Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json)
Hash identifier: vLt+XDO3svfgLV+LG8f7Urp8fIdkeypD04oKE/V7B84=
Subject key identifier: 36:72:27:1A:E0:9B:33:C8:87:A7:03:4E:6B:7D:65:3E:39:1C:F0:F5
Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF
Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
Manifest number: 35
Signing time: Fri 31 Jan 2025 06:41:12 +0000
Manifest this update: Fri 31 Jan 2025 06:41:10 +0000
Manifest next update: Fri 07 Feb 2025 06:41:10 +0000
Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: LtDtak7/IV1imUcWb2P3lIbZk8dtf5rkUYqJO1pgugQ=)
2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: izRhlY7DGrfvs8MmjLdXrrQgAeYYKtyct/uQzFPAxkk=)
3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: gD5kq8/HSPW50HYpmldu2HRZWRqRsB+3dXKbKp9PeAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
Validity
Not Before: Jan 31 06:41:10 2025 GMT
Not After : Feb 7 06:41:10 2025 GMT
Subject: CN=679c7088-5f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:db:0e:fe:99:96:69:fe:c7:17:10:f6:d7:
9d:4e:8c:37:d7:4a:f4:2d:61:c3:d1:da:d2:9f:eb:
b3:a2:c6:eb:d6:83:ec:50:1b:8d:a0:87:e4:b5:79:
85:a6:fc:d8:39:38:3d:01:d2:b0:63:6a:18:a6:45:
0d:e2:5c:56:d5:1c:06:45:26:17:24:c2:d4:b7:42:
84:63:59:61:e7:b9:4d:61:2a:86:57:4d:39:59:33:
cc:03:51:f0:79:73:8f:7b:b4:67:a8:57:a8:a3:80:
2c:8e:88:8d:80:0f:c1:88:ec:16:c9:be:d0:72:15:
81:23:cf:29:76:1e:6f:d1:8e:23:b9:bb:ca:4e:e9:
28:54:a2:38:58:d1:17:8f:ef:61:ae:31:88:ea:3e:
22:76:6e:ad:67:aa:8b:20:76:6f:9a:2b:28:4e:e9:
d2:e2:8a:da:a7:6a:ed:02:fa:dc:56:3d:ba:0d:9f:
55:3f:38:73:cb:13:0e:e8:2c:af:96:a5:17:be:b9:
d7:6e:86:9d:1c:c9:02:72:eb:98:47:1a:1b:7c:c6:
96:3b:3d:29:73:fb:1d:49:3f:bb:c2:af:26:39:45:
01:5d:80:50:b7:78:40:e5:1e:9e:62:0a:9b:0e:05:
5c:9a:c2:03:bd:fa:22:55:d0:6c:d3:33:95:dc:52:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:72:27:1A:E0:9B:33:C8:87:A7:03:4E:6B:7D:65:3E:39:1C:F0:F5
X509v3 Authority Key Identifier:
keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:97:a0:5c:ce:35:37:f5:a3:49:cc:ee:51:5d:4e:b7:d7:b9:
e9:58:51:1f:e5:e8:13:22:59:75:e1:39:2f:ad:da:f6:75:44:
24:94:d9:98:c5:a6:81:04:30:4a:4a:06:25:0c:77:52:09:0c:
9c:99:98:fa:11:4e:50:10:e5:95:68:ca:a3:54:26:a9:47:e5:
f0:be:c0:9e:bd:63:15:e1:32:76:e3:db:35:16:46:53:98:75:
15:8d:fd:95:03:d6:f8:6b:62:3b:5e:fd:ed:6c:dc:19:42:06:
e3:0d:2d:0a:ed:c7:c5:b1:ed:db:44:e5:66:65:ae:3c:36:4d:
2b:bf:92:61:27:6e:db:3e:71:32:d4:07:80:ea:16:96:82:d0:
5f:be:6f:a0:df:fb:fb:50:00:89:ff:8c:92:f8:0a:b5:10:0a:
45:2d:48:74:a8:1f:6d:d1:39:27:b3:06:e9:e3:85:42:97:5e:
72:3c:36:fc:22:0b:fd:65:d5:f7:59:62:b8:57:e8:49:0d:07:
2c:6e:7a:84:20:22:03:90:ff:41:ad:d0:44:92:62:21:a8:c9:
27:77:bd:33:a3:b3:30:00:ba:0b:ae:e8:69:ba:84:4a:d1:b1:
0f:d5:aa:9b:9c:57:f9:0a:16:77:37:16:cf:14:de:05:da:14:
22:ed:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:35:59 2025 by rpki-client