Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json)
Hash identifier: VbpTEcsAy6B/glWtueJdP7FF/ukQZxxMMeS7qtsGRl8=
Subject key identifier: 9A:74:BB:67:E8:50:EF:90:60:2F:17:BE:EB:A2:30:BD:91:2E:AE:55
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
Manifest number: 021E
Signing time: Fri 31 Jan 2025 02:08:53 +0000
Manifest this update: Fri 31 Jan 2025 02:08:52 +0000
Manifest next update: Fri 07 Feb 2025 02:08:52 +0000
Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: Qau6lBkraNZ167wBwYWOY0swDJXcfvZxAOicxWZs+JY=)
2: 58C8DF8E1D3711ED9E2D8867C4F9AE02.roa (hash: FSYr699megaB2rJpIagzzWfYpNq6JBYAS+eCRbgyO2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Validity
Not Before: Jan 31 02:08:52 2025 GMT
Not After : Feb 7 02:08:52 2025 GMT
Subject: CN=679c30b4-8406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:2a:5b:f7:dd:2d:2d:7e:9b:1e:fe:c4:9d:
a7:a4:f0:6d:6e:1b:6c:c4:37:3f:66:9d:e7:04:83:
4b:a9:eb:d3:e4:2a:83:09:2f:2e:b4:f1:e5:9c:ed:
c4:ae:24:84:f9:25:04:1a:cb:18:de:89:39:09:b2:
64:2b:2a:2a:e9:1a:f3:8c:53:6b:51:9d:da:03:97:
7e:66:f4:fd:b1:f8:62:e5:42:27:75:65:fd:53:46:
a4:e6:51:75:fe:15:ef:53:97:81:c8:35:f6:d8:9a:
3a:d4:fe:f4:8a:4f:7c:dd:73:38:fd:f3:66:e8:81:
7e:26:91:0e:46:fc:a8:65:de:5c:19:8d:a8:73:69:
ed:fb:a0:57:68:2e:f5:98:8b:59:65:09:55:a9:de:
44:ab:8d:7c:85:30:9b:c7:d5:6e:32:f3:f2:2b:30:
12:27:c4:fd:15:57:0a:48:73:f9:22:27:f0:89:55:
0c:b3:35:13:ca:da:16:69:be:fb:c0:79:21:e1:24:
e3:5d:5f:e9:6e:2c:27:69:86:7e:1d:b2:20:32:a1:
0b:e5:a3:45:16:9f:5c:bb:e9:9e:03:04:a6:7f:3b:
39:96:cf:91:ad:dd:90:c0:1e:2f:8a:9e:33:f2:56:
3f:ff:dc:e0:bf:39:b0:c2:31:8f:71:12:b2:75:13:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:BB:67:E8:50:EF:90:60:2F:17:BE:EB:A2:30:BD:91:2E:AE:55
X509v3 Authority Key Identifier:
keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:da:c7:59:bc:40:42:14:07:34:ac:62:83:b3:3e:84:c1:08:
d8:40:49:11:de:8b:73:6c:5c:fa:0f:59:2f:09:2d:f4:88:26:
92:92:08:70:19:af:42:9e:60:b3:97:07:43:48:5e:e0:8c:dc:
1a:cf:34:03:1d:1c:67:ff:44:70:f5:ee:8b:36:3f:47:6c:b3:
83:92:af:b5:fb:8f:b9:1f:c7:0f:c4:dd:b9:16:c6:7c:81:7d:
25:b9:fe:e2:9e:2d:0f:be:11:92:22:3f:d9:24:fb:17:2d:5b:
18:16:b1:44:8f:10:ce:7e:e5:30:76:65:a7:07:31:18:11:77:
7e:48:9d:9f:62:aa:bb:fd:95:3f:06:c6:21:44:da:ee:55:a1:
ec:bf:bf:54:86:cf:15:a1:a5:f1:55:84:de:18:78:21:07:cf:
b7:8f:59:3f:85:58:d7:f0:b5:48:5b:12:cb:16:4f:e0:71:b4:
a7:c7:f1:b0:04:81:99:36:6b:2b:e7:77:f3:9b:b3:7f:eb:6f:
ca:1f:68:6c:7b:7e:d7:19:b5:d8:86:e6:aa:f9:2b:80:35:e9:
a8:a5:c6:71:9d:0b:95:87:02:2a:69:17:05:ad:98:c5:ad:c7:
0f:25:e8:b4:8b:fb:ec:f2:f6:30:54:6d:4a:d2:f8:77:6b:de:
94:c0:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:21:54 2025 by rpki-client