Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json)
Hash identifier: YX+K13J14GwTAjFnCmQgxthlwKDy/1hiIB+7Dcgnd5g=
Subject key identifier: 49:8F:0A:51:C1:42:FA:18:30:F8:C8:DB:90:39:BA:0D:F0:1F:18:8C
Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43
Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
Manifest number: 50
Signing time: Fri 31 Jan 2025 06:18:17 +0000
Manifest this update: Fri 31 Jan 2025 06:18:16 +0000
Manifest next update: Fri 07 Feb 2025 06:18:16 +0000
Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: zDmX6srWgGc07s66vdQayM0njAhiUt32avcWtFEdxmc=)
2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043
Validity
Not Before: Jan 31 06:18:16 2025 GMT
Not After : Feb 7 06:18:16 2025 GMT
Subject: CN=679c6b28-b616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:f4:6e:8c:89:4b:47:02:3d:d3:c4:82:57:
57:6d:70:94:d0:8b:39:8b:44:9f:3d:6b:dc:17:67:
e0:85:20:34:0b:6b:c1:39:1b:d7:76:3d:ec:a5:65:
93:32:2a:e4:0d:cb:6f:c8:34:f7:ea:3d:07:6f:b1:
42:f6:e3:7f:68:7b:13:39:3c:97:ed:97:cd:76:02:
ab:ea:0e:f2:98:e9:3c:34:bb:14:dd:fd:80:96:51:
99:bd:d8:b9:89:8b:18:b4:a7:2c:08:25:17:e6:a5:
ae:b9:f5:23:af:62:46:e2:84:65:20:68:95:18:74:
da:2e:2b:08:7e:9d:44:bb:24:73:3b:50:96:fc:91:
5b:5f:14:5b:ca:8c:c8:3f:b3:fb:9b:00:96:d1:d0:
0b:7d:19:ee:ca:f8:01:9f:4f:a3:1c:f2:bb:39:c0:
d0:64:d8:58:44:d9:8c:5a:7b:fd:b8:1a:53:89:75:
e9:9e:ed:86:bb:62:a2:10:07:a4:ba:f9:2e:07:d9:
3f:80:f9:f0:f7:89:c0:32:b1:cd:74:1e:34:02:15:
e4:c7:64:9f:f1:20:ed:02:86:cf:1a:f2:e8:d7:e4:
3b:cb:35:32:5c:e4:46:1b:f0:e7:d1:d9:0c:bf:4f:
e0:f2:2a:18:80:c8:da:5f:67:51:8e:cf:c6:2f:07:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8F:0A:51:C1:42:FA:18:30:F8:C8:DB:90:39:BA:0D:F0:1F:18:8C
X509v3 Authority Key Identifier:
keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:80:21:0d:ab:ed:12:32:0f:c7:de:cc:5f:33:e8:26:cd:fc:
96:16:92:66:af:e2:58:b8:06:a6:7e:fe:9e:87:e0:cb:16:16:
06:c8:df:75:5b:5c:9f:8e:d6:52:fd:dd:c8:16:08:16:57:02:
ff:da:07:e2:5e:b0:ef:40:92:c2:06:37:ce:58:bf:3f:56:01:
31:42:6c:e4:7d:43:1a:ae:ad:d4:db:80:1b:6d:ae:d3:0e:7f:
09:9e:9a:17:f7:bd:22:9c:29:9b:b8:de:ba:9b:3e:75:9c:e1:
e1:91:3a:85:b1:36:f7:13:c9:0f:e1:f4:73:02:d3:8c:b0:d6:
99:05:4e:88:32:39:27:df:15:68:4c:e2:9d:9b:00:17:42:72:
12:6b:d5:0f:ff:2f:0c:88:a1:0e:d6:2c:dd:b5:9e:af:5c:f9:
23:99:31:3c:c8:c1:b2:90:eb:97:ba:94:bf:fb:99:7f:67:1c:
03:a7:ce:8a:45:38:e9:5a:a6:27:d0:8b:ce:10:5a:20:d0:2c:
c1:d3:63:22:aa:02:b1:8f:59:da:d9:64:81:38:41:6f:33:03:
e6:76:ab:fc:77:d4:22:73:d0:ee:e7:de:73:db:a1:e3:a4:f5:
51:f6:81:59:37:d3:0c:a8:f3:93:93:21:04:3b:35:8b:89:ed:
9d:83:86:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:18 2025 by rpki-client