22:aa:23:35:b2:6e:5c:
76:e9:bc:6b:20:55:47:f3:6d:76:59:5d:18:48:c8:
e9:7c:30:8e:cf:ed:4e:19:12:cb:67:87:ec:d6:31:
35:cb:05:82:d4:c8:06:c3:e9:6d:2d:00:ea:cc:a8:
b6:97:92:df:a9:7f:2d:bd:f7:29:3a:85:5f:e8:18:
9b:67:95:62:34:10:1a:24:13:a5:ba:93:b0:39:d3:
e5:4d:a7:af:7c:de:77:00:fc:30:ec:49:9d:b7:d7:
b5:a6:38:32:2d:7e:7f:80:e8:73:a0:b1:ee:06:a2:
df:10:7e:e1:33:8b:6c:75:18:66:a4:8b:87:a8:2c:
84:71:79:a0:df:6f:99:7f:a6:90:bb:8c:f0:30:d6:
ec:c5:07:44:68:30:f8:33:53:9f:72:e0:5d:52:9c:
70:4f:a8:06:89:7d:e6:bc:77:05:ea:e0:ba:8d:4f:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F3:F5:E5:C8:19:E6:CD:DB:8A:56:2D:95:CD:A3:7A:B6:E8:0F:76
X509v3 Authority Key Identifier:
keyid:B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:05:19:fe:6d:96:c2:e9:44:b1:92:6c:3a:10:77:fc:ba:19:
7b:da:d7:18:ea:a7:a8:8c:78:07:64:55:b2:51:a2:af:45:ee:
72:1d:a9:be:24:c7:59:a2:02:70:4b:92:80:48:17:d8:02:db:
39:8d:fe:ac:a1:b4:6d:06:00:6d:d6:4f:61:ed:70:f5:64:a2:
16:ef:c1:82:09:fd:45:b7:76:ee:e6:e0:ae:c5:18:bc:88:19:
f4:93:9f:2d:95:a1:c8:ba:d5:bf:68:d7:0e:54:f1:40:43:a2:
62:6d:e0:75:59:a3:33:c7:b5:8c:ef:b9:87:60:cb:03:9f:55:
6a:c4:19:43:a4:5b:77:91:55:ea:16:c7:76:a2:8c:5c:04:eb:
30:cb:a6:f9:c7:5e:ef:1f:5d:ef:17:26:79:f4:7a:c6:32:75:
37:a4:42:8b:a4:18:26:96:9f:4a:ef:75:84:4c:c5:d5:26:16:
8d:d8:04:d2:92:56:95:02:f3:6d:44:1b:90:be:0b:10:35:ea:
d9:3c:66:7d:3c:35:27:f3:c8:ef:11:6e:0e:39:5e:fd:27:38:
91:b1:4d:ac:91:f6:07:57:e0:4f:c5:6d:9c:5c:c6:f8:91:c2:
28:f5:21:f7:0b:47:71:02:ed:19:fa:33:ff:1d:c2:d2:e8:bc:
34:99:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:47 2025 by rpki-client