Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json)
Hash identifier: 4q40lb/Hpfpk7F9WIYYRrPqb1uOvzAx3droZnw5x/VY=
Subject key identifier: AA:93:A2:85:9B:91:56:08:EA:07:2C:D2:5F:E6:B6:81:E8:D2:DB:56
Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Certificate serial: 0620
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
Manifest number: 061A
Signing time: Thu 30 Jan 2025 22:42:38 +0000
Manifest this update: Thu 30 Jan 2025 22:42:38 +0000
Manifest next update: Thu 06 Feb 2025 22:42:38 +0000
Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: m5akm6URUfsbOeRMDqTVLlvuMkSdyByCGT7waTNNGu8=)
2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: 60iJClNHfCYL5vJ0EICnhz/EaXVeffgn8z0vbfJvk+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Validity
Not Before: Jan 30 22:42:38 2025 GMT
Not After : Feb 6 22:42:38 2025 GMT
Subject: CN=679c005e-99e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:be:9b:91:b0:c9:fe:ed:ab:b0:c6:35:29:
ff:30:cd:c1:87:25:6f:a8:de:33:68:7e:11:bf:70:
01:ff:29:20:ee:ad:69:57:60:db:a3:26:d1:4f:7d:
dd:b6:fe:0c:3e:68:15:ce:be:d3:d1:15:e2:83:e6:
14:a1:a5:90:11:16:82:b4:11:03:60:fa:1d:22:fa:
35:0d:ae:ea:7f:bf:d9:f4:04:98:49:1c:68:1b:7c:
44:bb:40:61:00:f6:e5:81:52:1a:5a:1a:81:79:6d:
ce:ca:d6:92:90:62:45:ef:06:84:8e:cb:0b:56:f6:
64:ed:8d:5e:52:6b:2c:8c:19:cc:23:18:b2:90:8a:
56:05:1e:60:99:8c:be:99:32:53:8d:7b:27:71:ff:
ae:64:07:87:a1:4a:d2:ff:b0:a6:33:6b:1b:1f:55:
08:21:62:80:aa:14:ae:f0:59:88:27:01:a0:77:19:
aa:87:f5:6d:e7:8f:e1:7a:00:aa:68:85:e9:88:a9:
6a:c2:5c:98:e4:69:86:e4:0a:c0:14:67:4f:e7:74:
2f:3f:6f:6b:df:ec:22:ba:c6:26:d1:6d:bb:f9:18:
7d:05:f8:b9:1d:ed:2f:0d:a7:e9:94:98:8b:bc:1d:
4e:7c:3e:22:e5:67:93:57:0b:ff:aa:fa:da:9a:ec:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:93:A2:85:9B:91:56:08:EA:07:2C:D2:5F:E6:B6:81:E8:D2:DB:56
X509v3 Authority Key Identifier:
keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:56:1d:a1:46:1d:0a:f1:ae:1b:d4:0a:b4:d4:2f:c8:47:4a:
f1:7f:c8:7a:d8:9f:8c:c9:45:46:06:e6:b3:be:65:f8:58:b0:
52:5d:a1:dd:54:d3:38:a1:ea:6f:fe:c7:79:c6:59:ec:6e:d7:
75:68:7d:52:f1:70:29:4b:60:1b:bf:08:6b:f3:10:1d:c0:8e:
36:64:ad:f1:6f:2c:7a:bb:52:17:d7:ac:24:a5:91:c1:1e:3a:
59:35:51:2a:2c:46:a7:60:be:09:c5:42:39:d4:b3:21:cc:74:
84:f1:6c:19:68:80:b4:b4:ca:22:aa:f5:08:31:ff:73:b5:c4:
6b:33:00:77:4f:40:dd:79:ed:d7:98:93:b6:d5:ab:39:55:36:
73:bf:75:05:ca:5b:5d:66:af:6c:0a:f4:9c:0b:d1:0a:45:a5:
da:ae:f0:8f:67:b1:ec:b1:8a:81:b0:b2:4d:63:3f:41:aa:4b:
26:a4:03:e5:a0:75:c3:e7:2e:ac:84:64:c0:8c:1e:f0:4c:83:
80:a8:3e:05:87:63:1c:41:b7:67:a7:9e:2a:6d:82:28:ef:6d:
09:cf:c2:bb:3e:11:46:81:ce:a4:78:f8:15:52:71:06:8e:0b:
0d:9b:1e:47:99:f9:fa:0b:4a:5c:bc:34:02:ca:7b:e4:0a:17:
70:18:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:42 2025 by rpki-client