Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
File: _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json)
Hash identifier: DBk4RHdC3vXgearx/VF8mBoZ4HAn1pLUT63le74tN1E=
Subject key identifier: EB:75:1D:01:F0:59:C7:65:16:F9:CC:35:07:82:82:CF:CF:5A:32:33
Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
Certificate issuer: /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
Manifest number: 01AD
Signing time: Fri 31 Jan 2025 02:27:04 +0000
Manifest this update: Fri 31 Jan 2025 02:27:04 +0000
Manifest next update: Fri 07 Feb 2025 02:27:04 +0000
Files and hashes: 1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: aREOHcZs9Sxc4HYFL/ew4h/JoCYbbLjumJA3GEHjLsg=)
2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: ezVuFYLFE5nPFWmkFpb3o3Zc1r5CWJVIlBRAQm/fLig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Validity
Not Before: Jan 31 02:27:04 2025 GMT
Not After : Feb 7 02:27:04 2025 GMT
Subject: CN=679c34f8-812a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bf:73:9d:d5:c0:83:f9:51:64:b7:f5:e9:84:
8e:74:50:dc:7b:c4:9b:18:91:c2:57:e5:7c:41:bd:
f9:9f:20:bd:55:11:82:43:db:dd:22:4b:b7:48:ee:
79:0c:a5:d0:93:a6:12:b9:87:ad:99:30:f9:05:9b:
11:3a:46:d5:bc:47:32:b6:6a:ca:ab:e4:45:03:3b:
66:9b:2c:57:d8:e2:d4:2a:8a:7d:96:3c:59:4b:07:
01:55:9a:d5:f0:45:00:23:c5:6d:f3:05:09:74:55:
28:84:3b:da:9d:ba:44:42:c0:00:72:f8:08:cb:0f:
3b:8d:47:f5:d6:ed:82:59:cc:cd:7c:5a:e7:47:f1:
d4:2b:a5:b7:52:68:9c:aa:91:01:6e:83:e7:7c:1b:
a9:7b:c6:60:63:50:2b:fe:6e:07:d7:1d:1c:04:01:
9a:22:f9:51:62:9d:e7:b2:fb:32:43:ea:91:fd:72:
3b:fc:f9:e8:71:d5:4d:49:a8:b8:df:46:fb:78:a5:
66:c7:68:8e:6a:4e:37:91:5c:c1:64:68:5f:7c:f1:
88:45:a8:ec:65:d2:0d:de:e3:bc:ba:4c:2c:0c:01:
c8:49:28:81:37:fa:10:c7:21:7b:4a:b6:6c:1f:70:
54:c5:1f:6e:15:e4:8c:1f:c0:45:b5:bd:97:2f:e0:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:75:1D:01:F0:59:C7:65:16:F9:CC:35:07:82:82:CF:CF:5A:32:33
X509v3 Authority Key Identifier:
keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:36:f1:dc:3a:b7:f9:3b:a5:05:9c:9e:58:3c:e4:dc:a4:26:
61:15:1d:4f:55:4f:bb:27:8d:6d:67:14:e5:1e:b4:94:48:0a:
b5:66:c6:4c:78:58:7a:da:d5:25:1b:45:63:32:39:0d:b7:ca:
cc:1c:6e:73:80:a3:83:e7:29:93:80:a6:c2:c5:07:c3:bc:31:
e7:27:3c:2e:9e:f0:aa:2d:4c:9e:92:9b:74:67:bf:58:6c:c2:
c7:97:a5:f8:40:0d:60:25:ab:dd:d8:c1:f2:22:c3:5e:d8:3b:
ea:14:04:69:70:7a:13:39:f6:56:6c:74:1d:07:45:0c:56:64:
05:eb:e0:ba:4d:b8:19:18:b7:1f:e4:59:f6:cf:53:6a:fa:42:
52:8b:dd:04:0e:8d:1e:ad:10:62:91:b0:bc:a3:df:00:82:04:
fc:b7:de:70:61:e8:52:40:18:3f:11:f4:95:d2:4f:ca:5b:35:
db:31:1b:5e:50:1f:2d:ee:85:c9:3d:c1:a6:9d:5c:03:5e:f2:
7a:14:38:05:30:be:17:44:ac:33:98:5f:a1:3b:b7:00:4f:d9:
03:08:d5:79:40:9e:09:cb:27:7f:1d:9a:ee:e0:dd:5f:bd:28:
de:89:43:0e:9c:ff:70:ff:22:e4:b8:26:30:5e:c7:b9:3b:39:
6b:5b:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:06 2025 by rpki-client