Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
File: 5CK_AmFA0gPv1r_eruJoqosEZtU.mft (raw, json)
Hash identifier: WXwfA+HScvNa698sWBtGjU6iiSa02LnSd81fz30JbUY=
Subject key identifier: 9A:A8:31:C9:91:65:31:50:F3:84:F9:BB:BF:7F:1F:7C:FD:04:1B:40
Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Certificate serial: 028F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
Manifest number: 028B
Signing time: Fri 31 Jan 2025 01:40:35 +0000
Manifest this update: Fri 31 Jan 2025 01:40:35 +0000
Manifest next update: Fri 07 Feb 2025 01:40:35 +0000
Files and hashes: 1: 5CK_AmFA0gPv1r_eruJoqosEZtU.crl (hash: XusFBhU4KRlOgoyJsSRWw1qXRfH2ivUFT4yH+mZomVE=)
2: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (hash: 5l/0i4Mj7CkFahUXGxLru5zWwX7qpr1hA77tgI5t7fk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5
Validity
Not Before: Jan 31 01:40:35 2025 GMT
Not After : Feb 7 01:40:35 2025 GMT
Subject: CN=679c2a13-a603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:0f:6a:58:c2:0d:43:29:73:95:14:1a:25:
f2:c2:f9:33:60:e4:7b:40:48:aa:88:97:43:3c:ed:
46:99:1e:68:3c:24:81:71:82:0e:df:62:9f:62:50:
1d:82:16:58:49:bb:4b:ce:cb:2a:ee:7e:5b:e1:81:
53:64:f0:d1:bc:da:8d:1a:07:4e:b2:03:fa:30:66:
c3:38:35:47:2e:89:6e:d5:0d:6b:5c:c0:67:3b:ad:
92:d6:72:da:88:b8:fc:65:31:26:dc:e9:be:f8:f5:
f6:60:0e:f9:f4:85:43:46:fc:e4:5d:43:9d:93:73:
7c:c2:cd:e2:7e:90:ff:4c:ed:f0:50:fa:21:4a:16:
1d:b9:38:a1:a2:21:05:c5:81:3f:bc:28:dc:cc:b1:
48:de:ce:22:3c:b8:26:b0:08:e4:fd:cc:bb:db:35:
2a:5c:b4:30:ce:22:e8:ee:5f:39:45:7c:09:98:a5:
5f:ae:43:76:3a:43:e3:9d:43:3b:70:2b:9e:17:f8:
37:ae:dc:e4:01:fd:2b:84:4b:03:02:63:81:88:ec:
48:cc:21:d6:4c:45:50:6f:53:01:63:69:47:23:05:
bd:73:23:09:88:8b:83:cc:24:eb:aa:66:5c:67:52:
24:c1:4f:e7:6b:26:8d:13:2c:93:05:e2:60:f0:30:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A8:31:C9:91:65:31:50:F3:84:F9:BB:BF:7F:1F:7C:FD:04:1B:40
X509v3 Authority Key Identifier:
keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:a7:c6:f4:42:d1:ca:30:2c:e3:d9:df:d4:cc:82:dc:08:5a:
bd:f2:24:e9:56:54:2a:ab:65:15:13:64:2f:64:2f:cd:69:93:
6c:0d:3e:b8:61:3c:a6:fe:74:d3:36:ec:2f:f7:ac:f6:73:3f:
82:da:94:a7:a4:0f:0a:65:58:2d:b6:a5:d7:b8:d3:4d:ec:58:
47:fe:c1:c5:94:f4:19:e5:85:48:0d:ef:50:f5:d0:bf:e5:7e:
62:88:b2:fd:3e:03:17:e5:1c:ed:7a:a3:24:ca:5e:48:4a:76:
ae:75:f6:68:33:7c:7c:e2:0f:22:0d:76:ff:b6:49:ff:c8:5e:
8c:6a:9d:20:32:d8:ca:d9:f1:4e:c9:dd:e2:3c:36:0a:f2:60:
4a:e0:91:63:01:8b:3e:70:7a:e0:d6:50:be:d8:31:ad:45:fe:
4f:04:aa:ee:10:3f:eb:32:9d:5a:79:d8:6d:35:be:e8:cf:60:
95:6d:2a:95:c0:30:8c:12:09:a4:a1:3a:a7:da:82:a7:da:3c:
0b:9b:90:46:6b:8c:42:b2:94:3e:9d:76:62:dd:f6:01:e2:07:
6b:52:c6:b5:b7:b4:84:9b:7e:1a:72:30:3b:ef:77:0b:3f:73:
c0:cd:5a:1b:06:62:77:4e:71:14:a9:fc:ac:f8:04:80:d6:6b:
2c:1d:2b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:07 2025 by rpki-client