Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
File: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json)
Hash identifier: /P99ogV3mwW2tkmKUR85a3i6BpDp4Tl3i0AfOLSn2YQ=
Subject key identifier: 94:58:AF:20:E8:9F:D2:2A:A8:17:D4:89:3A:AB:42:86:67:5F:2F:65
Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
Certificate issuer: /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Certificate serial: 034B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
Manifest number: 0346
Signing time: Fri 31 Jan 2025 01:07:30 +0000
Manifest this update: Fri 31 Jan 2025 01:07:29 +0000
Manifest next update: Fri 07 Feb 2025 01:07:29 +0000
Files and hashes: 1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: mSLlDrXElk2XlzteaxL1qYH0n712x/yb5MQfOAh5p5o=)
2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: ofcKtKRXFLwjQQ8YYS8NX0ZWZ1WuU2yrzgFaeIt1ut0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Validity
Not Before: Jan 31 01:07:29 2025 GMT
Not After : Feb 7 01:07:29 2025 GMT
Subject: CN=679c2252-2aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:54:f4:d5:31:d1:31:06:56:31:e0:e3:1d:
1f:b9:40:8e:42:5d:09:87:dd:16:4e:45:fa:05:4a:
62:f2:3f:4c:79:b6:4a:9d:12:da:35:da:ee:89:d5:
75:53:37:51:e2:1f:85:b2:41:ba:56:eb:c6:75:d4:
00:e7:7a:df:63:17:d7:ac:7f:f1:63:84:24:c9:1f:
38:72:d3:e6:88:1d:0e:f2:61:a9:0e:62:f5:8d:a5:
d6:98:56:ce:bc:40:8d:f9:64:2c:9d:5f:7f:41:0a:
5d:48:2b:9f:2e:1b:7e:b6:0d:1d:33:30:cb:f4:80:
5b:ba:c4:7e:f5:64:cb:e0:b0:f2:b4:c4:03:9d:89:
ec:07:06:40:6e:be:17:0a:e7:07:03:7c:c9:cf:75:
a6:00:cb:ab:37:4c:52:df:4f:d4:97:8e:be:52:12:
dd:5b:e0:81:3c:f0:44:c0:e0:b6:e6:37:b2:6d:10:
34:e7:e6:30:04:36:c3:41:59:04:b5:fa:41:ad:da:
4d:90:23:ea:67:19:95:17:26:91:32:bc:03:1f:99:
f2:72:83:eb:b9:56:71:f1:87:58:34:f0:4a:c0:d0:
9f:52:f5:de:d6:2f:6c:30:d1:1d:84:a7:1b:02:af:
47:14:b1:19:80:50:38:97:3a:df:6d:d0:09:70:65:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:58:AF:20:E8:9F:D2:2A:A8:17:D4:89:3A:AB:42:86:67:5F:2F:65
X509v3 Authority Key Identifier:
keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:54:5a:2f:37:3a:3b:a5:9e:70:15:f8:07:9b:13:06:c4:d0:
87:62:dd:e3:47:5f:3e:3d:b8:37:95:45:95:35:36:b6:b6:1e:
35:5f:a0:3a:77:9e:cf:dc:bd:b4:22:21:e2:2f:df:c8:42:26:
f0:59:96:18:14:db:b2:e9:d8:75:75:7e:2b:6c:74:61:d6:22:
f5:08:dd:e9:92:8e:0d:0a:6b:e8:51:56:58:58:38:d3:62:bf:
d5:4f:85:43:22:84:77:1e:26:f7:70:57:a9:fc:d9:34:11:c2:
d9:59:c9:c7:d6:6b:75:78:f0:73:99:12:88:1f:05:1e:9c:d5:
5a:82:2d:00:17:a7:c4:b6:34:9a:09:1b:aa:9a:51:5e:69:0d:
0a:93:81:3b:71:2b:04:c6:10:a2:4a:33:84:a9:93:8c:3a:6b:
60:d8:bd:54:37:ba:4e:57:07:78:88:6c:87:d1:0f:b5:0d:ba:
f0:93:d6:c6:a4:5a:a1:7a:ab:0e:14:67:de:fd:2a:ae:11:47:
d0:d5:e4:7e:ed:3f:ce:d3:19:3c:06:f6:9b:fc:a3:d3:ac:bb:
f7:11:96:c0:7c:52:75:8c:a4:9a:d5:43:95:4d:4d:b4:14:52:
50:df:3f:91:47:9c:21:bf:80:86:bb:ca:f2:b3:fd:a0:fd:63:
96:ce:ed:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:02 2025 by rpki-client