Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft
File: kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft (raw, json)
Hash identifier: wsdGQJj04FkVF3VWLGl96BBJkVuIu4p5i5FvKnPvpPE=
Subject key identifier: B9:70:AF:66:E5:0D:AB:44:27:05:0C:D0:5C:51:59:51:FC:C5:10:0F
Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39
Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039
Certificate serial: 0BC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft
Manifest number: 0BB1
Signing time: Thu 30 Jan 2025 19:08:15 +0000
Manifest this update: Thu 30 Jan 2025 19:08:14 +0000
Manifest next update: Thu 06 Feb 2025 19:08:14 +0000
Files and hashes: 1: kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl (hash: 2zYkOLM+SAmEBFI3hNtHDxUdgPqF0Mexb/dhEtdt19c=)
2: EA531ACE61C211EF89F25E2CC4F9AE02.roa (hash: oNiAfDnKFd6E/eWe2/MsQzB7YHqKOuQqvUBoaG+F2qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3011 (0xbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039
Validity
Not Before: Jan 30 19:08:14 2025 GMT
Not After : Feb 6 19:08:14 2025 GMT
Subject: CN=679bce1f-a460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:bf:58:6c:c8:f2:45:be:89:2a:22:1d:66:
25:f6:91:e7:4d:6a:98:50:70:7f:bd:c7:0d:5c:8c:
20:45:04:1e:d1:48:b5:7d:39:49:a5:31:97:16:f1:
0f:96:08:e8:55:79:db:35:db:c8:9e:05:d0:4c:16:
18:01:01:62:11:ce:08:58:f1:3a:81:64:a1:46:65:
71:3b:80:26:77:c2:60:32:26:13:86:30:b4:d0:34:
f0:7a:df:eb:42:a2:f7:41:13:c6:78:5d:02:b1:a5:
38:ad:33:9f:4a:86:bd:3e:e6:e5:05:8d:03:6f:35:
ec:fd:ba:f6:9f:15:4b:9a:8d:7f:e6:2f:3d:86:af:
a4:51:b2:98:4b:75:24:e6:d5:2b:59:97:ee:49:f1:
5f:30:72:c6:af:6c:57:9c:71:01:28:af:36:67:cf:
55:28:67:c6:b6:2f:ae:51:ee:f4:4e:57:3d:16:b4:
a0:ba:77:ef:b4:b3:39:af:f9:e7:09:86:63:c1:17:
4a:79:12:75:d0:c2:4e:76:fe:cb:32:3c:1a:9c:aa:
75:b7:84:ef:4b:47:57:44:bf:74:6c:8b:f2:ff:07:
c9:b5:3e:45:96:ca:09:d7:fd:7d:c9:b5:df:04:ef:
d8:39:ca:2f:5e:6e:07:78:e1:c5:3a:b3:c5:72:9f:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:70:AF:66:E5:0D:AB:44:27:05:0C:D0:5C:51:59:51:FC:C5:10:0F
X509v3 Authority Key Identifier:
keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:84:14:6b:7c:4e:30:44:25:17:e5:fb:9b:8d:27:d4:3b:a6:
eb:89:aa:5a:37:43:18:55:59:82:9e:7e:16:1d:f4:e4:9f:19:
6c:a5:cd:d0:88:76:cc:1f:24:66:19:97:d4:f3:61:0b:ae:55:
9a:97:28:e5:0a:3f:73:19:df:47:44:ce:3d:9c:ed:12:e2:41:
2d:b6:dd:09:8f:fd:35:21:ea:c7:84:70:e7:ca:37:62:41:6f:
9c:91:aa:4c:31:52:4a:7c:4c:db:ff:82:0f:f4:e3:41:52:3c:
b6:76:b5:ba:78:1c:f8:ad:02:54:8f:d2:89:18:d1:be:c0:1e:
55:4f:02:55:1b:f0:89:6b:34:b5:27:3b:c0:80:d5:59:88:1f:
07:6b:7d:e1:74:60:92:1e:5f:14:5d:ac:a3:13:37:55:1e:d2:
dd:f0:22:92:58:ab:8a:23:3f:ce:74:53:04:21:0b:23:03:2b:
29:74:ac:97:f8:bd:95:96:27:f0:40:2d:c4:3e:c0:90:35:2a:
8e:11:58:40:b6:40:be:11:8b:0b:fe:18:85:1b:e7:f8:51:59:
0d:c6:ad:59:56:58:95:6b:53:ff:03:a0:5f:b9:07:81:d1:ea:
b7:1d:e6:16:c2:d1:5c:ea:e0:ba:bf:0a:a1:d0:d8:0b:83:48:
a2:c1:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:53 2025 by rpki-client