Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json)
Hash identifier: dlL6GwEg5C5H33olK8NjcgioSqBe5WDPnpNIzFpHAfo=
Subject key identifier: 82:9E:FA:20:20:BC:C4:14:81:59:47:46:E6:EC:B3:4E:E2:F3:ED:F1
Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Certificate serial: 1A2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
Manifest number: 1A24
Signing time: Fri 31 Jan 2025 16:21:57 +0000
Manifest this update: Fri 31 Jan 2025 16:21:56 +0000
Manifest next update: Fri 07 Feb 2025 16:21:56 +0000
Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: C3tEuHZNsQSGnnZXZfD7lIR0RVJiWlSrogTQJHZwBbk=)
2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: TDZfCqe/A1h/UXKP3e80woGj06+CgzgdnSG8UtuTL5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6703 (0x1a2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Validity
Not Before: Jan 31 16:21:56 2025 GMT
Not After : Feb 7 16:21:56 2025 GMT
Subject: CN=679cf8a5-378b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:84:b3:44:87:9d:fd:d4:87:59:fa:e2:cd:
40:ed:9f:4f:12:03:f0:e8:e4:7a:77:2d:76:b0:fe:
17:b2:2a:57:1b:b9:63:7d:dd:9c:ea:ab:2e:3c:30:
18:ab:07:d9:31:34:90:b1:db:5d:5b:3a:1a:ac:60:
49:a3:57:82:0b:77:39:59:ad:d4:a0:7d:af:bd:7c:
69:3a:82:d1:a1:e3:2e:b1:23:50:be:92:81:a0:c8:
49:f9:7f:9d:fb:68:0d:93:93:f5:21:a1:e3:1e:00:
58:b3:4a:66:a7:f1:fd:81:c8:de:df:00:8c:9f:54:
a4:77:e4:11:15:89:2a:27:97:da:b7:c3:6e:bc:bc:
37:ed:df:71:6b:2f:07:4a:be:dd:1c:4e:ee:86:45:
f1:38:8a:33:95:5e:02:88:fb:7a:fd:a0:f5:4b:94:
2b:54:61:67:2b:9b:eb:7f:5e:19:75:5e:1a:b1:aa:
57:54:29:b9:4c:a2:83:ef:c7:d3:88:e0:4f:56:2f:
9f:2a:69:9a:2c:8e:bd:a3:4a:8c:da:0c:7c:9c:21:
96:42:4b:85:a3:e1:d1:29:ce:de:30:5f:e4:94:1e:
db:03:50:d0:b1:cc:a1:73:e1:cd:c2:22:9d:0d:e6:
f0:15:be:0d:45:af:5a:10:4f:98:ba:5c:e9:ae:e9:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9E:FA:20:20:BC:C4:14:81:59:47:46:E6:EC:B3:4E:E2:F3:ED:F1
X509v3 Authority Key Identifier:
keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:23:00:2c:22:dd:13:25:18:4f:3f:3f:f8:73:e1:7d:55:86:
f6:8c:1b:1c:f4:4f:cb:26:c9:57:11:c9:e6:44:d6:a9:8d:39:
40:46:92:86:0a:d4:32:21:f3:f7:45:96:41:43:44:13:b9:29:
94:2a:38:e1:86:c4:25:eb:aa:74:e9:17:90:93:8b:bb:8e:58:
d2:7b:58:cf:6e:4c:2a:7d:81:0d:49:b4:73:3f:2b:6a:e3:c1:
3e:ff:f5:a1:34:8f:88:8b:3c:20:9a:7f:6c:82:15:96:97:61:
23:6a:00:77:c7:b3:d2:6e:52:05:4b:22:92:1a:94:c7:fd:a6:
89:3f:97:64:3e:04:39:eb:1a:a2:4d:c5:18:b2:e9:61:05:2b:
ae:27:d6:75:41:13:a9:62:89:40:26:35:bc:46:a1:80:9f:99:
15:46:f4:20:29:f2:8a:c3:5f:79:df:20:45:6d:03:02:09:0e:
48:fc:fc:c8:fc:e6:57:b0:98:53:7f:a4:d0:c1:fe:91:da:f2:
12:81:7b:85:61:95:05:8b:43:11:94:5b:18:11:5f:b2:11:35:
d7:aa:6d:3c:2b:7f:67:bd:b0:91:1a:22:2b:cc:1a:35:8c:de:
24:22:aa:f8:44:12:a8:d7:35:6b:65:01:3c:0f:c2:db:de:ea:
ec:c2:cc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:42:55 2025 by rpki-client