Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
File: du8ZOVeobWTTw83rngdGdG70KQo.mft (raw, json)
Hash identifier: 9IPGdCDZjmUPd+f1Kl2z8/1ngLje2MHSpE0VCFtJWXE=
Subject key identifier: A1:77:D8:2A:C2:6F:A3:3A:8D:52:5A:7A:56:DE:CB:48:C0:B3:1F:9D
Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A
Certificate issuer: /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
Manifest number: BC
Signing time: Thu 30 Jan 2025 20:30:12 +0000
Manifest this update: Thu 30 Jan 2025 20:30:12 +0000
Manifest next update: Thu 06 Feb 2025 20:30:12 +0000
Files and hashes: 1: du8ZOVeobWTTw83rngdGdG70KQo.crl (hash: 5OJOJ0pSM4kYcr3VJuBEN7OkNcshXa8bp2qTTXLQfOc=)
2: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (hash: /FORfGBg9zOxItBO8An19jk30uxSaavKCQfEXQzUIIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A
Validity
Not Before: Jan 30 20:30:12 2025 GMT
Not After : Feb 6 20:30:12 2025 GMT
Subject: CN=679be154-abfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:1d:58:61:33:58:96:80:04:9b:a5:23:d5:
2e:83:74:3d:ab:d1:45:aa:95:64:5d:02:bc:71:b7:
6e:2e:d2:0d:99:4c:4c:5d:d3:30:47:1a:22:c4:f8:
2b:7e:68:6b:a3:9c:bf:19:a9:a0:fd:80:89:df:62:
af:43:26:11:fe:a4:7a:ad:38:1e:e9:be:d8:a0:66:
6e:22:c7:d7:94:b0:22:ef:57:8b:c1:fc:80:46:46:
e7:fa:8e:cd:5b:53:68:fd:3b:d1:8c:c0:15:43:34:
53:46:93:5a:c6:37:62:88:f3:40:63:9a:b5:21:39:
43:5f:29:6c:71:4c:a3:4e:15:6d:0f:af:ce:e9:2e:
58:f9:5e:a3:d2:3c:d6:4c:9a:66:b8:00:b1:83:54:
e6:ed:e2:b6:34:cd:2f:50:51:eb:7b:ed:8f:36:7f:
4f:90:9f:7c:be:56:6a:de:54:39:6a:49:b9:7f:91:
f1:20:cf:e8:d7:e8:bc:a3:d1:57:ab:c7:ba:a9:db:
28:c1:51:94:bb:3c:81:53:99:3b:41:00:05:13:9e:
eb:e1:5b:29:16:79:1b:0f:fc:15:04:b7:35:02:89:
64:13:fb:c7:ab:f0:9b:17:a3:fd:23:31:af:3b:bb:
d9:f0:98:f1:37:8a:9d:d6:d3:23:89:1b:44:84:e3:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:D8:2A:C2:6F:A3:3A:8D:52:5A:7A:56:DE:CB:48:C0:B3:1F:9D
X509v3 Authority Key Identifier:
keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:2e:86:52:f8:0d:7e:ad:65:67:72:59:1b:77:c2:8b:bc:b0:
a7:1d:36:bc:05:d9:56:a3:81:e8:38:3a:5b:68:fb:a2:26:95:
c3:6a:6f:74:50:75:5a:b3:f4:ba:01:a0:95:03:d8:d8:09:fb:
38:da:fe:df:7c:2f:4d:76:f4:35:f9:5b:23:76:62:5a:45:f3:
9e:ae:bb:2e:e5:e8:e2:c8:95:29:7b:22:d8:13:42:4e:92:45:
ac:a8:e8:b9:dc:d0:03:ff:0e:97:5b:3f:7c:cc:5e:1f:a1:86:
68:7c:b2:83:ba:80:cc:dd:6a:fa:56:ba:21:32:d0:14:8b:ae:
4a:58:72:fe:89:bd:2b:97:a6:c3:36:42:e4:56:f5:94:f4:dc:
48:f7:c0:79:95:8a:b2:59:c5:c1:f4:bf:ee:28:16:7f:e5:93:
5a:63:f7:b2:dc:ce:6a:6b:74:41:84:61:50:b8:63:e9:1a:9b:
78:37:e2:28:99:82:83:21:a5:f9:1e:ba:72:e1:af:0a:de:c5:
ca:13:52:b8:50:0f:cf:be:0c:8d:ba:e0:9b:4f:17:a1:76:3c:
ba:ae:bf:9e:6d:09:d8:6e:ae:0d:f8:0e:13:98:94:e5:69:19:
0e:e0:c2:e3:23:80:d0:53:99:0d:96:ce:ad:14:26:f0:b6:2a:
18:86:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:01 2025 by rpki-client