Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
File: 2x93mMABF7IMbzvDKZSALPIJSDc.mft (raw, json)
Hash identifier: fUzcs8jqgBDflUihG+XZjDQmcf03yJVDOG71eOdnmEA=
Subject key identifier: 68:81:E8:A2:74:BD:DE:0E:28:1F:9F:E6:76:0D:41:8D:D9:97:F9:1E
Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Certificate serial: 06B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
Manifest number: 06A5
Signing time: Thu 30 Jan 2025 22:13:35 +0000
Manifest this update: Thu 30 Jan 2025 22:13:35 +0000
Manifest next update: Thu 06 Feb 2025 22:13:35 +0000
Files and hashes: 1: 2x93mMABF7IMbzvDKZSALPIJSDc.crl (hash: aKSc0ESUYY4rtSUc0uyZHWc3WWgdxfQrmD81zAHBAx8=)
2: 1B713E1C554F11EB99946233C4F9AE02.roa (hash: +ZFmuCFgR+jvEdX2GBNvEvupwNfudy/ZxjtB14tyFr0=)
3: D0EAEA3EB85811EF96935B81C4F9AE02.roa (hash: uITzFkhM8ocZYzwoSxieBLCf61KmQsM8/iMGu8Y1zSQ=)
4: 1AC0CFAA554F11EB99946233C4F9AE02.roa (hash: 4VDuXUaOtbUXD3VVEY+AukdhbFh0WueivxM0MnxtQzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714 (0x6b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Validity
Not Before: Jan 30 22:13:35 2025 GMT
Not After : Feb 6 22:13:35 2025 GMT
Subject: CN=679bf98f-764f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:d1:8e:4d:32:e3:25:e2:1c:8d:66:d7:ab:
dd:0c:2b:4e:7c:49:94:92:18:c2:39:6f:84:e1:11:
6f:63:b6:c5:49:bf:6c:9a:d6:e7:f3:ab:37:8f:ab:
19:c5:31:01:b4:df:be:67:4d:fb:2e:4b:74:61:50:
33:7f:e7:06:91:bf:66:22:99:da:2e:a5:01:81:d8:
bc:90:f7:97:83:71:d4:15:b2:f9:5d:34:7e:8e:16:
de:09:00:01:7b:c3:b6:ca:a1:af:08:3b:63:6a:42:
64:8c:8f:e1:b4:fb:8f:c5:c1:40:3e:6e:59:b7:10:
a6:8b:96:80:8e:c4:2e:40:8f:e0:e4:86:79:d2:73:
4f:45:53:e9:09:cc:05:f2:e9:7c:e0:9c:de:11:02:
e5:5f:f1:de:57:76:25:61:06:e2:b3:26:09:c2:c2:
79:ba:22:df:35:57:26:b2:25:f7:f2:14:63:c4:7e:
38:5d:d7:51:73:34:ae:4b:b4:93:f4:10:19:48:45:
17:07:89:77:1c:24:4c:be:33:39:91:34:50:6d:55:
4e:89:c6:0b:62:e3:7d:b8:e3:c4:c5:77:35:c0:8a:
75:bb:bd:8e:bb:d8:30:76:e9:52:25:84:4b:99:f8:
95:19:9d:57:18:9d:3d:77:e7:49:f5:a9:36:1d:96:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:E8:A2:74:BD:DE:0E:28:1F:9F:E6:76:0D:41:8D:D9:97:F9:1E
X509v3 Authority Key Identifier:
keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:a9:b2:0a:03:19:84:26:77:cd:16:94:fc:5d:dc:c0:32:fc:
a3:4d:0f:74:39:ac:a4:b4:17:c3:98:39:38:3c:97:15:38:eb:
54:fd:86:d4:ff:25:af:0d:86:1a:41:62:ae:f7:63:b0:17:78:
a7:3d:81:1d:9f:5c:ba:4e:08:80:df:d6:d5:af:59:4f:bb:36:
09:eb:a7:5a:45:27:ea:7f:f6:2c:bc:26:f6:e0:ed:40:1f:f1:
57:92:9a:80:80:1f:87:6b:39:05:3b:b7:8c:92:eb:dc:34:7d:
96:20:07:b7:ab:d0:8b:63:a4:88:b4:ca:3e:d6:d0:fe:33:67:
52:76:96:34:c3:ad:83:36:7e:67:10:79:0a:f8:60:8b:11:19:
cd:aa:b5:45:b8:e5:e6:fc:19:9a:68:0f:6e:ca:be:57:87:b7:
97:5b:16:ad:e5:a8:7d:45:9c:d3:a0:9f:17:44:17:f5:81:4a:
67:98:be:c6:3d:7b:6e:0c:84:75:2c:6d:cf:db:92:0a:50:a9:
b2:48:10:70:99:e1:30:35:5f:de:15:7a:fa:01:5a:73:80:84:
0d:32:86:1a:95:8b:12:5e:e4:64:6d:00:4f:a5:91:d8:ac:ed:
05:9f:20:8d:dd:fd:b8:b2:d1:b2:48:ab:88:62:05:ef:d2:65:
fa:46:0f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:36 2025 by rpki-client