Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft
File: d0ZKhG930cTTZqMGuAaTn88qYBo.mft (raw, json)
Hash identifier: IayJQTna9RL4IypmFvdPaVaZMqZfaAbw4rMeBus4IQA=
Subject key identifier: 85:93:A4:85:F5:EC:0A:1D:2B:B2:7C:2C:3B:0A:3B:38:19:D7:A5:DD
Authority key identifier: 77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A
Certificate issuer: /CN=A91B74D6/serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft
Manifest number: 90
Signing time: Fri 31 Jan 2025 05:35:52 +0000
Manifest this update: Fri 31 Jan 2025 05:35:51 +0000
Manifest next update: Fri 07 Feb 2025 05:35:51 +0000
Files and hashes: 1: d0ZKhG930cTTZqMGuAaTn88qYBo.crl (hash: wvOeRxfhBHYlLycaZw14GlYRr30aP6khSuKLbEA14i4=)
2: ABD84FB00F8A11EF943CC917C4F9AE02.roa (hash: PDnutuYB/riFGiwE/DA4jtgTvwtaDb0EZnLNk2dEE1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B74D6/serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A
Validity
Not Before: Jan 31 05:35:51 2025 GMT
Not After : Feb 7 05:35:51 2025 GMT
Subject: CN=679c6138-2bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:77:b6:2f:73:57:f0:eb:fd:b2:b8:d7:66:
fa:83:b9:d8:c3:4b:5a:e5:f2:ff:98:2b:cc:05:e7:
98:55:dd:4c:f6:2f:9a:f7:f5:ab:4a:0c:86:2e:ec:
12:2c:0d:da:15:39:d8:42:1c:96:d5:b8:0e:ce:f0:
96:0d:3e:0e:69:60:27:1e:2b:79:f9:a6:ba:f0:31:
50:eb:09:7e:55:1b:14:df:79:e5:1d:88:a5:e6:85:
4a:a3:ae:97:40:1d:8b:6f:a7:9c:ee:bf:ba:9f:8c:
4e:20:fa:6b:53:7d:ac:c5:04:36:81:5d:2a:5a:d7:
b5:2b:5c:bd:80:4a:82:3e:8d:9a:3e:27:ec:f9:6b:
5a:d8:53:ca:2e:94:bf:6f:6d:70:3e:48:60:2e:8b:
98:56:77:54:de:ae:31:d7:b3:c7:28:73:c6:19:42:
53:f4:49:e4:01:a4:c6:04:65:36:63:36:10:51:8c:
6b:46:b4:dc:ba:5d:1b:2c:30:2b:9b:41:0a:a3:44:
8e:88:08:9b:78:43:1b:49:d4:9a:90:12:10:a6:a4:
ed:88:93:ee:e6:84:ff:c2:a8:cc:15:1c:94:22:07:
1a:67:c0:e8:52:b1:fd:a3:34:72:47:0a:5a:05:54:
fe:3c:2b:48:29:67:cb:84:6f:c1:69:5c:dc:91:d9:
3c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:A4:85:F5:EC:0A:1D:2B:B2:7C:2C:3B:0A:3B:38:19:D7:A5:DD
X509v3 Authority Key Identifier:
keyid:77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:2c:2c:11:74:06:c8:55:26:ad:2b:51:69:f3:23:2b:79:ec:
4a:10:6a:b4:cb:16:3f:28:90:92:66:34:d4:be:80:4b:10:13:
f4:21:1f:02:7c:45:a9:83:34:43:c3:76:c8:26:08:69:e3:9c:
1f:0c:99:06:49:64:2d:eb:0e:97:3c:7e:62:26:e2:0f:63:43:
c1:57:07:ef:4f:3a:94:da:93:a1:f1:a9:47:47:89:87:eb:d6:
91:ff:ab:c5:6a:1d:03:38:08:eb:b6:ae:bd:7a:64:1e:08:aa:
56:71:61:29:49:3c:6a:e9:75:47:09:62:8e:35:5d:cf:13:77:
2c:41:8b:d6:d8:51:72:2d:e4:94:6c:fc:34:16:c0:e1:ea:b1:
70:e7:35:0b:54:df:39:8a:2c:0c:0f:ec:94:15:7d:16:89:ea:
20:f0:1f:28:bc:45:7b:39:e0:15:10:55:3f:f3:c2:91:20:a3:
e0:f7:75:d4:b6:a2:81:18:4a:46:ff:69:f6:c9:0b:a5:f8:47:
fa:13:66:c6:5d:86:01:87:9c:6a:da:48:6a:89:a4:fa:ee:7b:
e3:18:a9:88:7c:d0:f9:a4:e3:3d:c8:1f:a5:f9:72:4d:cb:b6:
1b:6a:ef:07:89:00:6e:44:f9:fd:54:e5:b3:fb:de:16:f3:9d:
45:df:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:02:50 2025 by rpki-client