Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft
File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json)
Hash identifier: 0Ww6Oi1IhOuhDahlJ0MlLo9wophix5bug1cXiWOImoc=
Subject key identifier: BE:26:AC:87:86:F4:E5:E8:AC:CA:F2:29:48:7D:41:BF:3A:00:DF:60
Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8
Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8
Certificate serial: 0CD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft
Manifest number: 0CCF
Signing time: Fri 31 Jan 2025 18:05:08 +0000
Manifest this update: Fri 31 Jan 2025 18:05:07 +0000
Manifest next update: Fri 07 Feb 2025 18:05:07 +0000
Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: ZH0r0yx4ONB27Kne9/6wRdB5qTdW8bXH1KHteNOovLA=)
2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: YQKzakVZRwkEoSkOxzmifYwaHBBE1uM/hdsf+7QDJq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3289 (0xcd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8
Validity
Not Before: Jan 31 18:05:07 2025 GMT
Not After : Feb 7 18:05:07 2025 GMT
Subject: CN=679d10d4-edf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:fe:67:52:1c:c1:03:7d:c5:f5:04:08:4a:
45:58:ce:dd:be:90:ea:ab:85:66:3f:32:dc:e6:ae:
a5:bd:23:4d:0c:c2:4a:18:93:bf:fe:7b:88:2f:55:
23:26:7b:89:9c:54:6f:f1:48:a9:1e:88:07:da:21:
8d:2d:1c:f3:02:52:3a:1b:57:c5:e6:2f:71:b7:30:
1d:c0:a4:e4:7e:45:3b:7d:51:b1:02:0e:5e:eb:7d:
d0:22:02:31:8d:d2:8a:ee:50:2b:e0:b1:40:48:c6:
a0:34:53:7f:4e:30:32:fd:97:d2:bd:ed:a3:61:f7:
73:13:9f:65:f4:f4:df:e1:29:b7:33:2f:66:dd:53:
bc:cd:43:19:30:a6:86:d1:2f:72:37:67:f1:44:8b:
8f:b5:d9:55:66:b3:7c:c3:1b:e5:83:b3:94:9f:a1:
05:74:93:e2:22:27:d1:9b:73:9c:b6:0d:96:c7:29:
d3:5b:b5:7e:41:11:16:52:a8:16:47:d2:a3:0d:d4:
61:32:68:de:26:cf:ed:3d:bb:d0:f0:50:d6:fa:42:
07:34:9d:29:bf:9f:c2:c5:0b:84:51:c6:5a:96:48:
ce:37:db:4e:35:e7:17:e6:66:c5:aa:7f:15:bd:fa:
e2:52:62:21:a5:43:61:86:98:17:72:7f:cb:90:a1:
c4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:26:AC:87:86:F4:E5:E8:AC:CA:F2:29:48:7D:41:BF:3A:00:DF:60
X509v3 Authority Key Identifier:
keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:9e:bf:00:c2:b2:90:58:af:02:29:bb:05:4a:97:9b:88:3f:
ae:2b:66:96:70:5d:b9:00:1d:58:4d:cf:66:96:d8:cf:06:fb:
90:a5:a6:4b:89:ad:e0:2c:60:b8:bd:b8:23:93:9f:62:89:0a:
0b:ff:c1:e6:59:3f:31:d6:85:46:21:96:a1:a9:58:0e:3c:dc:
e6:b4:4b:1b:7f:f6:15:bb:1e:9e:fb:e9:4a:f5:1e:b9:57:80:
f6:d4:6b:9e:42:2b:86:9e:92:d4:a6:3f:6e:be:b8:e7:3c:23:
51:13:e1:c0:31:b8:2b:43:1e:7c:c2:50:45:61:80:ee:4d:da:
c6:91:88:0c:5c:3c:87:32:46:d0:04:3d:89:e1:61:d6:87:2e:
c1:60:4d:83:b0:e2:3e:66:2c:15:19:fa:f0:87:a2:59:06:31:
06:05:ac:49:d1:a0:de:a6:59:04:81:60:60:ca:a8:2b:53:3f:
93:3c:89:b4:05:40:ff:2f:9d:9b:a3:41:cf:93:95:ac:cb:3f:
c4:aa:e4:3c:7a:67:fb:d7:e3:14:5c:47:4c:7d:7e:32:b1:dc:
e3:6b:9c:76:67:9e:78:12:e9:bb:83:c0:5b:6b:8b:44:b7:05:
c9:49:ae:ce:76:4a:5f:a4:93:9b:83:7a:aa:a8:e3:bd:91:cb:
df:99:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:46 2025 by rpki-client