Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json)
Hash identifier: WVVrZR8MYzFK9bVWnqu7CZ8YctReId7Pn93mp0HLPhw=
Subject key identifier: 2A:81:2C:D7:5A:51:32:CF:71:5B:6A:6D:2E:7A:27:09:DF:CE:70:63
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
Manifest number: 0F22
Signing time: Fri 31 Jan 2025 17:52:52 +0000
Manifest this update: Fri 31 Jan 2025 17:52:52 +0000
Manifest next update: Fri 07 Feb 2025 17:52:52 +0000
Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: S/k069ClaI6dPZg33yEVIR6TvRWfqCCfBzc/0Df4KSk=)
2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: HiUI4r/SFIegFaFFoXRBRf157uEBpMM7bqdYETmrC8o=)
3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: 8sLoIeCKa+LBQU6M3xgcWt70Xa8ypzI1STCtNIDj7w4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Validity
Not Before: Jan 31 17:52:52 2025 GMT
Not After : Feb 7 17:52:52 2025 GMT
Subject: CN=679d0df4-21ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:5e:96:ef:6a:0b:92:6b:62:3d:a3:c6:8e:
bc:3c:fd:88:eb:44:5d:f8:28:af:00:fd:33:1c:42:
b6:4c:d7:7e:88:8a:cd:01:f5:c2:aa:a7:64:9f:45:
0b:9c:e6:8f:49:07:31:b2:30:6c:1a:f5:3f:3f:e9:
df:06:7b:0f:e4:05:16:65:3b:ab:d5:5d:1e:51:f8:
89:3a:1d:1a:27:e2:9a:b5:25:88:a7:05:79:f4:9a:
47:af:e8:dc:f5:e5:0f:8e:00:e0:a9:40:d6:49:62:
ea:c6:17:d6:7a:97:34:73:f4:b0:0c:fc:e2:5d:1b:
a9:57:a3:35:31:f7:c6:28:b9:d3:33:4d:b9:a7:18:
90:70:ec:83:35:2c:5c:8a:d3:17:11:95:70:c1:4a:
18:08:b5:5a:91:0c:68:00:14:70:45:e1:cd:9b:f5:
3f:b1:8b:d1:13:f1:5b:4e:73:b4:e4:03:7b:aa:c4:
8a:5e:20:cc:74:b0:a9:68:a5:46:1e:0f:e0:63:40:
0b:19:28:13:41:2a:ba:26:1c:09:91:81:9d:34:dd:
a8:00:04:59:5c:0a:ea:a2:2c:67:5e:0c:27:e6:c7:
ce:77:2f:7d:ce:2f:d3:2e:9e:98:ca:a2:6d:0a:7f:
68:3a:77:d9:1d:f1:3e:99:f5:e9:99:7a:a2:2b:4b:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:81:2C:D7:5A:51:32:CF:71:5B:6A:6D:2E:7A:27:09:DF:CE:70:63
X509v3 Authority Key Identifier:
keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:09:e5:97:a9:de:2b:c7:c7:0e:15:57:90:53:a9:10:a0:0a:
6e:ba:6e:00:37:99:01:44:75:dd:77:50:46:75:84:ab:67:86:
40:6b:ab:e6:7b:a0:49:02:da:53:0b:5a:01:cf:a3:3f:a1:34:
68:26:bc:ee:84:4d:94:89:ca:fa:a7:32:c3:bf:25:01:e3:c3:
5d:2a:fc:ad:43:a9:74:6b:7e:d2:9a:ad:ed:c6:66:ae:c6:7d:
e9:b6:57:44:69:3c:a1:c6:2b:56:74:a3:8a:ee:f3:ee:37:e8:
6b:11:d6:74:e3:5b:f7:1b:d9:eb:05:02:ab:a0:05:34:98:17:
13:6f:02:06:a0:ab:c3:71:30:e0:57:f7:7e:d7:2f:25:b4:d3:
44:9f:22:5f:7c:de:22:15:98:7c:21:a8:77:8a:e8:1f:51:47:
2e:35:4d:b6:8b:f0:2d:e1:84:c9:44:ab:8e:a8:cd:c9:b5:63:
6f:3e:88:d5:1a:1d:33:27:1f:c2:cf:ef:ba:05:48:74:f8:af:
24:0a:f3:be:23:94:58:d9:8a:bb:6f:95:29:1f:8f:10:17:14:
69:38:15:65:0a:85:51:37:de:ae:a7:eb:04:57:64:13:d4:c0:
9c:11:8e:5c:ea:14:6c:8d:7b:84:7f:0f:7e:65:d8:3b:65:ea:
60:8b:b5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:54:59 2025 by rpki-client