Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json)
Hash identifier: lsKBDvLs6cTYzQstTDlDsAENfzWpvQ+1AZgLN59/qBE=
Subject key identifier: CE:40:25:79:B2:D7:A6:D1:89:21:71:D9:C5:0F:A1:89:17:48:7D:04
Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Certificate serial: 0C4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
Manifest number: 0C28
Signing time: Fri 31 Jan 2025 18:23:40 +0000
Manifest this update: Fri 31 Jan 2025 18:23:39 +0000
Manifest next update: Fri 07 Feb 2025 18:23:39 +0000
Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: xLc/bKAaxQqEpbky9AMn+UQOCmHmSDNp6L/zCUVJ7fI=)
2: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: iRXSCwbYvkB9N1oSkDNNM/sHFlWbk+W21qXorY3ggOs=)
3: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: v5rqq+1vbD4A/BqKnkMqbNhWY+ZtznzjTbOL/bdSMTs=)
4: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: xlVExDsT6dRqAOzeSQn/to87W/tI0sJTe5K+fPJ+qMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Validity
Not Before: Jan 31 18:23:39 2025 GMT
Not After : Feb 7 18:23:39 2025 GMT
Subject: CN=679d152c-825d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:64:1e:b4:9d:67:68:d6:ae:a3:11:3e:33:
a6:cd:19:be:f9:ba:ac:03:b1:98:52:11:49:e6:98:
ca:2e:7a:8e:78:f0:cb:4f:58:b4:6f:f2:43:2f:9b:
0a:c0:92:e2:ce:3b:af:42:7e:f0:c9:ab:9c:38:12:
b1:4d:73:2e:df:81:e2:7d:a2:9f:75:37:0f:36:3a:
15:43:61:dd:2d:6c:09:e8:7c:cb:bd:fc:d1:08:9f:
ea:5a:7c:fa:3c:34:38:d3:ef:b4:f9:10:64:1f:38:
2c:cc:c4:e2:6e:6f:72:aa:48:89:e1:54:28:80:0c:
3f:19:c1:46:42:00:03:44:95:2c:8d:9b:67:b2:7e:
70:d1:bd:85:fb:cf:35:15:2d:46:b9:ab:1f:40:5d:
82:70:21:d2:4e:84:7f:7c:6a:b6:c0:cd:ed:00:3f:
2b:eb:1a:48:20:59:be:c1:a9:7e:06:6c:8a:77:da:
07:1e:47:f4:93:4c:3b:08:1f:ac:68:c5:c4:5b:05:
12:08:59:04:3d:10:47:e8:92:af:56:12:4e:43:d2:
53:04:86:1b:92:48:af:a2:99:57:8d:cc:41:0c:86:
9a:8c:a8:42:ab:a8:5d:9e:c7:e8:04:4e:d0:3d:77:
17:5a:76:46:1f:59:6c:f5:21:cf:01:c1:d8:6e:5f:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:40:25:79:B2:D7:A6:D1:89:21:71:D9:C5:0F:A1:89:17:48:7D:04
X509v3 Authority Key Identifier:
keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:45:ca:fe:8a:1e:44:5d:56:7b:63:a6:5c:46:68:88:db:fc:
52:2a:5c:50:5d:a3:63:af:c8:61:c4:60:ef:ff:89:ba:b2:1f:
9d:cf:df:28:2f:f6:fa:bb:a8:97:c4:17:ea:b1:13:62:af:d3:
58:cb:17:e3:23:71:53:4b:f0:44:e2:c7:bc:95:1d:d4:d7:b7:
8c:a0:e4:95:f3:2d:a6:34:05:4a:81:3f:6d:6d:57:11:2a:29:
29:cb:81:ba:4a:ee:bc:80:31:9d:24:0b:ff:c5:6a:a2:1b:9e:
40:8b:d0:74:2d:52:9c:f8:39:60:e7:84:21:d4:8f:fc:ab:22:
03:9a:47:24:b6:7a:64:9f:0f:a1:0d:16:c0:58:14:85:e4:6a:
09:18:6d:ca:28:9b:71:14:b8:45:b6:b2:f9:cd:03:94:69:7c:
6e:f0:a3:e5:d7:3e:12:fd:20:8b:d4:ed:63:1e:23:7e:93:5e:
ea:82:fa:b1:2a:81:67:0f:66:e2:2a:94:18:c5:07:16:f5:0c:
d7:61:4e:b4:b4:1d:3b:c1:a7:3a:2c:41:46:ce:58:a0:41:75:
b7:a2:58:02:40:12:0f:c1:2f:8f:8c:dc:1f:7b:91:16:fa:ff:
21:88:4a:83:1f:f6:96:ff:a8:50:0e:4e:f9:b0:f1:a5:0a:dc:
61:9c:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:09:49 2025 by rpki-client