Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
File: FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json)
Hash identifier: F6MSzKvgESbzHIyZzZLuKebEHBUrcXeLnmYovS0JaBk=
Subject key identifier: 7B:62:5B:F6:BC:B4:CC:56:45:A8:82:A7:53:CD:D0:10:CC:44:9B:1E
Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
Certificate issuer: /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Certificate serial: 344A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
Manifest number: 3448
Signing time: Fri 31 Jan 2025 15:10:21 +0000
Manifest this update: Fri 31 Jan 2025 15:10:20 +0000
Manifest next update: Fri 07 Feb 2025 15:10:20 +0000
Files and hashes: 1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: 3BX00Py6nI6VSOZ4TVJhtxmFJwX/g4YTNF5ek/B/8/g=)
2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: QO9VCVg4JBZYD4qSn+hc8302M9oNt2/POhltCbyhtbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13386 (0x344a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Validity
Not Before: Jan 31 15:10:20 2025 GMT
Not After : Feb 7 15:10:20 2025 GMT
Subject: CN=679ce7dd-6ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:98:ec:fd:3e:a1:f6:13:1e:af:70:95:7a:
36:87:18:78:f2:84:74:de:c7:89:dd:9e:bc:9c:2c:
16:e7:54:8d:66:d5:fa:0f:ab:91:97:1a:7b:5f:63:
8b:6f:18:6e:50:ca:ad:4f:ff:4e:4e:78:48:d8:09:
12:59:88:44:1a:d2:74:57:01:ee:db:a3:2a:28:0a:
4b:12:0a:ef:dc:bf:bf:0e:a4:f9:be:df:77:cb:38:
21:73:68:27:c7:ea:73:2e:d6:b5:5b:2d:21:9c:44:
88:17:91:55:31:b7:a4:b4:ef:a7:57:f5:11:99:a9:
3c:cb:63:99:91:5b:b4:03:ae:6f:16:4f:ec:3a:3a:
d3:ae:76:33:d6:63:13:8d:6d:a4:8f:64:fb:81:f9:
59:93:0f:07:0b:ae:71:72:bf:f4:09:3c:eb:15:dc:
22:dd:29:62:81:80:01:ee:09:bd:95:d7:f8:61:99:
73:a8:56:e7:6f:ed:bd:7c:2f:f0:87:fc:6e:f5:99:
ca:2c:19:ea:f8:f2:f1:b1:58:e6:fc:aa:d9:d0:de:
c4:1f:55:a2:6c:24:bb:a0:f4:f3:03:fe:79:7f:88:
2b:8e:e2:e4:df:35:fd:a2:ea:a5:d2:50:df:82:69:
b2:28:f2:42:5f:eb:55:46:2f:f2:52:b2:4f:98:0f:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:5B:F6:BC:B4:CC:56:45:A8:82:A7:53:CD:D0:10:CC:44:9B:1E
X509v3 Authority Key Identifier:
keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:08:a6:f8:3a:01:32:83:d0:d3:1c:a0:13:36:42:0a:f0:58:
b2:ad:e1:b7:1c:71:a5:d2:0b:35:2e:a7:c6:03:13:5b:4b:d8:
b4:d1:c1:f1:32:03:7d:62:a1:db:73:70:bd:e2:91:c3:c5:c9:
14:43:78:08:3c:19:cf:8a:11:11:1b:02:4b:86:25:b9:4e:3a:
de:66:e2:b2:ce:a5:4b:28:c7:6c:dc:58:2e:10:33:b9:7f:51:
17:dc:10:7b:31:57:da:a2:a6:f5:5e:48:48:17:91:3f:16:c4:
34:22:fc:d3:1b:91:8b:e4:74:17:02:f6:db:c2:f9:25:9f:de:
2b:7d:e1:2b:a4:08:d1:6e:ed:81:40:47:3c:d4:8f:3e:f2:78:
59:71:82:4a:fb:20:17:fb:89:dd:18:e4:44:bb:36:1d:41:e4:
76:2e:f3:b1:88:f9:64:24:cb:76:49:74:bf:d0:8f:1c:5b:1c:
91:87:26:58:a3:00:27:ae:be:62:83:a0:29:37:c9:d5:9c:4c:
6a:1b:ba:66:d9:bd:88:99:74:7c:7b:72:34:f6:c0:da:0c:d6:
02:9a:54:8e:d5:85:67:b3:57:aa:15:d1:73:46:cf:53:dc:15:
d5:b1:ef:b9:29:aa:01:03:a4:f7:52:ff:33:87:bb:d7:1b:df:
cd:80:07:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:09 2025 by rpki-client