Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json)
Hash identifier: 0G5JrDww5iRiBt5COCcqNqqtu56wTpmvydrfzPbsPPc=
Subject key identifier: 78:ED:34:41:7C:86:F5:4B:11:C9:6E:33:D5:2A:23:29:D9:32:7E:06
Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Certificate serial: 05AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
Manifest number: 05A2
Signing time: Thu 30 Jan 2025 23:10:02 +0000
Manifest this update: Thu 30 Jan 2025 23:10:02 +0000
Manifest next update: Thu 06 Feb 2025 23:10:02 +0000
Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: cbCUCjrwcBNZ01lkW8Lf+UYYTdp2e1ipPgRRc8/UrbU=)
2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: OWf8PDQ8WMymcLSHEfIQAksI7XQ+plK8c+CWI6STWXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1450 (0x5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Validity
Not Before: Jan 30 23:10:02 2025 GMT
Not After : Feb 6 23:10:02 2025 GMT
Subject: CN=679c06ca-2d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:17:5c:c3:21:83:83:d3:47:f4:63:78:fc:
47:ff:84:54:e2:ff:2b:69:6a:cb:36:25:be:67:a3:
2c:aa:d0:9b:7e:f5:c3:c2:8a:8c:a7:cb:fa:76:4f:
ee:2e:b1:e6:70:e0:bb:9d:33:9e:26:4c:c9:80:8a:
75:37:c3:94:55:f4:db:11:c7:7b:6e:9b:20:1e:86:
7b:98:f6:a6:ce:25:37:4f:9e:76:83:7d:81:cc:98:
a2:68:d4:80:58:c9:91:c0:e4:b9:3e:ca:ed:ec:93:
90:7c:e5:89:ba:85:fb:46:e0:07:1b:2a:df:a4:19:
52:e3:e1:13:42:bc:6b:89:d1:58:e9:e9:e7:e7:2c:
75:16:72:5c:58:96:69:5a:65:a0:b9:91:2e:08:90:
59:f7:b6:a4:ab:8c:b7:fa:1c:13:e0:7b:bf:ed:7c:
15:c9:b6:ff:59:12:45:91:92:fd:b1:28:8f:30:ab:
f3:7c:41:20:9d:fe:ec:49:25:2d:a1:1f:b4:61:b3:
a5:ac:3f:f0:4b:99:cf:fc:6d:cf:34:34:df:56:ff:
21:01:3f:3f:e3:9f:70:c4:f0:e0:47:70:7d:d5:f7:
00:0d:37:1a:5a:30:60:df:99:c7:3e:bd:21:84:2a:
cd:8b:e2:e7:68:91:83:92:a2:c6:f6:c4:5b:d5:ff:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:ED:34:41:7C:86:F5:4B:11:C9:6E:33:D5:2A:23:29:D9:32:7E:06
X509v3 Authority Key Identifier:
keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:8b:d6:4f:d4:77:c3:33:14:c0:97:9a:00:6c:a8:0f:9a:cd:
ca:dd:2c:aa:43:51:34:81:a3:e4:c1:01:dc:ce:dd:b1:a8:b6:
75:b5:cb:99:c9:09:c7:02:c0:32:72:7f:18:2d:19:5a:8f:c2:
9a:20:c9:9e:5b:7e:97:f9:72:20:0a:44:50:b6:4a:05:8b:d3:
bc:77:c9:3b:b2:cb:46:0c:1c:53:68:e7:9f:cf:95:6f:56:8c:
1f:4a:e1:8c:22:99:a8:9d:ba:30:2e:9d:e1:e2:43:84:27:a6:
16:5d:d2:0c:b6:5c:44:68:fc:c5:e3:c8:f8:23:aa:4b:9c:7b:
00:b4:24:87:96:e2:f9:83:e4:29:47:a6:e7:87:4c:fa:81:2e:
c1:0f:63:02:06:8c:ef:15:92:39:00:42:76:c5:42:f0:ee:40:
3f:5e:68:fd:5c:6c:f0:6c:fa:39:fc:0c:7d:b9:ac:dd:81:df:
62:d9:86:12:41:65:c8:56:50:85:4d:26:48:1f:67:00:bc:68:
81:53:c3:6c:52:a8:01:c0:ff:28:0c:fd:a2:2d:03:2f:2b:97:
4b:d8:1d:54:64:1f:9c:bc:7d:b4:8e:d2:08:a3:44:49:d0:1b:
3d:83:c5:dd:08:cd:64:5e:62:ca:ae:12:c0:d4:87:e9:b6:b3:
ac:2c:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:23 2025 by rpki-client