Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json)
Hash identifier: jnKEW/lF4g1qaE5tTD7qcy3NR0oWkNGW2nN9uXQnaZw=
Subject key identifier: 6C:A3:08:66:1D:09:A1:16:61:AA:23:9E:F4:D3:D2:5E:B7:B6:A8:96
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
Manifest number: 92
Signing time: Fri 31 Jan 2025 05:31:40 +0000
Manifest this update: Fri 31 Jan 2025 05:31:39 +0000
Manifest next update: Fri 07 Feb 2025 05:31:39 +0000
Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: d4TC6Je4jQp4OvEPT/l1lufN0uOYVMxvIB+oMJHdTdI=)
2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: dCFmmnGaeXc/Xyg5+AqlJy4nQ5RSSq2JLasc/NAHwbg=)
3: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: Om1Rc8FPcByfXN7P7h9FuPt4QrBbGaM+Ndfd120fzOc=)
4: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: KPY2wegfaa3tnC/Njnc64HaModZkMYm0j/OEMDfIXmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Validity
Not Before: Jan 31 05:31:39 2025 GMT
Not After : Feb 7 05:31:39 2025 GMT
Subject: CN=679c603c-778e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:1e:45:63:d9:d1:76:22:b6:fc:9e:20:6c:
40:8b:3e:d1:6e:e6:50:b5:61:66:6d:56:08:d1:54:
79:fa:a8:60:a4:84:8c:d3:84:c9:e1:2e:3a:51:5a:
d1:e1:0d:74:b0:19:cd:c6:02:1f:d1:aa:30:58:8c:
ef:bb:39:a8:13:cc:73:17:16:51:aa:0b:34:46:b1:
bf:6b:5d:b5:0b:e2:f8:d3:e1:e0:ab:20:35:00:57:
d0:ac:73:cf:fa:6c:4d:42:fd:7c:f6:52:40:e4:4e:
df:4b:07:fa:64:8a:fa:8c:4b:bb:79:b2:51:02:ef:
24:97:47:11:8c:07:77:eb:db:7c:7f:e5:0f:64:ee:
03:a5:2d:e4:7f:ee:b1:d5:bb:6e:94:db:92:ee:c7:
b6:ab:a3:71:bc:19:04:e4:f3:8e:31:67:3f:88:31:
5e:29:c9:cc:55:d7:b3:74:8d:1b:86:0e:e0:25:a0:
0c:8b:1f:84:a6:83:8b:78:f6:62:1a:f8:83:2a:75:
d5:e4:36:20:8a:95:b0:e7:61:ee:00:ed:3f:53:2f:
cd:f6:9e:d9:48:31:53:67:e1:5e:84:db:a9:12:ad:
4a:e8:03:1e:05:e3:c6:b2:24:10:f6:27:bf:aa:76:
33:ce:8e:97:20:6b:fa:db:07:5d:01:c8:28:8e:66:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A3:08:66:1D:09:A1:16:61:AA:23:9E:F4:D3:D2:5E:B7:B6:A8:96
X509v3 Authority Key Identifier:
keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:00:51:34:69:d8:48:f9:85:82:57:d7:f3:d3:4b:e5:d2:f8:
07:c1:b0:9a:fd:f9:12:88:ae:3a:8c:ca:04:96:06:d3:52:90:
71:14:01:d2:14:4a:e6:0b:12:43:1c:0e:b4:e5:59:36:ab:4c:
98:97:b1:88:01:a8:39:ec:c8:c3:5d:23:83:43:4a:8f:1f:ba:
fb:6c:1d:13:d1:da:5b:76:89:c4:66:c3:44:03:71:30:15:3f:
aa:7a:ab:0e:78:dc:00:22:9e:95:e4:d2:a9:a7:a7:f6:5d:0f:
6b:70:90:62:2f:af:81:78:c6:cc:5f:6b:45:bc:ac:e1:c1:d7:
71:be:b7:26:53:9e:7f:fa:c9:14:0e:33:17:57:4a:76:5a:f3:
23:53:f0:e3:1c:c6:79:ea:69:81:29:12:0a:36:8d:11:ad:62:
9a:dc:e2:bb:9e:c1:81:50:78:6d:e6:e5:4e:0e:ad:1c:4e:44:
0d:50:ad:7f:cd:84:88:53:01:c4:8a:ae:e8:8e:d8:e4:de:45:
d9:d6:e2:9e:41:7b:2b:26:b8:e2:2a:93:0a:35:fe:d3:7b:2b:
07:f6:77:ea:be:40:f1:d1:82:fd:5d:ba:06:ba:d9:44:83:29:
f4:ad:a3:c7:59:90:e0:df:f6:e2:b2:92:c0:43:cf:e4:7b:a4:
f3:46:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:00 2025 by rpki-client