Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft
File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json)
Hash identifier: XEp5PwxYMxZ8efo1i5HfMG6dYw2t5XtYwZZ58S2CIVs=
Subject key identifier: 37:35:A7:46:14:50:DD:0B:B2:16:3D:28:44:B7:3A:06:D6:0F:FD:78
Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5
Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5
Certificate serial: 0EFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft
Manifest number: 0EF5
Signing time: Fri 31 Jan 2025 17:37:19 +0000
Manifest this update: Fri 31 Jan 2025 17:37:19 +0000
Manifest next update: Fri 07 Feb 2025 17:37:19 +0000
Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: GGVTb+Bor75RLZ3MOcvSb5GF/wLWppuoDtg06zSK9W0=)
2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: MfoY7jUmOisar1psO6c2ywlJIDw6cqEA61WVzaSNP5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3835 (0xefb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5
Validity
Not Before: Jan 31 17:37:19 2025 GMT
Not After : Feb 7 17:37:19 2025 GMT
Subject: CN=679d0a4f-faab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:1a:48:b7:d7:8b:72:cb:bd:b5:8d:ab:5b:
2b:9d:b1:4d:6d:ec:52:71:7a:a0:cf:ef:e6:b7:f7:
9c:2d:68:7b:9b:ef:50:57:a3:d8:9c:cd:ad:11:3d:
b6:3c:f5:2c:cd:fd:07:35:ca:6b:de:15:30:ce:f5:
be:ec:a6:ec:25:22:c6:b5:61:60:e4:95:6b:9d:70:
53:18:a0:2a:b5:bc:98:3f:35:db:70:d1:52:f1:d7:
ee:f8:d2:e2:7d:ae:a2:1b:81:86:14:12:bd:4f:e1:
c0:aa:4d:cf:d6:bb:c9:ed:aa:0c:5e:85:ff:f2:5a:
a5:4d:35:85:e5:b1:2a:a0:78:77:69:43:c4:57:05:
36:c1:ac:7d:d7:6b:6f:3a:17:d1:75:a2:d9:d0:59:
7a:1e:3b:f5:f7:1b:e7:5c:c5:d7:9b:3e:99:2e:56:
6b:5c:9f:12:86:ad:21:48:01:57:72:39:ce:5c:5d:
ef:3e:4c:71:77:83:ba:05:06:02:63:71:d9:c8:09:
11:23:80:f0:6d:e5:25:3d:0d:07:71:96:f8:f6:59:
b1:29:e2:41:90:e5:c7:fd:c3:44:0c:5e:21:29:07:
86:38:b6:ec:42:4e:b5:6d:54:db:bd:7f:b7:8e:a1:
1a:49:3b:48:bf:ed:78:74:29:de:e9:09:39:db:d9:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:35:A7:46:14:50:DD:0B:B2:16:3D:28:44:B7:3A:06:D6:0F:FD:78
X509v3 Authority Key Identifier:
keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:e3:fa:0c:75:38:4b:7e:51:b0:fd:bb:cf:01:1b:f1:1d:fe:
94:5c:15:7f:74:0a:ad:b0:00:7d:42:d5:19:7d:ee:25:6b:46:
c7:8c:c6:47:1f:78:5f:aa:c8:67:3d:9e:9e:c2:ef:1c:ce:59:
e0:ea:5a:1d:49:bf:2f:6d:c8:64:60:a4:ad:76:ad:b1:d6:4b:
19:5d:b8:64:c8:af:b0:b9:6a:93:99:63:44:d4:50:36:93:f7:
cd:48:b6:2b:f8:99:60:80:f3:f4:37:1c:99:48:7b:ce:cc:d6:
02:56:d7:b9:51:e5:a6:99:a4:cc:50:8b:54:bd:06:6e:81:f8:
74:98:f9:bf:8e:bc:09:cb:a6:45:0c:ed:76:8a:77:ff:e6:c4:
79:26:92:3d:12:0d:41:8e:7c:16:ea:a0:15:33:98:3c:34:13:
64:aa:7c:eb:39:be:9e:a2:23:a2:1a:ac:71:6b:bc:2d:0c:dc:
f6:13:6a:95:3c:71:ce:92:95:94:77:d5:3b:5a:02:45:5f:10:
03:f1:bb:9f:35:73:14:56:7b:fb:f6:23:c1:7d:e5:45:a5:c6:
ad:7e:8a:ca:bd:6a:67:0a:60:96:99:ba:81:77:41:41:e1:62:
0a:48:50:eb:f8:c1:a9:dc:18:65:80:0b:cf:55:c4:71:55:fd:
1a:37:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:39 2025 by rpki-client