Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json)
Hash identifier: wIdq5bZVkSBzK0S8sL0EwEecqHJ4aN945/bzbbcncEk=
Subject key identifier: E1:0C:25:CA:62:7E:11:F1:0E:6E:5B:7C:5B:CD:A3:77:74:95:1E:0F
Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Certificate serial: 0C31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
Manifest number: 0C1B
Signing time: Fri 31 Jan 2025 18:26:39 +0000
Manifest this update: Fri 31 Jan 2025 18:26:38 +0000
Manifest next update: Fri 07 Feb 2025 18:26:38 +0000
Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: FYSfq4shMT4Qc3fr6J/51xMM25c1NKIC+idAqUdjc3c=)
2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: Xn8UFabkBh7C11XTNFuqVWX0DQ3YtKdO4oP8X6zIrEU=)
3: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: wQzyXgNB8e39dNmdtHKa5IWJxgKdAoXLBNvYY5X5/EU=)
4: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: ZW4D52b/QqoUPTvkPyb0ztzXgPBkyyW+b1SqWMCRNR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3121 (0xc31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Validity
Not Before: Jan 31 18:26:38 2025 GMT
Not After : Feb 7 18:26:38 2025 GMT
Subject: CN=679d15de-4d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:ea:c8:e0:58:19:34:2c:0d:a8:70:3f:c5:
d7:d8:1c:d8:70:de:68:6f:73:3e:1a:6c:37:96:be:
f1:ec:78:c6:bc:9c:68:2a:e5:cd:16:3b:af:cd:c5:
cc:0a:53:9c:90:c3:b6:28:7a:74:d1:c1:66:88:de:
ba:6a:c0:61:d2:f1:a6:88:fe:73:8d:68:5f:3b:5f:
84:46:6d:7b:85:a8:0a:2e:d5:20:21:c4:eb:af:1c:
f2:8f:cc:d1:2c:2c:b8:46:0c:5c:13:e4:6e:78:dd:
f4:25:b2:a9:96:88:45:3e:a6:bf:37:9e:35:1b:b6:
cb:27:74:ba:5d:c3:cf:8e:94:43:28:1b:d7:db:ab:
b4:ab:55:59:fb:23:1f:14:09:e3:2e:c1:e1:c0:f3:
38:68:49:74:28:8d:80:80:43:c8:39:30:f4:51:1e:
0d:2d:25:c2:35:99:db:cb:39:dc:8d:a3:da:f3:81:
42:90:df:88:a4:1d:59:a8:fd:08:c2:62:62:77:11:
80:47:70:59:fd:11:49:8c:16:5c:6c:ac:dc:2e:81:
46:3e:e1:64:87:18:fb:0c:05:e2:4b:ed:43:56:34:
d5:56:4b:1f:73:bc:ad:f8:06:55:0f:31:30:44:be:
52:fc:c7:18:b4:d7:ce:50:0a:4a:fd:ce:c8:6f:0c:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:25:CA:62:7E:11:F1:0E:6E:5B:7C:5B:CD:A3:77:74:95:1E:0F
X509v3 Authority Key Identifier:
keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7c:da:28:0f:15:92:89:fa:b9:14:c2:53:e7:be:3a:08:22:
61:20:4a:db:95:31:4c:68:3f:21:8c:59:f0:16:02:d5:1b:f1:
a9:43:6b:1f:2b:68:8f:c4:79:6b:fe:28:2e:da:3c:40:94:66:
3f:d1:3f:b4:6a:56:96:86:0d:9b:08:2e:da:aa:93:b0:4a:79:
a2:31:71:1d:c4:2d:da:46:98:71:97:bc:be:c7:0e:29:83:13:
7a:ed:d4:fe:da:82:2c:63:3b:b9:68:04:5a:aa:fe:df:2e:08:
ef:af:89:3d:e5:f1:e6:d7:82:c0:6e:19:0d:56:85:2c:d2:95:
f1:d6:62:60:58:c2:37:92:06:0b:f0:0c:c0:2e:e4:cb:9b:57:
e4:d9:18:dc:65:fc:5d:42:cd:e6:15:4f:0a:a4:62:ba:78:ff:
ae:4e:c6:1c:d1:ab:59:6f:49:93:14:8a:29:03:1f:14:15:05:
dd:76:1a:bb:c7:5e:97:b7:0f:84:68:4b:dc:46:b9:cb:e4:c6:
21:53:c7:91:81:81:81:9f:28:c9:b7:24:7e:85:2f:b9:db:8a:
45:42:a3:3e:aa:ae:8c:6e:e9:0a:a2:79:4b:c8:be:a4:f6:fd:
80:e5:aa:d3:c8:4d:ae:da:de:29:64:df:f7:3a:cb:05:69:6e:
f7:a8:c9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:48:10 2025 by rpki-client