Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json)
Hash identifier: DfPp2KKzij0Fx+SzHFronqlOf1I7jyPe/MzvQElNnVQ=
Subject key identifier: EE:B3:BB:8D:AC:B5:90:8E:73:3D:25:A4:45:E8:0A:A3:1C:0E:6D:F0
Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18
Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518
Certificate serial: 06AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
Manifest number: 06A4
Signing time: Thu 30 Jan 2025 22:11:18 +0000
Manifest this update: Thu 30 Jan 2025 22:11:18 +0000
Manifest next update: Thu 06 Feb 2025 22:11:18 +0000
Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: +kN+8AmManARDN1Ut+Q6Dv5PlojdoU0hhRy89X5++7c=)
2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: OP9+uNu+3DnTVFD36VFMmNeVnp7GwQwmYQXQim6Ljvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518
Validity
Not Before: Jan 30 22:11:18 2025 GMT
Not After : Feb 6 22:11:18 2025 GMT
Subject: CN=679bf906-d5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:74:4f:b7:5f:9f:34:20:fe:c8:89:cf:8d:42:
23:f2:3e:46:8f:1f:07:dc:1d:58:2b:7d:62:58:f7:
fa:46:c9:b1:b8:6a:84:83:0d:85:fe:4e:74:2c:61:
b8:d6:06:88:1d:b8:34:16:19:47:19:4f:be:22:8b:
62:89:4c:13:cb:61:ef:38:88:63:19:f0:78:d5:f6:
d5:fd:2c:94:a8:2a:61:97:51:3b:ce:c4:34:9a:d9:
1b:8f:cd:e5:e7:ec:22:6c:6c:ef:cf:81:a5:a2:bd:
57:1c:d6:a0:83:f5:d3:5e:f3:4e:2c:45:87:88:70:
74:17:69:2e:e5:91:3a:17:f4:4c:1e:ea:03:23:5e:
49:ed:bc:b6:74:1b:ac:e2:be:f9:f1:8f:39:a5:f9:
9c:bf:70:48:e4:58:bc:b4:60:4e:e6:22:1c:b4:98:
9c:5a:71:7c:3a:de:29:b9:22:19:39:63:f6:1d:b8:
f2:ac:34:54:25:e4:8a:69:3c:e5:59:e2:e3:bf:7a:
4e:4d:c7:2a:9c:44:29:10:c4:c7:4d:bf:6f:ef:5c:
17:7d:df:de:db:2d:56:db:04:f0:ab:6d:0d:9b:2a:
78:fa:c0:3a:15:fa:ea:78:c4:91:88:ed:21:93:08:
f9:7e:a8:25:2a:fd:1f:01:6a:ab:e7:fa:d2:df:ff:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B3:BB:8D:AC:B5:90:8E:73:3D:25:A4:45:E8:0A:A3:1C:0E:6D:F0
X509v3 Authority Key Identifier:
keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:28:79:b0:e8:11:cc:24:81:7c:e8:42:5d:d9:02:f5:67:1e:
aa:59:6d:47:27:78:25:2c:87:08:ee:eb:8e:ca:e7:7a:57:c4:
d4:05:df:4b:ac:8c:7f:4f:27:6e:db:f1:29:ed:51:a6:aa:23:
c9:4f:fd:86:9a:54:78:2b:05:0f:e1:b3:73:7f:b2:9a:f8:00:
8c:13:6f:65:c6:e2:ed:c3:6a:50:fd:48:74:1c:65:ff:fe:dc:
46:a0:ae:41:fa:63:d4:52:67:60:ec:4b:18:95:0c:a9:41:4a:
59:20:9f:aa:17:37:11:19:4f:8e:56:2e:9c:f1:0d:c7:2a:3b:
6f:95:35:56:4b:0b:4e:c8:75:1b:9e:c1:4d:55:4b:c6:b2:b1:
54:10:2d:23:f1:1f:d3:0e:38:54:7f:13:eb:a4:f1:e7:e8:db:
1d:09:15:35:34:d9:00:0a:ae:e5:8e:0f:87:17:cd:e2:e8:67:
8e:8a:cd:65:4f:25:79:8c:08:5f:65:4e:60:0b:0e:c6:d3:60:
c7:42:fe:81:fd:3f:b6:e9:38:50:74:fc:91:2d:3a:3f:d9:ae:
b6:56:63:e1:eb:5f:26:69:e5:71:8d:af:ca:dd:df:45:57:56:
e1:45:e9:64:6e:84:80:a8:3e:59:25:21:6a:fc:2f:62:ed:d4:
25:cb:51:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:03 2025 by rpki-client