Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier: VZLEcqWZO2Av7g/UZzuiEBqfpuae5wb8R0QFxT8prB0=
Subject key identifier: 5F:58:78:BA:8F:FB:6E:7B:18:39:C7:52:C1:20:2D:02:89:AF:05:3A
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial: 1B55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number: 1B40
Signing time: Fri 31 Jan 2025 16:18:00 +0000
Manifest this update: Fri 31 Jan 2025 16:18:00 +0000
Manifest next update: Fri 07 Feb 2025 16:18:00 +0000
Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: tMxqThIcQwLWrYgcKIpX/B6wyW3KgdOeynb2XH3R8E4=)
2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: Bhz7N8pZoKpTA86d7VHsfPqDjwr9atp9lYNrAhBYh2s=)
3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: c59MSrVHqgcEbaHqGs+kUo5YIngAyWH9D88+iqkZAwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6997 (0x1b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Validity
Not Before: Jan 31 16:18:00 2025 GMT
Not After : Feb 7 16:18:00 2025 GMT
Subject: CN=679cf7b8-4dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:dc:00:5f:93:58:37:6a:eb:93:08:eb:cd:
e4:b7:62:c2:a4:fe:a3:8b:0d:ae:67:a6:24:bc:f0:
8c:7e:97:1c:f1:55:30:0e:a3:bb:ee:d0:8d:87:b1:
26:18:b0:8b:83:cc:49:54:8d:a6:26:25:68:33:fa:
09:da:4c:e8:5b:2a:b2:0b:8e:04:a2:4c:0a:05:24:
b9:29:95:04:e7:47:74:e9:0d:25:60:d4:0a:05:3c:
48:db:a2:bd:1a:c5:c5:a7:be:d2:ac:27:5f:a7:20:
39:c0:aa:10:11:c7:a8:bc:23:8a:f2:da:68:94:1a:
88:12:2e:6f:e7:8d:fc:36:17:36:1b:e3:9c:2d:f7:
cc:75:c2:77:fd:32:02:cc:89:f6:94:8d:14:bc:fd:
a2:33:c4:21:2f:96:11:ec:0f:56:8a:48:9b:b2:b2:
7c:67:c8:0b:cd:ba:39:d5:eb:56:88:a1:99:bf:2a:
7b:00:82:0c:3e:e3:e6:12:66:2a:d2:aa:e8:e1:f6:
81:69:76:67:54:ea:6d:41:7f:2e:be:f4:20:56:59:
72:26:30:24:0f:ae:ee:72:b7:2e:2c:96:fa:ee:9f:
a2:11:8b:97:9d:30:02:5d:9a:0c:56:05:c0:e5:38:
d4:51:0b:86:8d:54:e3:b4:9e:f8:b7:e0:c5:98:89:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:58:78:BA:8F:FB:6E:7B:18:39:C7:52:C1:20:2D:02:89:AF:05:3A
X509v3 Authority Key Identifier:
keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:e4:88:3f:db:25:e1:7a:64:44:69:61:b4:09:10:a9:fa:51:
4c:dc:9e:01:9a:44:25:a8:fa:fe:fe:2d:a0:30:83:79:56:d7:
b5:27:6f:58:8b:08:ff:24:36:68:0f:5d:88:94:8b:69:76:99:
a9:76:dc:b2:13:03:1e:08:9f:5a:6d:d3:10:b0:99:08:c5:1e:
57:d8:90:62:96:90:d2:c6:49:3b:aa:88:af:12:6a:d6:e0:7a:
9e:23:bb:38:39:ce:a5:bd:6c:70:19:85:e8:04:a8:fa:7c:2f:
dd:7e:1b:4d:39:82:c2:e3:64:5e:cf:1a:43:2b:7f:c3:f4:26:
1a:8d:38:1a:3f:0d:41:01:a5:0d:0d:0a:ee:c8:b7:25:56:9c:
8e:f6:51:17:61:0e:cb:b6:f1:ce:9f:14:67:5e:26:85:39:20:
be:60:1a:1a:d9:a1:ec:1e:93:0d:47:f2:39:aa:eb:c7:8f:47:
2f:1a:5f:29:87:12:5d:ae:bd:8b:b9:67:29:bf:97:69:31:42:
9a:8a:94:6c:6d:e4:23:19:1f:de:33:e8:b5:49:2d:48:ae:db:
b1:56:51:36:cf:3d:1d:9e:6b:d3:37:94:39:e9:8d:4b:8f:ad:
16:e0:58:26:4f:e2:51:80:f0:83:16:e3:29:cd:5e:da:c1:1a:
1a:24:0a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:45 2025 by rpki-client