Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File: 0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier: 4SouXndFwqWFLJZDLdYZeD07lO0yKhfNH75EU05A5aw=
Subject key identifier: 9C:4B:AF:50:20:D3:5A:04:A8:78:D5:F0:92:16:EB:4F:90:58:92:0F
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer: /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number: F1
Signing time: Fri 31 Jan 2025 04:25:08 +0000
Manifest this update: Fri 31 Jan 2025 04:25:08 +0000
Manifest next update: Fri 07 Feb 2025 04:25:08 +0000
Files and hashes: 1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: P8ql5Nbz5kNWWWka9UweOaOzdOofqkqZ6I9nXCKy500=)
2: EBF0BAF86EF711EE821C4538C4F9AE02.roa (hash: SRfPwkdW8J3KzSSInHGn0eT98LHGl310oQZHm49vXRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Validity
Not Before: Jan 31 04:25:08 2025 GMT
Not After : Feb 7 04:25:08 2025 GMT
Subject: CN=679c50a4-a5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:4a:ec:3c:51:a8:9b:c1:bf:e2:eb:17:e0:
14:ce:c5:5a:39:67:8f:93:c3:72:6b:ab:e4:e6:83:
e5:df:1b:07:17:54:94:f6:1f:f8:d4:f1:61:b1:22:
99:80:54:68:da:d1:0a:07:82:06:70:9f:4b:6b:30:
be:45:18:fe:aa:40:8b:88:06:5a:7a:fa:0c:b5:1b:
35:94:0d:60:5c:b3:00:2f:57:fd:7e:b5:25:f5:1f:
77:f7:af:ef:9f:05:c3:56:13:40:b9:c2:4f:13:a6:
6f:99:16:ce:c9:57:39:ac:14:a7:b7:f6:f9:99:da:
13:9a:c1:64:46:15:a1:24:f2:0a:76:4e:db:d1:84:
62:b4:c1:04:12:eb:3b:87:e8:2d:8f:b7:79:d5:f4:
b7:52:7d:2d:7a:0c:d3:55:c9:20:ae:a0:59:f3:17:
48:94:9d:07:ca:29:f4:14:e7:6d:63:0a:5d:72:f5:
92:ef:3b:55:ad:5d:9d:f4:87:4c:28:36:cd:bb:3c:
5b:1e:6a:b3:60:e8:a0:c9:10:34:33:8b:71:fa:0d:
63:9d:4c:44:06:cc:59:4b:b2:4f:ad:78:59:62:4e:
d0:12:a4:65:c2:97:3e:2b:66:31:4d:52:78:f0:d0:
e4:6b:b1:7d:f5:7e:44:02:3e:5b:ec:8b:aa:ec:85:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4B:AF:50:20:D3:5A:04:A8:78:D5:F0:92:16:EB:4F:90:58:92:0F
X509v3 Authority Key Identifier:
keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:05:d5:69:d6:13:16:c1:aa:6b:a9:84:ab:f4:7d:e7:82:de:
27:4d:ac:ce:b9:7d:bf:41:03:79:90:9e:fc:1e:60:6b:ef:92:
bb:36:20:15:3a:08:c2:a1:22:72:88:20:b0:68:d9:7d:60:77:
40:90:5d:29:21:3d:c8:5c:c9:39:e4:26:d8:1d:6f:04:52:3a:
5c:68:0e:c8:ab:58:ca:46:e0:7f:ac:65:b9:7e:0f:ff:fc:a9:
a3:d8:7c:91:b0:5f:7d:42:ad:17:6d:1e:87:f4:00:5a:9e:a0:
75:6c:fe:5a:6d:ec:92:27:5a:50:e7:0e:a9:19:dd:8d:08:a4:
f6:5b:7c:d2:b6:6d:e9:3d:d6:f4:58:a7:0b:81:8a:ae:d6:f9:
34:06:bd:04:51:64:b6:b4:19:e9:a0:da:63:7f:9e:79:df:ea:
d5:5d:f5:e3:64:b3:84:96:91:00:8e:4d:f5:95:da:f9:5f:a3:
50:df:62:f4:32:cc:97:7d:43:13:fa:09:62:a0:b4:93:61:57:
6a:81:72:51:9e:e8:60:84:01:5b:61:4d:75:94:ef:e2:56:35:
c4:ae:0a:04:cd:cf:de:26:dd:00:41:41:42:c7:18:5d:f8:52:
c6:2b:e0:4c:22:46:78:4b:54:cb:d8:69:fb:b0:73:4d:70:4f:
47:21:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:47 2025 by rpki-client