Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
File: rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json)
Hash identifier: bzTZwraEvcRCIqqo8tpoK76cfy67ecX35DE25N/l4pk=
Subject key identifier: C3:00:81:1D:CE:67:0C:1A:81:52:D6:EE:8C:3B:5C:D9:A4:95:5E:24
Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Certificate serial: 0357
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
Manifest number: 0353
Signing time: Fri 31 Jan 2025 01:03:55 +0000
Manifest this update: Fri 31 Jan 2025 01:03:54 +0000
Manifest next update: Fri 07 Feb 2025 01:03:54 +0000
Files and hashes: 1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: spH0HrLz7jDAlXL1pu9xMczwlqKG+bTMiNpouzYipyQ=)
2: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: KeGUlxiblyObJWylXKCmQlAzDIkOWbFTSQRBaia1TDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855 (0x357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Validity
Not Before: Jan 31 01:03:54 2025 GMT
Not After : Feb 7 01:03:54 2025 GMT
Subject: CN=679c217b-acfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:25:e4:9b:98:95:34:b5:7d:df:11:a2:6c:
e7:a1:fd:9f:23:e1:8b:7c:ec:c6:2e:60:51:a5:87:
5f:01:17:9d:11:de:ae:0c:35:c4:13:8d:13:21:79:
48:68:3d:2d:a8:3e:17:c8:53:8c:88:97:c9:8f:66:
f8:d8:50:31:03:5d:99:ec:42:ba:00:b9:a2:50:00:
a2:22:8d:2a:f1:74:f1:b1:ba:61:1d:98:79:c1:80:
7f:66:be:78:89:9b:09:4b:45:b3:eb:b0:f9:09:c6:
08:9f:9d:b2:a7:86:31:28:26:77:f9:33:35:4f:43:
9f:8b:a4:cc:77:f1:3c:cb:20:48:60:8e:a7:d6:ff:
d2:a5:f0:e2:be:ed:98:b4:0f:fe:4a:bb:bd:65:ce:
25:1f:6b:d6:dd:da:c1:d9:f6:7b:cd:8c:ae:fb:5a:
08:9a:f4:55:30:a0:1b:d4:61:95:76:60:03:cf:8f:
fe:af:b0:6a:48:d3:25:4e:50:54:6e:4e:22:b7:c3:
ae:7e:51:19:31:dc:47:4c:03:b8:7a:2c:7f:29:54:
a4:06:bd:34:d0:9c:01:6b:0e:d8:13:72:0c:2d:13:
17:6b:9b:b1:2d:56:8c:dc:60:15:75:e0:de:62:c6:
83:61:c3:81:52:c4:47:f7:da:6f:db:cf:85:c6:7b:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:00:81:1D:CE:67:0C:1A:81:52:D6:EE:8C:3B:5C:D9:A4:95:5E:24
X509v3 Authority Key Identifier:
keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:52:04:66:e2:29:be:0f:25:9e:9a:1f:c3:92:6b:65:a4:5f:
14:21:65:fc:e3:ab:df:0f:a5:7d:64:21:93:cf:f4:d7:70:20:
9c:dc:23:88:d3:94:91:76:3d:98:20:dc:af:93:8a:40:14:9e:
93:65:e3:8c:4d:31:ee:02:c9:dd:b6:5c:37:dd:5c:7a:31:3b:
75:57:b7:a4:62:fd:7d:bb:9c:e6:dc:5d:e8:ce:25:4d:3e:c6:
47:7c:eb:53:12:5e:8b:13:55:27:d7:dc:5d:e2:cf:ac:bd:25:
fa:82:6b:82:27:01:15:7d:21:93:de:5d:24:b0:af:a1:34:2a:
04:47:0c:93:50:59:f0:c7:40:7f:68:53:71:68:81:41:98:78:
e4:7c:28:ae:83:6e:50:be:63:11:50:f2:68:f7:36:9b:5c:33:
57:20:44:cc:32:19:d8:f1:7e:8b:8d:43:f7:2c:7a:39:b6:92:
f5:2f:5a:6c:15:82:50:66:32:8f:c6:bf:94:8b:8c:ae:a1:74:
1e:2b:2c:26:1d:7b:c9:07:e1:a8:0b:1b:86:ff:8b:45:ae:30:
0c:f8:fa:10:85:00:2e:10:57:f2:f3:f7:6d:ed:0b:56:bb:89:
43:24:28:fa:57:fe:9d:d4:1c:cd:f8:54:de:c1:f2:f0:1f:4f:
d8:b0:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:55 2025 by rpki-client