Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json)
Hash identifier: TAQVvU+/070US4ZnK+oFcITI0ghWb4wZLUqOMWPZ+Sc=
Subject key identifier: 71:A2:69:FF:21:06:4E:04:93:BF:F2:52:40:D2:FD:02:55:7C:24:5E
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial: 0BDC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
Manifest number: 4020
Signing time: Fri 31 Jan 2025 15:06:49 +0000
Manifest this update: Fri 31 Jan 2025 15:06:48 +0000
Manifest next update: Fri 07 Feb 2025 15:06:48 +0000
Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: 6mVYiMiYYNOsv48oTjRnhdYco0mk5PHX4NHkqZfEa4s=)
2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: 4Z25oEXKd2i0RXY7kF9Yj9e1Ufs0rVahsGX9EeBSaFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3036 (0xbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Validity
Not Before: Jan 31 15:06:48 2025 GMT
Not After : Feb 7 15:06:48 2025 GMT
Subject: CN=679ce709-4e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:65:c9:1b:e5:b4:6c:47:48:7e:bd:e2:32:
fc:1a:f9:0c:58:12:24:08:59:84:4e:aa:b3:2b:15:
d8:e2:64:a6:38:55:2b:53:9a:f6:98:49:3d:19:d5:
da:67:a1:64:6b:c2:f9:43:15:7d:3a:dd:fd:99:f5:
0d:2e:f0:39:1d:83:46:44:dd:c3:c1:a6:02:79:a4:
4a:eb:f8:bb:c9:e4:3f:ab:54:61:b5:4c:a4:68:24:
de:05:01:77:ac:b4:f3:68:b0:94:bf:f5:5d:40:95:
11:37:dc:d1:8f:3b:0c:53:22:1a:9c:5e:80:4e:f5:
bc:5c:9d:a0:f9:38:fb:12:34:87:23:b5:03:7b:38:
25:4c:58:02:06:f8:5e:94:cb:67:0b:f0:b5:f2:21:
8c:59:27:1e:99:ff:e9:af:9d:ef:5d:22:6f:30:55:
f6:dc:c7:09:8f:19:16:17:2d:a5:56:1e:e9:08:25:
0f:2d:46:1f:67:ed:40:93:db:2c:e2:f2:ba:a2:6c:
ad:ff:4a:26:0e:61:85:ae:a6:c3:7d:96:54:a9:a7:
b5:50:ce:08:c4:5a:b1:f9:15:a3:e9:9a:76:d8:2f:
13:d1:df:a9:33:49:75:bd:76:7a:7b:31:07:08:42:
59:4d:d6:4a:87:b0:5e:1c:5d:5a:c8:8e:54:8d:e2:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A2:69:FF:21:06:4E:04:93:BF:F2:52:40:D2:FD:02:55:7C:24:5E
X509v3 Authority Key Identifier:
keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e5:9d:bb:e1:56:15:6d:0f:42:a4:59:b1:5f:77:73:eb:a9:
12:3a:65:96:fd:02:11:9a:42:b2:15:33:8b:89:6d:f4:c2:c4:
41:10:95:29:77:bc:e4:01:fa:f6:56:0f:1f:42:26:36:58:7b:
64:2e:78:08:6b:18:1f:4a:80:7e:93:26:1d:49:ab:93:cc:02:
48:ab:2c:18:a3:b0:41:00:a4:4e:5a:6b:93:05:f3:aa:ab:44:
bd:d2:ef:48:2a:33:4c:2c:c4:2c:d4:a2:60:16:df:2e:5a:b9:
95:8a:02:62:dc:09:5b:ef:44:06:66:75:22:6d:71:66:70:a5:
35:78:72:8c:19:bc:2a:80:c3:84:7f:6d:25:e9:34:59:b2:c9:
e5:6e:68:52:e0:ae:7e:f4:b7:93:67:9c:22:23:02:c9:06:62:
e6:d2:49:6d:70:d9:fc:cd:e5:80:16:76:50:1b:5f:57:46:8f:
59:71:e8:38:cb:42:4d:05:67:c7:18:ad:7b:58:8e:e1:56:48:
bd:f1:1c:f1:bd:47:eb:8c:e5:1f:e6:c4:2b:6b:52:69:5b:ab:
8d:57:fe:78:c4:d4:25:e6:a5:a3:fb:d9:0d:fd:8a:1b:83:5a:
97:cc:4b:6c:fa:ce:4b:f9:f6:63:93:c7:b6:9a:d4:d0:74:d3:
c0:4e:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:40:32 2025 by rpki-client