Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json)
Hash identifier: uEznADpSOvTzul3uskea85nHdTmz8wiRwi2nikt5cyU=
Subject key identifier: 30:CC:66:E6:60:B8:74:A8:EE:1A:24:83:58:75:A4:2B:8B:52:23:9F
Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
Manifest number: 0105
Signing time: Fri 31 Jan 2025 04:10:27 +0000
Manifest this update: Fri 31 Jan 2025 04:10:27 +0000
Manifest next update: Fri 07 Feb 2025 04:10:27 +0000
Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: E85BsJY1F+E8b/tHNhCHnXUuQ0oEmtPmqbFKyIrYn1o=)
2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: AOPC9WbNcZUf3rw4IBXy2gFnwozs8jTrPTS3eOn6dJw=)
3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: SfS9ZnMJ4K7BL+m5tPbXXtGeAg5+tE+/js3vJ/6kex8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4
Validity
Not Before: Jan 31 04:10:27 2025 GMT
Not After : Feb 7 04:10:27 2025 GMT
Subject: CN=679c4d33-3bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:a7:1a:c4:e5:b1:d8:66:e8:be:cf:e8:92:
f8:75:5d:71:70:46:92:fc:df:ac:7d:25:c8:49:59:
d6:3c:87:f7:61:71:34:ff:e4:49:eb:3e:b6:1e:30:
7c:57:7e:11:c1:a1:ad:b4:62:e2:44:95:16:33:62:
6b:7b:c9:42:3b:89:20:e4:f1:42:95:d1:9b:c5:53:
81:22:03:46:c1:00:49:d2:97:e4:a7:7c:04:7a:77:
fd:f7:1c:44:5c:92:90:2d:a4:34:fd:8d:45:71:93:
7d:01:60:dc:ee:70:84:76:23:35:d7:58:e7:40:79:
a6:ec:1a:6e:63:54:10:92:f1:b4:0e:4e:dc:eb:77:
71:da:81:39:95:b2:d8:9a:e1:62:c4:6b:ce:b2:95:
45:4e:c3:aa:ff:97:d6:6f:72:ce:1f:e9:e3:b9:8b:
f9:5c:9a:da:f1:51:50:5d:0b:e1:1e:1f:5b:ba:31:
a0:9b:02:c9:72:0c:7e:49:22:6d:00:36:31:c8:f8:
05:82:3f:23:3c:f2:26:e5:38:d7:14:29:c5:e5:e2:
78:d4:dc:62:04:9d:34:f3:e6:f7:82:5e:7e:39:d1:
74:71:8a:a7:0b:a4:a5:5e:f2:3c:3b:16:f0:9c:8c:
95:83:2a:c6:b5:36:57:64:28:53:17:ca:a9:4d:0c:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CC:66:E6:60:B8:74:A8:EE:1A:24:83:58:75:A4:2B:8B:52:23:9F
X509v3 Authority Key Identifier:
keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7c:4b:6a:36:2f:30:6a:a8:6f:ef:39:1f:f2:02:15:59:fc:
1c:37:df:04:77:9b:0d:91:9c:78:f1:c5:14:56:1e:a5:4e:60:
db:07:94:b3:1f:f6:c1:5e:44:cd:3e:b5:8d:e1:93:6b:99:28:
24:9a:26:b4:93:2f:3c:0c:32:d7:6d:04:29:d1:8a:da:6a:bb:
6b:64:62:24:3c:63:bb:a2:6f:fd:ea:97:5f:d1:e5:1c:d2:fb:
2a:ff:cf:7f:4b:2c:55:fc:c1:5a:7c:46:f5:f6:3f:46:9c:25:
1c:f4:51:9b:73:26:62:4e:9b:a6:dc:d2:b2:4c:72:69:00:b2:
1d:0f:62:6d:03:96:0d:42:f5:3f:83:28:ca:c1:c0:90:92:3a:
d7:aa:2f:51:12:8e:5f:16:29:50:b5:9e:d4:3d:ce:c9:19:38:
12:b4:37:d9:93:8c:91:f6:6e:01:bd:1e:8f:28:02:69:cd:4b:
a4:81:90:72:a8:e0:1c:6a:11:98:93:56:e8:16:f8:50:c4:a0:
ab:e5:1a:c4:47:bc:af:e1:f0:bc:35:5c:d4:c2:f7:37:7b:32:
21:dc:e5:e1:fa:c1:ac:24:f3:3a:94:c2:21:c2:ab:02:ab:86:
d3:b5:a4:c1:d1:06:ce:d5:c2:93:58:be:a8:2b:b9:1d:27:c1:
f2:86:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:22:40 2025 by rpki-client