Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json)
Hash identifier: 6eJbOEvvehxgUB+6P8CjpfBf8+VkcA6UKayYezPIwVc=
Subject key identifier: 6C:F4:17:E4:1B:6C:3B:02:A8:E2:06:00:F5:D4:82:1B:98:80:AD:C3
Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Certificate serial: 2131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
Manifest number: 212A
Signing time: Fri 31 Jan 2025 15:55:55 +0000
Manifest this update: Fri 31 Jan 2025 15:55:55 +0000
Manifest next update: Fri 07 Feb 2025 15:55:55 +0000
Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: +Xe9cWMiVwsEkuwRG1PWssRdX7Ot5FX5pOqRxTmiCb4=)
2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: c5EKgRZbwGkR1Dt53R8CSRSf7zLCY2912iZh8le8ZQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8497 (0x2131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0
Validity
Not Before: Jan 31 15:55:55 2025 GMT
Not After : Feb 7 15:55:55 2025 GMT
Subject: CN=679cf28b-4bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e3:4c:96:d6:df:46:bb:4e:73:d9:67:18:6d:
bd:70:51:a2:91:eb:a0:10:e8:03:78:96:9e:56:46:
7e:f1:fb:a1:f6:49:33:28:43:35:51:54:72:61:0f:
7e:61:8f:8d:99:46:95:e4:fd:ed:1c:d0:c4:70:a0:
b8:1c:9b:25:15:88:55:98:64:89:8f:2b:76:89:c5:
44:64:e1:51:c3:92:91:29:d5:c6:0f:95:bd:2a:2b:
09:9d:5b:d8:f0:4f:e8:26:12:4d:c5:9e:81:89:e6:
d2:ed:fb:59:0e:f0:e4:5c:59:e9:d3:fd:82:33:3e:
63:d7:01:e6:02:cb:61:6f:80:bb:80:ca:4a:59:b9:
3e:19:93:00:11:94:94:12:39:d7:cf:21:be:67:3a:
5f:40:9f:32:b9:7b:3d:86:d1:90:87:fb:6f:f9:74:
4d:c0:12:a3:cf:9d:d8:78:af:5a:ca:7f:d1:38:fb:
a4:84:71:db:ea:1e:a4:34:56:9c:d4:1f:f9:39:9b:
9a:5d:76:a0:02:b5:ab:41:5c:54:e1:13:28:54:95:
30:a1:fb:4c:ac:97:36:74:b4:0a:99:50:88:88:a9:
2a:4d:ce:14:51:14:31:72:33:29:f3:39:52:6a:a2:
8a:25:35:d6:ae:be:1f:91:4d:97:56:d0:7d:95:6d:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F4:17:E4:1B:6C:3B:02:A8:E2:06:00:F5:D4:82:1B:98:80:AD:C3
X509v3 Authority Key Identifier:
keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:6e:db:6b:49:bd:45:cc:53:33:af:c6:cb:3d:7b:1c:f5:17:
53:4c:86:93:2b:9c:53:42:e9:53:b5:2c:03:38:c5:cc:02:71:
81:61:1e:84:de:59:f3:48:3d:16:b3:cd:07:ea:a6:4d:17:ae:
4e:ca:f1:6c:8c:5f:0c:6f:01:c3:5c:69:71:71:0b:e2:eb:e0:
f1:ec:42:ec:be:2a:e3:1d:f7:3b:6b:6b:6a:cb:87:f5:4a:58:
5f:80:85:75:35:86:3c:f1:dd:55:77:28:bf:72:b2:b5:0d:ca:
6c:bf:06:23:83:21:4f:56:65:e0:02:d3:9a:71:77:d1:b8:ba:
02:36:74:bd:86:fd:b9:4d:b2:62:e0:ab:a3:cc:17:c4:1a:fe:
d2:de:67:57:2d:33:5c:5d:83:bf:72:d1:a2:fe:36:ba:80:50:
bc:b7:e8:b0:aa:e0:4a:2b:8b:4e:32:b5:5d:c2:7c:f4:89:25:
58:c5:7b:0e:1d:49:92:f8:72:64:52:06:8f:69:49:f7:bd:e8:
f4:ad:be:de:d8:f6:84:b2:34:a4:dd:f8:47:5d:39:7b:c4:ab:
e6:fb:1b:6d:fc:50:8e:ec:65:e0:39:7d:b2:ad:fd:45:bb:0f:
4c:9d:43:cc:ff:6c:12:3e:cf:50:6a:cc:c5:d0:6e:21:42:b0:
49:57:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:23:38 2025 by rpki-client