
Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json)
Hash identifier: /aGb63oIhpeEUjVkd0E0XhSbwPxGiLcBnn+b6IuJA8g=
Subject key identifier: 53:BC:35:B7:CF:1A:EC:8F:87:A0:61:10:99:BE:61:B2:06:B0:9E:8D
Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10
Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910
Certificate serial: 085D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
Manifest number: 0856
Signing time: Thu 30 Jan 2025 20:45:02 +0000
Manifest this update: Thu 30 Jan 2025 20:45:01 +0000
Manifest next update: Thu 06 Feb 2025 20:45:01 +0000
Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: hP8VXKLHUQBKty/rs7MgsDWL4laYFsAdGARZALIeyGo=)
2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: jrXgAGT3lqn2oPe4fiJJc8FiNv+5i0XvozNfLQNBQxY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910
Validity
Not Before: Jan 30 20:45:01 2025 GMT
Not After : Feb 6 20:45:01 2025 GMT
Subject: CN=679be4cd-464b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:d7:31:d9:32:7a:09:70:a8:96:64:15:43:
69:8a:ab:a7:c4:12:05:cb:46:8c:21:b2:49:21:a4:
5f:4d:0d:41:6e:92:b6:b3:35:1b:f8:65:90:31:dd:
ab:3d:da:bb:75:5b:ed:bd:bc:62:8c:b2:a3:2d:39:
a7:72:7f:74:38:94:22:9f:53:71:eb:25:d5:c3:3a:
7a:0e:bb:d7:34:cf:84:e5:3e:0e:ff:8a:4d:b0:09:
f2:4b:f6:2e:6c:4e:c0:f6:15:30:d1:fc:c5:5d:2a:
0f:8b:09:1e:9d:fb:b4:bd:78:66:d2:0e:ee:bf:0c:
13:93:de:c3:8c:c9:8a:32:d8:ea:7d:69:54:56:c4:
cf:5f:cd:ae:dc:a5:4a:87:06:88:ec:84:b3:ca:70:
d8:d6:84:43:09:bc:75:e7:5f:ef:3d:ed:5d:79:a0:
02:2b:2e:7e:ec:4a:c8:14:c0:33:ad:08:13:81:f3:
ee:f3:3b:fa:35:ad:98:f0:b7:25:20:6e:95:33:37:
b4:b6:5d:5c:e3:8b:e3:57:98:d8:40:a2:ea:d1:4b:
c6:9c:7f:8a:64:c8:7a:90:ad:ad:7a:d5:a8:62:08:
b0:5b:27:91:f6:d1:78:03:86:fb:88:e7:b8:63:12:
39:5e:67:a1:d5:99:89:38:9c:2a:61:5f:fb:e3:3b:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BC:35:B7:CF:1A:EC:8F:87:A0:61:10:99:BE:61:B2:06:B0:9E:8D
X509v3 Authority Key Identifier:
keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:64:a0:5c:2e:f4:f3:a9:92:09:ca:08:d9:26:88:1d:e0:18:
31:5b:6e:fd:83:97:fb:1b:57:a4:1a:16:05:71:ed:77:63:19:
63:ec:d8:99:d4:c2:c2:95:6c:67:57:88:ab:8e:c7:07:47:b0:
fa:80:4f:7c:56:94:03:c8:82:d9:1a:3c:c9:a1:3a:c0:a1:44:
96:a5:6d:aa:b5:44:08:c8:77:c3:2a:c5:10:f9:24:ea:7f:77:
71:2a:53:97:c4:cc:82:25:c0:e0:98:8c:63:6d:3c:81:7b:90:
a5:54:20:6c:aa:73:53:63:b9:91:ec:f6:8b:9c:66:5a:58:ec:
6e:fc:92:0f:0c:af:f1:3a:3b:d9:1b:75:c1:4d:08:f6:a1:11:
66:54:8c:55:5b:fd:43:8b:40:01:ed:e1:6f:1e:99:29:e9:ad:
92:71:0c:bd:6a:7a:13:f4:6d:e5:3b:55:18:e2:aa:c8:e5:b0:
ff:2f:1e:93:d6:b2:ed:f1:69:01:14:28:92:78:88:cd:64:2b:
2a:39:c0:6c:eb:32:2c:10:ac:62:fe:9d:d2:35:63:27:54:9b:
86:ba:8a:e7:1d:0f:bf:66:ae:a6:6e:ac:45:32:2f:f0:b0:84:
e7:a6:d9:01:f1:81:97:f5:5e:f0:98:4f:c3:4b:54:63:12:d2:
d8:32:d7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:33:18 2025 by rpki-client