Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
File: G9yKnBE9vfM_vPHBQblLu31wEno.mft (raw, json)
Hash identifier: t6Mkda79Xpe44lpeg/h792sWLZIYQGWqmh+v0COQeQ8=
Subject key identifier: E6:0B:0D:0E:5E:B5:35:60:D6:95:72:14:D2:3E:C9:BF:46:4A:C5:22
Authority key identifier: 1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
Certificate issuer: /CN=A91C02B3/serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Certificate serial: 058F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
Manifest number: 058B
Signing time: Thu 30 Jan 2025 23:16:01 +0000
Manifest this update: Thu 30 Jan 2025 23:16:01 +0000
Manifest next update: Thu 06 Feb 2025 23:16:01 +0000
Files and hashes: 1: G9yKnBE9vfM_vPHBQblLu31wEno.crl (hash: n//4Q/5mxXGzcKCkWU26Q0t0Xrz13HaaQ9ImgA8n0E4=)
2: 7F17B380BED411EBA325CC76C4F9AE02.roa (hash: 8xPWjkoE+zFud+TFxgnEq1UzwqrmQYh6gT2DXl5XDNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1423 (0x58f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C02B3/serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Validity
Not Before: Jan 30 23:16:01 2025 GMT
Not After : Feb 6 23:16:01 2025 GMT
Subject: CN=679c0831-bab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:66:f9:69:72:dd:98:c7:cd:16:b7:8f:d6:
ad:84:77:a9:fd:ed:70:df:0b:f3:e2:29:86:f4:7e:
57:6e:6d:89:4c:1b:a6:c7:3b:65:4f:3b:4c:e3:37:
07:9d:41:5c:90:9e:f8:d7:a0:6e:9b:2d:26:54:97:
ad:22:73:88:94:37:d1:0f:2a:e0:86:ce:90:f1:83:
1a:ea:36:f0:97:bf:4b:5d:85:9f:71:9d:81:51:6e:
f7:fb:88:11:a1:ee:b3:56:20:db:14:b2:b5:6d:02:
25:30:4c:37:4a:2e:c5:5d:e6:37:a0:9b:ae:e6:92:
b2:2e:9d:b5:e1:57:58:9a:38:5b:f1:2e:80:dc:56:
72:f3:1f:fc:8e:b6:a4:e5:62:92:d7:c5:c1:d4:82:
ca:b1:5c:bf:c4:77:ce:e6:46:c1:c2:d5:bb:04:0d:
85:3c:7a:dc:1b:96:00:29:78:7d:3e:8e:eb:24:f9:
0c:f0:c8:80:d9:54:cd:0d:57:eb:4a:97:37:c6:8e:
39:1b:75:3a:65:2b:da:2a:2d:35:52:05:56:0c:cd:
75:5c:d3:81:eb:20:b6:93:3e:e2:5c:e8:45:52:49:
95:48:81:45:63:82:8a:ce:d7:ba:dc:81:85:5b:27:
50:d5:4a:7c:14:c0:7e:e1:fd:72:7c:ba:cb:ca:63:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0B:0D:0E:5E:B5:35:60:D6:95:72:14:D2:3E:C9:BF:46:4A:C5:22
X509v3 Authority Key Identifier:
keyid:1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0c:df:e6:43:fd:9c:0a:59:e6:64:4f:9f:3e:67:04:4e:ff:
4d:f1:ce:4d:14:de:f4:8b:d3:af:7a:46:46:2d:40:87:42:ee:
9e:c8:25:e6:a3:65:80:0d:87:6a:84:d0:21:28:c4:05:bd:79:
7e:5b:55:9d:90:7b:c1:4a:84:91:26:e7:76:e0:8d:11:a5:51:
d0:ff:b1:31:cf:5a:37:a4:93:d4:0b:22:07:08:eb:29:6b:88:
44:2b:91:01:53:fa:09:0c:e9:19:6f:8b:f7:a3:71:28:e4:29:
a7:e3:86:43:03:fa:50:8f:90:9c:0a:72:9a:73:6b:3b:ee:55:
61:e4:6d:06:c3:b1:fc:71:a4:f1:d9:be:39:3d:d9:ed:26:0b:
27:00:a3:ee:0a:83:36:1f:6e:58:31:d1:f2:b6:4f:0f:e8:dd:
15:aa:0c:5e:84:c4:c2:34:ac:4b:1b:b2:08:ee:88:78:0d:dc:
1e:d7:c4:33:70:18:ef:04:d4:a1:c2:da:a5:ca:10:ec:db:7f:
dd:de:71:5b:27:bc:44:b5:33:61:74:c7:6d:23:87:a4:8e:f8:
a0:18:35:5c:db:5c:a1:b5:b3:55:16:9e:ea:9a:f8:ba:ee:43:
84:f4:aa:e3:4b:c7:c5:1e:0d:85:8c:ad:e2:82:13:90:a6:20:
45:13:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:51 2025 by rpki-client