Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json)
Hash identifier: zZTncNF0o8xvvoq/5YEeaGfegLtmLOjBSLx58xe9FoI=
Subject key identifier: ED:3D:A4:BE:14:CB:39:28:C5:7E:18:0E:3D:3D:F1:1B:BB:A7:C9:94
Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C
Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C
Certificate serial: 15AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
Manifest number: 159A
Signing time: Fri 31 Jan 2025 16:47:43 +0000
Manifest this update: Fri 31 Jan 2025 16:47:43 +0000
Manifest next update: Fri 07 Feb 2025 16:47:43 +0000
Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: 5jg6uxpopL/vIvff1wqFUEtUvh/XTjtsuovYl/iB9Wk=)
2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: oNHAY+RH8azs+WtnEjYSGA9lvHIaeiPbqTK24H6N+nw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5546 (0x15aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C
Validity
Not Before: Jan 31 16:47:43 2025 GMT
Not After : Feb 7 16:47:43 2025 GMT
Subject: CN=679cfeaf-c29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:39:53:64:5e:60:3d:17:a0:c4:ad:3f:24:
f6:92:a7:f7:5b:2c:ef:fa:c6:a2:53:9d:05:bb:fe:
a5:43:77:65:ef:ef:05:ff:c6:68:42:9f:b5:2a:0e:
45:d1:5d:42:5c:36:4e:88:72:51:d4:82:38:61:ef:
8d:72:84:e0:53:69:d2:59:7a:f6:b6:85:37:cc:ca:
01:a6:1e:be:6a:1d:cd:1e:f5:f4:8b:91:f3:97:9d:
15:03:22:e6:ee:28:f2:83:c9:12:00:e1:79:63:db:
ac:91:59:7d:83:5c:bb:6a:11:5f:ee:e9:dd:f8:b5:
b0:c7:11:18:d6:e0:63:10:a0:ed:25:87:75:61:68:
58:00:62:48:05:18:fd:86:7b:e3:df:1b:7e:38:34:
22:44:16:8b:ae:61:46:40:c3:b5:45:50:96:8a:79:
55:b6:13:a7:9a:34:0a:70:5f:d2:9a:35:e1:84:73:
c4:ae:7c:04:f5:e6:fc:37:1f:90:bb:8c:be:2b:73:
c8:ab:2a:b1:34:f4:32:c5:07:86:c1:d8:6b:b9:27:
88:d9:c0:6d:f9:fe:57:31:5b:21:7c:41:95:ef:ac:
e8:56:14:60:74:74:8e:d7:72:d0:73:e7:0c:10:7d:
90:da:c1:0a:63:14:0b:2d:40:20:53:85:9d:2d:0f:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3D:A4:BE:14:CB:39:28:C5:7E:18:0E:3D:3D:F1:1B:BB:A7:C9:94
X509v3 Authority Key Identifier:
keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:20:46:f7:c2:7b:bd:59:aa:d9:f7:22:00:fb:b2:61:40:
cb:3d:d0:4f:7b:c3:96:ca:66:01:8b:f2:75:5e:79:a7:36:18:
40:62:5e:c1:ce:bc:98:9f:48:f4:4e:9c:8c:3d:02:60:55:26:
39:b0:68:9c:ba:f8:12:56:5e:7c:97:11:6b:86:39:64:83:89:
07:f5:55:3d:54:dd:27:52:c3:81:76:b9:ce:ac:4d:59:ca:29:
4e:9e:30:65:a2:3b:8a:98:c4:04:12:4d:35:be:23:35:5e:5d:
d7:20:77:66:bf:94:0b:c6:a4:69:a9:8f:7a:89:e6:32:ef:15:
d8:77:7a:40:f0:7a:3c:97:4e:ac:35:e1:66:40:9b:ed:52:16:
24:96:c0:94:1a:9d:08:12:d6:ba:db:bd:de:a4:26:23:97:27:
ce:32:7e:e2:9d:51:33:dd:b6:f1:2b:0d:be:c0:0c:02:f1:05:
ef:fb:28:b7:ea:fc:3b:06:ad:95:7b:98:6f:8e:b0:c2:fb:16:
2f:c2:4c:32:5e:7a:76:83:05:63:6c:83:dd:a3:47:6a:38:7a:
13:ff:26:83:85:6f:05:58:b3:71:4d:f5:e2:87:31:1d:31:b0:
2d:4d:f1:3e:97:41:69:f6:9f:27:20:56:f2:e0:6a:f7:29:4e:
37:da:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:29:12 2025 by rpki-client