Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
File: 0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json)
Hash identifier: xNBUjGg2PBr93YZ//GN7ybrWwEsSmx/29y/kFtLPIcU=
Subject key identifier: E6:2C:77:83:EE:24:AA:84:3D:DD:D9:47:E5:FD:E5:C1:41:8A:CD:00
Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7
Certificate issuer: /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
Certificate serial: 04DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
Manifest number: 04DA
Signing time: Thu 30 Jan 2025 23:49:20 +0000
Manifest this update: Thu 30 Jan 2025 23:49:20 +0000
Manifest next update: Thu 06 Feb 2025 23:49:20 +0000
Files and hashes: 1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: dcZ+2Ad8eoYno6fdrZkZWLfSG41djE7Zf39Q2pmXN5c=)
2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: RRDCzU53SK4RYR2DdbmwE16o06HoY4GRJ9TEKW1rm3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1246 (0x4de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
Validity
Not Before: Jan 30 23:49:20 2025 GMT
Not After : Feb 6 23:49:20 2025 GMT
Subject: CN=679c1000-790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:13:7f:15:25:63:21:8d:ca:8d:c8:bd:4e:
c4:82:ee:5b:e0:d9:c8:59:40:84:87:f5:6f:cb:97:
ee:6b:9f:e9:a5:b0:cd:f8:6d:bf:9b:7b:7c:03:49:
1b:40:cc:92:dc:d3:dc:ef:a5:50:fb:c2:ce:3c:c8:
d5:e3:cb:15:8a:b2:55:a6:04:4e:d7:9f:73:e3:f2:
7e:cf:17:7c:0c:ca:9b:6a:e5:68:ce:25:72:eb:9c:
40:51:57:2e:8f:54:86:25:0b:9a:41:eb:bd:92:5f:
fd:80:2c:dd:d1:b0:5e:81:4d:54:c0:ca:ce:4d:cd:
44:92:c9:c1:ee:ec:a5:4e:14:62:0c:f5:ae:41:8d:
71:6a:8e:47:f9:8f:73:b6:7b:21:ab:d3:05:f4:c8:
12:6c:9d:01:5b:a2:93:85:3e:5b:a0:03:0b:1a:08:
2b:01:be:43:46:a1:b8:a2:88:0e:a9:65:18:ae:2c:
06:39:bf:95:a5:6c:18:22:a8:38:92:65:66:0f:82:
68:b7:2f:ad:a7:b2:aa:67:7c:e4:67:02:86:72:4a:
c2:50:c2:98:43:72:3f:99:d6:5a:22:e6:7a:f4:f8:
f2:2a:87:84:9d:f8:fa:15:e7:98:44:40:27:a2:d3:
f4:97:4c:fe:eb:23:9d:07:8c:06:6a:0f:0e:b1:e3:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2C:77:83:EE:24:AA:84:3D:DD:D9:47:E5:FD:E5:C1:41:8A:CD:00
X509v3 Authority Key Identifier:
keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:d1:39:ff:5d:17:ce:00:f7:51:84:e4:33:bf:e9:4a:f4:b7:
b2:2e:9b:be:63:7a:ec:43:96:f6:05:7a:05:3c:43:6c:bd:6b:
5f:76:bb:e5:1f:a8:31:7b:48:8a:2e:fc:db:b4:60:6b:e4:ed:
bc:65:51:6f:5e:a4:52:21:95:1e:0d:94:c6:e7:9d:60:a8:92:
b1:29:c8:39:9b:5e:09:b5:a0:6f:90:34:94:b0:35:29:24:d1:
38:15:64:e4:6a:f9:1a:13:76:3f:07:ff:46:be:1f:0f:68:90:
d6:01:f9:b0:5b:2e:1e:69:c4:89:f6:97:61:80:38:b6:7b:59:
41:eb:de:1b:ac:83:21:f3:ef:a2:9d:67:e8:c4:8f:49:5a:2d:
4a:22:b3:14:31:9e:ee:54:3c:2e:be:8e:38:af:c6:a4:1b:85:
61:76:1a:18:f6:4f:76:0b:da:11:0d:21:4c:11:d9:b8:3b:c7:
f6:28:44:1a:1b:2b:ec:52:ba:85:41:97:34:f8:fe:e3:42:a3:
76:ba:45:72:6d:c1:ec:a2:a6:73:0c:62:9b:07:68:07:2a:ca:
57:4b:f7:63:08:fa:78:3c:1e:35:5f:c6:13:c8:51:af:a5:4a:
1d:06:97:2f:73:e2:c2:82:0e:3b:f4:09:7a:4d:ac:33:d2:48:
8c:86:b3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:39 2025 by rpki-client