Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
File: mvCw748-tT8U2E-jphBr5kvXgnI.mft (raw, json)
Hash identifier: U5RVJoKXtvtHRjKmshEYhRcEUA/VSgJT2t13vQpLdCA=
Subject key identifier: 23:C8:9B:1F:AD:AB:D8:8E:BF:26:67:10:94:21:6A:E7:24:48:17:C0
Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72
Certificate issuer: /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272
Certificate serial: 03BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
Manifest number: 03BA
Signing time: Fri 31 Jan 2025 00:43:04 +0000
Manifest this update: Fri 31 Jan 2025 00:43:03 +0000
Manifest next update: Fri 07 Feb 2025 00:43:03 +0000
Files and hashes: 1: mvCw748-tT8U2E-jphBr5kvXgnI.crl (hash: bU45uya1+dW7XjoWxKMNacIutUB6zw/3g+C156MqBI8=)
2: 8EB98374776E11ECA05F7133C4F9AE02.roa (hash: 0odSjBqkbrai7nHTuGPVDMCVhidqU26/lOEVMrtNDiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 958 (0x3be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272
Validity
Not Before: Jan 31 00:43:03 2025 GMT
Not After : Feb 7 00:43:03 2025 GMT
Subject: CN=679c1c98-7ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:09:c1:c8:da:f7:af:75:5f:1e:c1:cc:8f:
d6:7a:90:3e:b2:a6:07:33:12:34:7c:79:ef:37:1f:
86:33:57:ee:f7:a1:ed:13:5d:6b:55:38:79:13:b6:
77:f5:fa:45:15:65:d3:19:7f:52:08:26:57:6e:c8:
be:ca:ac:4b:8f:aa:22:99:4e:ae:17:12:0a:9b:e1:
c7:b4:47:01:d7:14:86:16:d4:8a:74:59:2b:cc:79:
a1:42:dd:fa:d9:61:77:27:ea:d5:12:91:51:d6:9b:
c1:cd:d8:f8:7b:f9:07:98:f7:46:81:0a:b8:83:58:
87:4e:91:b5:4c:40:98:bb:c9:bc:46:90:cb:ed:ae:
23:19:41:0e:85:f3:c2:16:13:73:19:14:fe:77:49:
0d:08:eb:ff:0c:ea:f4:03:1a:32:07:f7:aa:34:aa:
ef:74:09:11:02:c8:21:2c:a4:74:01:29:1e:c3:99:
6b:6a:c2:bf:5b:88:cd:8e:a0:58:71:0d:5f:40:1b:
c5:62:1f:59:15:8b:28:44:19:52:3d:56:36:b7:4a:
47:2e:b0:b2:3c:25:fa:21:85:34:5f:d0:9f:ce:5b:
70:c5:02:c4:58:dd:43:31:b6:89:59:19:6b:3c:2a:
3b:35:16:32:13:4d:a6:a0:eb:f0:91:3e:42:31:cc:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C8:9B:1F:AD:AB:D8:8E:BF:26:67:10:94:21:6A:E7:24:48:17:C0
X509v3 Authority Key Identifier:
keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:54:f3:9c:71:72:30:db:ff:6e:c2:eb:fc:e2:68:4b:5f:36:
a6:d1:8d:45:3b:3b:0f:cf:e8:5c:8e:06:79:b8:22:3c:99:7a:
2a:f1:84:f3:aa:13:94:f0:6d:c0:d7:2a:5d:c7:59:a3:48:f2:
11:b2:cc:23:c1:74:26:35:2c:2b:9a:c6:31:62:47:0f:65:64:
87:e4:45:d0:63:69:ed:34:bd:16:fd:d0:40:e7:ac:04:cc:12:
25:d8:fd:50:a1:0a:48:bc:25:81:90:3a:80:39:8e:49:5a:e3:
de:81:77:24:23:4b:78:0c:68:61:7a:6a:78:68:66:c4:c4:bd:
50:ad:e4:0d:0c:27:44:65:52:68:df:54:93:71:49:e8:8a:f9:
5d:a6:02:50:ad:f4:61:f1:32:47:8d:12:b0:3b:dd:81:de:55:
4e:e0:37:2a:30:70:8c:03:b3:e3:46:a7:e3:af:cd:6a:75:d1:
ca:8f:66:ba:92:14:c8:0e:76:9d:70:7a:18:b2:8f:b9:ab:ed:
c6:d1:0e:2d:d6:4f:cd:08:34:8f:de:89:57:84:43:b3:14:1d:
1f:bd:8e:06:e2:ac:21:74:95:57:a1:27:f9:ae:d3:74:e0:82:
b6:96:b6:df:4f:ae:61:a9:81:cc:86:bc:f4:29:09:6b:70:d0:
2f:2f:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:18 2025 by rpki-client