Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json)
Hash identifier: LCrkbwCQqQB4g+XXOGTWDNh2qzhoawog3QouJkzPtR4=
Subject key identifier: 21:5E:21:A8:7B:64:77:C8:34:FC:A6:A7:3F:CD:C8:A2:CA:58:10:BA
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial: 08DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
Manifest number: 08D8
Signing time: Thu 30 Jan 2025 20:29:22 +0000
Manifest this update: Thu 30 Jan 2025 20:29:21 +0000
Manifest next update: Thu 06 Feb 2025 20:29:21 +0000
Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: DHz0PWXE7r1Q0PIU8NlVUtDwNA58xkFMqPp1I8QKAsk=)
2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: y624BzVkuEiikHslOtq6hgxDkVhcX1eWu3QlNuMQNRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Validity
Not Before: Jan 30 20:29:21 2025 GMT
Not After : Feb 6 20:29:21 2025 GMT
Subject: CN=679be122-fda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:44:88:3e:47:c1:d3:5b:cc:88:ae:24:33:
cf:35:3e:48:5e:64:e5:13:9a:0b:ef:e0:4e:ff:9c:
0d:64:7c:85:6a:61:b1:cb:5f:3e:8e:72:cb:f4:2d:
60:78:b8:d8:93:c8:d1:44:e2:4b:7d:39:8d:3d:d7:
d9:99:88:32:80:50:bb:3c:56:20:d9:79:79:97:db:
84:96:16:5e:6f:af:bb:ee:c2:f0:f1:df:05:ab:f7:
dd:52:73:80:50:e7:d5:68:1e:ea:58:95:08:0c:c4:
87:70:2b:8d:29:5f:39:2c:85:57:5a:20:2a:97:4e:
1c:5d:8a:a3:b6:e4:eb:18:20:13:4e:5c:c6:c1:4e:
a1:47:39:b1:f2:fd:d9:ad:77:96:e7:3d:be:9a:9d:
d9:95:9a:73:18:15:41:c7:66:f2:75:d9:38:f3:43:
82:43:f6:26:99:92:2a:3c:ef:89:ad:1d:ec:a4:c1:
00:6b:40:c0:23:d7:88:01:ce:38:a5:a0:a5:a6:53:
ac:2f:3f:82:4c:c3:c7:ec:be:38:29:1a:ec:b0:30:
07:44:c4:34:86:b6:dc:3d:32:40:54:7c:73:7f:c2:
43:b6:8a:04:95:f6:fd:4a:57:4e:37:78:03:ec:96:
82:ea:07:3a:36:00:54:af:4e:85:64:fb:04:b8:a2:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5E:21:A8:7B:64:77:C8:34:FC:A6:A7:3F:CD:C8:A2:CA:58:10:BA
X509v3 Authority Key Identifier:
keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:fb:fe:5e:9a:68:14:3d:b8:0b:b4:9f:d5:e5:bc:9f:13:11:
ca:65:9f:13:04:ec:df:a4:36:88:db:60:1f:a7:a9:8e:dc:e6:
be:21:b2:f1:84:1e:50:07:a0:00:a3:18:86:a8:43:11:78:d1:
20:79:5e:3e:73:ff:bc:07:b8:39:61:10:d0:3e:5c:9f:c6:ba:
b7:2e:3b:05:38:5a:68:ee:f2:0d:e8:5b:61:25:9e:43:64:f7:
f8:8e:cf:c9:3e:73:70:f1:06:4e:87:8a:d9:b3:d2:66:56:d0:
9c:5e:00:1d:21:b9:58:c8:a0:6b:12:89:5c:33:04:88:91:d2:
f1:36:8a:6d:c6:00:ee:f5:d3:37:98:5a:f9:e1:bc:c4:47:df:
11:96:16:c9:d0:f8:89:5c:19:9d:fd:f5:d0:21:58:38:ed:de:
08:e8:27:97:5d:f3:08:71:f6:ee:51:9c:1b:20:da:bd:a0:3d:
69:00:b1:0d:a6:4f:8f:d9:12:9a:34:50:21:c6:57:23:15:4a:
1e:b3:6b:ae:64:da:ff:cb:58:bf:2d:b5:9a:18:de:a2:e7:b4:
13:1e:50:6c:f3:05:c1:4b:ea:7c:87:65:9b:3c:14:8b:cd:44:
99:5e:6b:53:35:a4:83:5d:50:29:5f:e0:a9:46:45:52:f3:b5:
e5:30:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:54 2025 by rpki-client