Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json)
Hash identifier: arRlheQ7uYYUmyNfzl37RnRwG4LY8B5eYF2xLaklN+M=
Subject key identifier: EB:9E:37:3E:01:94:1D:7F:17:D9:61:CE:EA:B8:36:7F:3F:55:1F:BB
Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4
Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
Certificate serial: 0302
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
Manifest number: 02FF
Signing time: Fri 31 Jan 2025 01:18:56 +0000
Manifest this update: Fri 31 Jan 2025 01:18:55 +0000
Manifest next update: Fri 07 Feb 2025 01:18:55 +0000
Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: MnSbQouB/j92pSwQ5lvlKEnY0hDMEVBAb2JkacoNhcg=)
2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: SBU8GVreyOnldCYNvt0nDJnVdYm/HEq3WcHOf4U77zE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4
Validity
Not Before: Jan 31 01:18:55 2025 GMT
Not After : Feb 7 01:18:55 2025 GMT
Subject: CN=679c2500-0294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:83:44:5d:c4:ee:bc:86:15:9d:92:60:04:
7d:b9:7e:2e:1b:c4:08:24:5a:01:fd:64:ca:c4:81:
c8:dd:5c:68:19:e7:91:e9:59:80:3a:da:b5:b7:70:
a2:0b:de:b7:e5:54:45:ba:dc:a1:c3:1c:95:64:1b:
8d:3d:f6:02:6e:16:72:3d:2e:77:c3:b7:a0:7f:f5:
0f:39:d2:e5:2f:a8:20:7a:66:06:c3:fe:21:8a:4c:
01:41:58:7e:5f:e8:bf:c6:21:7a:90:01:62:9c:c6:
50:47:31:50:e1:85:b9:6a:e2:6d:1d:e3:95:96:1c:
77:ae:5d:03:44:5f:39:89:5d:fd:17:8a:0b:e8:e9:
56:4c:be:e9:0b:86:50:f1:d0:48:05:e8:52:d0:66:
7d:ec:91:d0:4a:a7:ae:4f:46:97:88:2c:f3:97:76:
ee:33:f8:b0:00:c9:8f:4f:70:ec:85:f5:7e:b3:d8:
de:85:ac:b7:2a:d1:9b:7b:df:1c:c0:90:82:a2:46:
e8:b6:1f:b7:b8:00:27:bb:04:23:dc:98:0c:22:6a:
97:c7:4f:97:a8:4e:97:d1:cb:a7:06:52:19:e6:3c:
14:63:08:38:30:8c:c9:fa:96:59:81:1e:07:fe:23:
95:d5:a6:2e:ce:88:d1:0f:91:25:ff:a2:dd:a7:0f:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9E:37:3E:01:94:1D:7F:17:D9:61:CE:EA:B8:36:7F:3F:55:1F:BB
X509v3 Authority Key Identifier:
keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:27:6a:98:f8:a3:81:a9:92:40:10:ed:a5:3d:e6:57:0d:e1:
4d:76:8f:60:98:f8:52:a7:6c:87:23:7e:63:bc:ed:86:6b:73:
34:da:27:71:50:0a:f3:2b:5e:4c:15:45:a2:38:60:41:1e:f4:
c6:81:69:11:d4:67:c0:e8:ab:86:8e:6b:b0:d1:cc:d0:fa:7e:
ab:d6:cf:b2:8e:12:35:7d:56:53:7e:3b:dd:7f:63:ce:cc:ea:
67:eb:47:23:3f:c8:88:c2:e2:87:a7:f1:d6:9e:7c:a3:3f:68:
2d:8d:c9:0c:c5:eb:90:c4:23:04:18:89:fc:1e:64:98:d2:e5:
19:b4:77:1b:3a:a4:82:17:4c:74:e0:86:fc:73:e4:be:b0:d2:
f5:24:de:7e:e6:f1:c9:62:da:07:1e:d6:58:03:bd:a2:0e:e9:
b1:9d:fb:de:99:78:f0:b2:36:07:e6:e3:3f:6b:2e:d1:3d:80:
65:e6:33:d3:04:2d:00:02:80:1d:14:e7:d6:bc:72:25:70:b1:
4d:09:84:1d:4d:79:8f:77:dc:15:fa:a8:d3:0b:9f:e9:5c:66:
5a:be:96:0e:91:33:c2:5b:4e:00:3e:ab:b3:93:0d:ef:8f:4f:
ff:07:2f:e5:5a:23:ca:33:62:31:51:6e:ab:f2:7b:ef:8d:0e:
ee:aa:fa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:24 2025 by rpki-client