Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft
File: I1WemnFX565_YExCiDcpLeAzCaA.mft (raw, json)
Hash identifier: bJiLOxXPu7LDlJ0JC5KNwJ/h/umCYHxX9/rgOcFRp3E=
Subject key identifier: 48:F5:A0:A3:72:F0:EA:D6:DB:62:FE:3D:DC:9F:D3:A8:A2:49:C3:0D
Authority key identifier: 23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0
Certificate issuer: /CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft
Manifest number: 025A
Signing time: Fri 31 Jan 2025 01:50:30 +0000
Manifest this update: Fri 31 Jan 2025 01:50:30 +0000
Manifest next update: Fri 07 Feb 2025 01:50:30 +0000
Files and hashes: 1: I1WemnFX565_YExCiDcpLeAzCaA.crl (hash: hreBtQwQmHJNogi8ZGE44X03S/WXSK/r85OA2j8p5UI=)
2: CFF0FDEC025911EDA0A85765C4F9AE02.roa (hash: fWJ7cRsTCAW0U+0r1+X1xY7gsboVcmoNdt+pkuhh4IE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0
Validity
Not Before: Jan 31 01:50:30 2025 GMT
Not After : Feb 7 01:50:30 2025 GMT
Subject: CN=679c2c66-d54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:47:80:fc:61:fa:eb:56:f2:10:51:41:52:
87:0a:19:68:57:87:94:90:5b:5d:b7:79:20:25:6f:
21:14:9b:29:dd:8f:01:a0:86:00:13:78:07:a0:1a:
ef:b7:c0:26:99:be:3a:39:62:69:42:9d:48:7a:e1:
0e:99:43:74:7a:9c:6b:e0:6b:e3:a3:3d:e8:4c:02:
c3:f8:97:ea:6c:cc:92:cb:41:7b:65:b3:00:f3:df:
72:21:05:61:ae:b4:8e:51:6e:d4:b6:9e:72:af:c6:
3f:70:8d:0c:be:a8:db:cc:7e:15:43:26:70:98:4d:
c8:b1:af:1d:22:04:4c:de:99:b8:84:6d:59:5c:ab:
d2:0d:b3:e7:c2:bc:de:25:4a:31:f2:1c:a7:58:94:
87:d4:3d:25:7b:39:61:43:af:01:76:1e:e8:35:b3:
35:aa:f9:e1:bf:79:ee:9d:51:76:1b:25:94:3d:58:
3c:8f:e6:86:d7:f1:ec:4e:5d:5d:d6:26:0d:47:7b:
7f:cf:ed:ba:89:e7:63:e1:86:6b:64:53:f7:a8:d5:
5f:19:1d:cb:60:98:e7:a1:78:9f:97:51:78:aa:47:
34:5b:01:3f:89:3d:59:9b:a8:ea:65:8b:f7:f3:7e:
ce:2d:25:81:df:2f:eb:20:1a:1c:d8:89:fe:f0:1b:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F5:A0:A3:72:F0:EA:D6:DB:62:FE:3D:DC:9F:D3:A8:A2:49:C3:0D
X509v3 Authority Key Identifier:
keyid:23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f2:b4:99:59:26:6b:cb:5f:a0:25:b8:02:fc:86:6d:86:1a:
99:21:f4:12:ee:e9:24:57:1e:01:dc:af:6b:38:50:39:55:06:
0a:13:dd:33:f4:a9:89:3b:e3:26:77:64:00:b6:8e:44:4e:3c:
51:93:a2:55:09:61:93:6f:f6:11:7f:86:83:7f:8e:df:af:ec:
e4:c8:9f:66:4d:2e:12:9a:ba:d1:f3:5d:ec:30:45:28:19:ab:
99:b9:d6:36:b4:fd:84:39:72:a3:b5:e3:b2:ef:02:ca:f9:0e:
e5:12:1d:72:a5:63:e8:4a:b0:6b:45:47:dd:a4:db:eb:07:9f:
10:d4:e6:af:b4:8c:33:d1:24:3b:fd:28:c4:31:70:d8:09:7b:
69:1a:a6:31:2f:eb:50:78:8c:8b:1d:33:f1:fd:97:a2:15:60:
61:a1:40:4e:f5:b2:82:ac:fd:95:60:50:d5:ae:1b:7b:7e:e0:
4b:77:9e:c7:7d:0f:d8:86:cc:db:5b:55:1e:3c:1f:44:c0:db:
ce:4b:11:da:e2:4b:07:e2:37:12:83:0c:23:c6:ac:63:95:99:
51:77:d7:2c:9c:68:f8:b8:cb:44:22:28:e0:de:6c:09:4f:81:
69:94:a7:78:47:da:02:9f:c5:e1:4a:52:a6:fa:1c:71:4d:1b:
99:d2:50:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:29 2025 by rpki-client