Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json)
Hash identifier: WditHMnQmUzYLbN7OuAyiiClsT3A6xIPudaWhhZakOY=
Subject key identifier: 33:AB:5F:C6:0A:55:2B:DE:7D:80:07:6E:38:9A:40:5E:9E:96:18:DB
Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
Manifest number: 09
Signing time: Fri 31 Jan 2025 07:13:13 +0000
Manifest this update: Fri 31 Jan 2025 07:13:13 +0000
Manifest next update: Fri 07 Feb 2025 07:13:13 +0000
Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: b7OJLSfg72REvFDzHjn4/6KOLrWFWFVwUVIfDJpBgNg=)
2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Validity
Not Before: Jan 31 07:13:13 2025 GMT
Not After : Feb 7 07:13:13 2025 GMT
Subject: CN=679c7809-814e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:a6:2e:e2:2d:3f:59:63:2e:82:50:ea:be:
03:22:e3:ff:d1:13:7c:2a:a5:e7:39:04:83:43:6f:
06:4b:1c:77:6a:c8:62:08:5d:5d:ef:9b:bb:bb:1b:
66:bd:fa:40:92:e9:b4:1b:02:4d:c1:6b:22:69:a4:
8e:be:55:13:db:e5:e5:49:c0:4a:65:1f:ef:1e:f6:
80:a5:07:6d:68:3b:43:f9:2c:45:f8:88:52:4c:3b:
b8:1f:99:dd:e7:13:2f:92:48:aa:4c:2c:37:ef:2e:
d7:3b:f8:05:f9:9c:98:37:f8:f4:e4:4a:c7:93:e0:
36:cf:29:ff:f2:ec:1a:33:f2:67:19:eb:48:17:d1:
75:37:93:e3:37:76:4d:b3:f9:7b:2e:42:1f:bb:58:
b4:ed:c6:b1:b3:9e:3e:e4:b9:75:30:71:60:0d:8e:
24:da:3b:30:80:7a:ed:00:5b:17:88:3d:f9:73:54:
e2:27:c7:3a:52:b0:ba:d1:a0:6c:81:8e:59:e1:e0:
b5:fe:eb:20:d4:5c:91:f2:2d:2a:bb:1c:38:0a:cd:
4e:dd:82:87:b7:27:37:b9:ac:69:2d:78:dd:45:66:
05:07:c2:87:39:3e:f7:9d:50:ea:40:36:e4:3f:40:
9a:11:cd:85:f1:ad:d8:d8:7a:59:4a:d0:bb:1f:b1:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:5F:C6:0A:55:2B:DE:7D:80:07:6E:38:9A:40:5E:9E:96:18:DB
X509v3 Authority Key Identifier:
keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dc:48:0f:65:b6:5b:5d:bc:a7:85:3f:28:be:39:4c:d0:12:
48:6a:ae:9c:5f:c8:c7:d5:63:a0:47:c4:9e:eb:5b:c6:bd:6a:
37:42:75:b8:49:0f:50:cf:e9:0a:23:0e:f3:61:67:33:53:d5:
a0:d7:15:e5:8f:77:2a:47:e5:57:b2:a6:8b:9e:d9:c1:62:cb:
27:6e:60:2e:8e:cc:58:d6:d2:6f:09:fa:36:b4:49:ba:a9:bc:
74:1c:83:30:30:74:8b:25:13:c4:4a:98:bf:4f:f3:84:d1:4e:
1d:ba:0b:4f:77:61:cb:d2:8d:d7:7a:72:ab:3e:ee:55:cd:a0:
82:5a:b3:0b:d5:47:fc:b1:80:6a:d8:3f:5d:9b:65:25:27:7e:
ac:d1:16:7e:49:87:bf:75:1f:ce:f6:fc:21:35:6c:75:22:95:
f0:c9:ce:53:01:dd:d2:ee:d6:e4:96:14:b2:40:f5:b1:c3:b3:
81:79:e2:4b:22:e5:f3:80:78:54:bd:f2:f7:27:32:3c:e0:b7:
bb:76:af:a5:6c:d8:3e:c7:8b:d4:c9:5c:88:4f:cc:3d:78:3f:
31:cc:57:8d:25:1b:3d:05:c1:3d:23:4a:2b:6a:89:87:39:61:
13:5d:60:4e:38:7b:48:6b:c2:51:09:36:3d:ff:1b:e2:c8:b9:
7e:5c:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:13:58 2025 by rpki-client