Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json)
Hash identifier: c7N7dAl9zRmlpC3uYETp61XPnYiAe93UVqPB9FdlpJQ=
Subject key identifier: 0C:A8:65:3D:12:9B:68:49:F9:DE:18:41:72:3A:3D:CB:60:E8:86:78
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
Manifest number: A6
Signing time: Fri 31 Jan 2025 05:17:24 +0000
Manifest this update: Fri 31 Jan 2025 05:17:23 +0000
Manifest next update: Fri 07 Feb 2025 05:17:23 +0000
Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: KwIqcWTMwGlX8mZloNVuVGXve9M/ku+SUX+QQc4acIc=)
2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: 3MMDEbkkdNFM/djNh0ORf8UHeAKMwjP4dT3GZUmqZZQ=)
3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: 7eg8s3nshujJWlMFILJG4nxViOoj4GxAMrDMLj0daAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Validity
Not Before: Jan 31 05:17:23 2025 GMT
Not After : Feb 7 05:17:23 2025 GMT
Subject: CN=679c5ce4-610a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:b4:9c:f0:8c:e6:e1:e2:1a:08:15:c1:38:
83:a4:4e:66:35:dc:ee:8c:bc:77:13:8d:05:43:68:
c4:85:33:71:5f:1f:f1:0f:37:0b:06:cf:e0:6b:83:
26:6c:5e:33:d6:7a:0d:4f:e9:38:7a:99:fc:4f:94:
53:31:6c:46:aa:94:b8:fc:8e:3e:93:4a:51:d9:cc:
71:10:13:16:6e:80:66:28:1a:3e:85:3b:52:e6:8d:
c2:d8:a2:f6:38:d1:21:a6:e7:2b:eb:4e:ad:19:81:
0e:26:40:fc:3c:a8:28:b4:46:05:a1:bc:9a:65:76:
91:16:7a:dc:95:11:c8:89:4d:9f:09:b4:a1:bd:62:
e6:5e:50:7b:b3:ef:f5:c6:b7:bf:e1:c4:85:f1:49:
05:3f:cb:23:34:f5:3f:ef:aa:7a:06:5d:77:2f:cf:
ea:4b:da:2b:10:a8:cc:33:11:03:49:1b:1b:7d:c7:
89:47:b2:03:2f:e6:14:ab:1f:a5:b6:bc:46:cb:0e:
c0:de:4b:14:61:5a:39:83:f2:78:1e:6d:9d:87:24:
62:13:9a:e7:a3:ca:08:68:17:53:6b:ad:9e:5f:e2:
1d:fd:df:a4:15:10:41:8d:4e:2a:44:ef:15:c4:8e:
3f:13:9d:7c:49:6b:d5:e5:d7:c3:b3:c0:77:4e:27:
a4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:65:3D:12:9B:68:49:F9:DE:18:41:72:3A:3D:CB:60:E8:86:78
X509v3 Authority Key Identifier:
keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:5e:3f:cd:88:b0:1c:48:f4:b6:69:e9:43:7d:0a:9f:36:2f:
21:c4:9a:4a:cd:ae:ca:b8:28:76:b2:41:24:7b:3a:f2:9c:0e:
f9:5b:d6:7a:e6:de:bb:4a:04:33:9c:b0:ac:63:ae:4a:62:da:
01:98:3f:22:02:4d:70:6d:4e:73:d6:73:0c:cf:b1:f6:6d:02:
a9:80:50:ee:8b:6c:55:f2:6b:53:ad:52:fa:10:69:f9:78:b1:
42:0b:4e:2f:6e:f5:ae:83:ea:24:9a:cb:ba:4f:aa:b1:d3:51:
93:22:88:2c:0d:f0:ad:a1:2f:b8:6c:47:98:48:86:04:79:74:
ae:5e:c8:7e:5f:d8:73:49:31:d5:bc:4d:2d:93:bc:4a:28:f3:
d9:1e:22:e9:04:b0:22:5f:48:97:0d:d4:3b:11:51:b2:c6:35:
01:cb:0e:28:5b:1a:a5:10:43:15:3f:a0:17:ff:71:7f:2c:2d:
be:9b:a8:ce:96:16:2e:0f:a4:b0:eb:f1:f1:d6:84:d3:71:a7:
bf:3d:cd:36:26:9c:8e:ce:0c:bd:01:10:13:20:25:cb:93:ce:
b3:a2:b7:54:b8:7a:cf:e4:8c:db:73:39:80:e4:e8:22:7e:26:
bf:e8:34:2e:4c:a3:dc:11:25:48:c8:da:ca:6e:cb:f0:02:9b:
7a:91:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:02:17 2025 by rpki-client