Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json)
Hash identifier: O++zHi9WowULck7DJuFWFzqIT+RY4z8XJiS/yl2y0+w=
Subject key identifier: 2C:16:2E:54:63:7E:ED:B0:80:5D:88:B8:77:02:9D:8E:C4:C8:67:B1
Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA
Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
Certificate serial: 045D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
Manifest number: 0459
Signing time: Fri 31 Jan 2025 00:14:01 +0000
Manifest this update: Fri 31 Jan 2025 00:14:01 +0000
Manifest next update: Fri 07 Feb 2025 00:14:01 +0000
Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: v1HnQl+m+kGQX9l8bW9sjBw+exgWuDGgku5HGj9JtwM=)
2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: zdwLUFrK62NtcQ/mdbUvAzqM7ityQdkX7IQIHBe+tG4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
Validity
Not Before: Jan 31 00:14:01 2025 GMT
Not After : Feb 7 00:14:01 2025 GMT
Subject: CN=679c15c9-1938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:61:07:62:76:b6:58:f6:0f:ab:84:70:4d:
8f:94:be:f1:c0:ee:2b:0a:ce:6b:7a:1d:ed:0b:89:
0a:6e:9b:b8:a7:37:88:19:1f:00:02:cd:f7:6a:2b:
58:40:92:5c:c1:99:d9:b8:13:30:37:04:32:ac:f5:
26:5a:8c:46:e3:4d:7b:56:13:01:ae:1c:dc:6f:4c:
cd:ab:b8:da:d6:59:7f:60:cb:10:67:1b:ec:25:36:
31:90:3f:7e:78:cc:03:6f:c8:69:2f:ff:a6:77:8d:
d8:9b:ed:26:75:cf:1f:76:58:47:e7:41:0e:6f:42:
5a:0e:ba:7b:fa:f4:bf:32:0c:38:3d:02:c6:e5:40:
b7:89:a5:14:7d:14:10:67:eb:5a:2f:e8:ea:c8:ea:
f1:6b:a5:02:25:c7:10:53:30:67:03:51:85:b6:31:
bd:f3:2d:ea:53:60:67:3d:e0:02:ca:c1:88:b9:77:
21:ac:9b:69:6a:63:af:3c:48:b1:da:52:fc:6a:9f:
d9:6e:ee:54:68:9d:04:c6:39:b8:3c:02:8a:e6:ac:
89:b0:36:d5:19:56:b9:c9:da:b0:9b:c2:83:ab:3b:
e8:bf:53:31:79:08:5f:a3:02:41:3d:f1:55:f5:7a:
77:3a:63:b8:15:aa:c2:7b:45:ec:ec:e6:93:d8:45:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:16:2E:54:63:7E:ED:B0:80:5D:88:B8:77:02:9D:8E:C4:C8:67:B1
X509v3 Authority Key Identifier:
keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:4b:09:30:06:6e:f7:77:c9:ed:f5:81:ea:1b:b2:d7:a2:d4:
7b:f6:c4:9a:64:49:3c:98:4e:c1:dc:43:8b:67:3c:4a:bc:46:
fe:7a:cd:c5:9b:a8:75:6b:ed:7c:63:81:27:c8:ba:42:0a:bc:
16:b6:27:52:4a:9a:dd:49:57:3d:20:0e:df:da:76:0e:18:3e:
f0:61:26:cb:91:0e:c5:5e:c3:23:d3:8d:15:85:ea:da:e5:2f:
8c:b5:be:28:21:3f:3c:75:92:02:45:10:0c:34:01:3d:ea:f7:
11:d3:c6:bb:39:5b:a1:46:f3:e5:96:30:0f:03:f6:c6:0c:6d:
ad:ed:29:30:8c:dd:d6:04:1f:2a:cf:cc:f9:02:30:8e:a0:22:
72:1a:09:b4:a0:48:e3:92:5a:1f:92:1a:83:e7:de:25:68:5c:
0a:b0:4d:b9:8b:d5:54:58:36:7c:37:a9:75:21:a5:91:42:d2:
74:bc:96:74:ec:e1:d1:20:74:f7:29:25:ce:94:da:4c:33:62:
e2:81:eb:d1:e7:10:9c:c0:79:de:48:03:ce:8e:48:2a:48:76:
c3:a2:bf:47:7b:99:6d:b0:d1:ca:58:47:da:55:98:2b:0e:5b:
ed:f6:bb:6b:d6:0a:c7:d9:69:f3:de:57:e0:a2:3f:4c:d8:83:
f7:97:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:26 2025 by rpki-client