Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
File: 38UozwAG40FK-3_obR_er2SLXJ0.mft (raw, json)
Hash identifier: PXtKuPi1fWB9zf0bSaG4qnweP+acUT72wPzVFshNO6k=
Subject key identifier: 73:E2:F0:7E:21:38:8E:4A:71:89:EF:B0:8C:57:48:52:55:C2:15:DE
Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
Certificate issuer: /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
Manifest number: 36
Signing time: Fri 31 Jan 2025 06:38:46 +0000
Manifest this update: Fri 31 Jan 2025 06:38:45 +0000
Manifest next update: Fri 07 Feb 2025 06:38:45 +0000
Files and hashes: 1: 38UozwAG40FK-3_obR_er2SLXJ0.crl (hash: 73rcPNfqNx998fHtCaEUtfJnVRSvZ1519+akvlzx9Iw=)
2: 6CF3FF44901111EF922BFC29C4F9AE02.roa (hash: kYva9N1B9q6x51z8ic6e8oPHZgI7EM6Un1P8CXMlwJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Validity
Not Before: Jan 31 06:38:45 2025 GMT
Not After : Feb 7 06:38:45 2025 GMT
Subject: CN=679c6ff6-ea74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:bb:9d:cd:c9:2c:7c:cc:93:fc:a6:b4:e5:
ef:0b:58:81:e0:1c:fe:67:b3:0c:f0:ab:b9:f9:98:
00:0b:9a:d5:ed:dd:f5:f5:8c:29:b1:85:a0:ae:7b:
fd:ed:81:95:f1:d0:7a:ee:96:75:ff:2d:90:d5:7c:
7b:4c:00:80:0d:43:12:2c:fc:47:c8:a7:f9:6b:35:
43:95:94:50:41:e3:82:c9:14:a6:27:b4:f0:c3:cd:
66:a9:64:f9:7b:e7:bb:fb:40:dc:58:09:5c:40:be:
fe:15:f7:5f:28:48:1e:80:97:29:d7:c7:97:02:c3:
e9:bd:b4:2b:35:84:68:8d:3f:f0:ab:23:a6:38:2f:
83:c8:60:53:73:b0:a4:20:0c:dc:1d:59:91:d0:95:
ab:31:95:75:75:76:7a:1f:74:ff:69:0f:7d:be:44:
27:8d:e9:be:a6:4e:28:e2:37:5c:8e:e7:ff:e8:45:
91:c6:3f:ac:08:31:1f:19:66:9d:cd:aa:8a:e9:01:
f3:dd:99:8f:7d:2f:05:70:35:40:ec:63:0f:98:cc:
80:b8:a9:4b:5d:71:22:8b:dd:f5:90:e7:11:92:aa:
3c:ec:7b:95:6f:17:76:0e:5a:34:ba:2f:9e:d3:c6:
df:3a:98:83:fd:66:f9:33:58:e0:3a:58:e3:8a:9a:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E2:F0:7E:21:38:8E:4A:71:89:EF:B0:8C:57:48:52:55:C2:15:DE
X509v3 Authority Key Identifier:
keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:33:ec:61:ba:34:3f:da:47:dc:b7:25:25:9d:3a:51:b0:72:
94:99:e8:b8:5f:6f:0e:e7:39:42:e0:9a:72:d6:89:68:c5:21:
90:96:7a:44:b7:fd:76:72:75:07:4d:4a:eb:12:24:35:d8:eb:
1a:59:78:be:44:62:87:16:52:b6:cf:6a:22:69:aa:1a:28:32:
82:5d:55:99:23:44:e1:71:2f:c8:a0:97:b7:e9:0d:af:b9:ca:
92:82:a8:ca:df:0e:e5:ba:b9:7e:c6:a3:13:1b:a5:c3:c8:80:
1d:53:a0:b8:a9:5a:ae:f2:89:c7:53:bf:c8:6d:7b:7d:95:ff:
13:90:64:88:ec:38:7b:a0:c1:be:f7:59:c1:f1:d5:94:e1:62:
23:0e:ce:18:6c:ae:07:6d:f5:b7:34:ad:36:a8:4e:f7:4b:f1:
a3:75:6f:ce:64:fb:47:52:bc:11:4e:33:d3:9b:fa:67:ef:3a:
b8:91:0d:28:0a:2e:11:01:51:86:eb:f9:39:ef:85:6e:68:37:
58:79:bd:a6:fa:e5:b6:33:34:a2:37:50:d9:44:07:1b:5e:43:
bc:b1:c9:1c:24:c6:fa:b7:2a:36:97:f6:fe:52:18:ac:5e:27:
fd:f5:70:f1:9d:0b:e4:01:bf:56:41:91:48:bf:de:2d:42:83:
93:dd:e2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:37:00 2025 by rpki-client