Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft
File: MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json)
Hash identifier: adclLRhtKww8Ec82DB/QjJsWjPI3wMcJAW3UMBV3zR4=
Subject key identifier: 24:CA:94:30:83:75:19:45:92:D0:83:AA:79:FE:16:94:5B:9D:2E:BB
Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7
Certificate issuer: /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7
Certificate serial: 042A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft
Manifest number: 041F
Signing time: Fri 31 Jan 2025 00:25:40 +0000
Manifest this update: Fri 31 Jan 2025 00:25:39 +0000
Manifest next update: Fri 07 Feb 2025 00:25:39 +0000
Files and hashes: 1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: bOvr88kswEQnKYfwaJ3a2aQzovQbB1cb5x8T1JDLOUk=)
2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: L87/P71GLyeOVHRuWVUui3Zcv+2yVuGxBuaLmPWeK04=)
3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: hvSnlb31gfJnIJknYF0rYUKJLZVmXt9VjFEolvqLYLs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7
Validity
Not Before: Jan 31 00:25:39 2025 GMT
Not After : Feb 7 00:25:39 2025 GMT
Subject: CN=679c1883-e974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:fa:ee:2e:d5:be:07:c0:0d:f6:fc:79:28:
0c:5f:40:5a:30:10:23:e9:65:7b:ee:a0:cb:68:36:
70:d5:ff:86:de:e7:62:22:45:75:10:02:04:a0:dd:
09:45:23:14:0b:8c:72:a2:1e:fd:c9:bd:c7:52:61:
da:42:b3:3d:7f:ed:bd:ab:12:f3:48:3b:3c:02:2b:
14:4d:e4:85:f0:45:72:38:1c:ad:06:70:36:d8:b5:
bc:b1:14:7e:9c:69:c8:6e:a9:e8:0d:31:8a:84:73:
8c:42:c4:d4:95:87:c1:77:c2:ce:c3:83:da:1d:d6:
fd:19:7b:94:24:92:d4:b1:2c:7f:ea:9b:a7:fb:92:
3a:e2:5d:a5:a4:82:ae:8b:3d:ac:13:9e:da:3b:0c:
24:84:be:d7:4b:b7:dc:3b:7a:fa:48:b2:f7:b4:92:
a2:c9:0e:dc:86:c0:47:31:93:31:ce:04:e8:58:45:
3d:52:85:dd:bd:b7:70:d6:5a:af:a5:47:42:1d:d9:
0c:6c:18:55:ea:e1:19:cd:ae:df:77:87:1c:9c:55:
08:ec:1a:23:c5:10:82:8e:6c:12:96:c7:d1:f5:70:
bb:11:62:f9:41:c2:45:98:f0:24:fa:7d:8f:91:d2:
fe:37:d0:1e:35:7d:da:92:54:c6:d2:22:4d:fd:85:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:94:30:83:75:19:45:92:D0:83:AA:79:FE:16:94:5B:9D:2E:BB
X509v3 Authority Key Identifier:
keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:10:41:55:68:b0:a2:df:ce:e3:ee:00:ef:af:a8:03:d6:f5:
9a:9b:d0:ce:8a:17:03:dd:d1:b0:46:99:0a:60:59:6a:31:c4:
00:fc:46:ac:4c:22:4b:05:b3:3c:26:aa:92:ef:54:57:73:01:
e1:60:6f:33:2d:78:8c:d9:68:f5:2e:c2:49:30:a6:05:59:15:
77:59:7f:ba:67:82:da:83:16:a0:85:54:45:fd:b0:bd:36:7c:
ab:66:0b:1c:b0:17:2b:4c:ac:6a:ea:eb:65:7b:6f:84:8b:9e:
5c:f9:1a:a5:31:8d:20:2d:54:f0:c8:4e:ac:a1:04:a0:26:4f:
e2:5e:0a:95:60:9c:ce:9e:f6:21:55:56:5f:6f:e5:5a:67:71:
22:fc:23:84:fe:e8:ee:4a:c7:4c:a6:bc:69:e7:3b:fc:d8:5f:
af:39:54:f9:ba:39:f6:2e:96:44:f0:92:8e:b6:fb:33:e2:c1:
3d:a6:ee:fd:92:5c:e3:20:86:37:0c:4a:b0:f3:18:41:37:77:
a1:7e:18:01:e8:9b:8b:90:21:8c:49:e1:77:18:80:be:bc:f3:
28:fb:d2:b3:76:b8:c0:0b:e3:df:e6:c5:cc:1d:a8:49:b6:da:
b6:89:8d:2c:e7:71:95:a1:88:83:a7:0f:22:0d:89:b2:8d:1a:
40:a6:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:14 2025 by rpki-client