Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json)
Hash identifier: HB5VYfvGtA8R++YStEpG5+qNQ9nqYpj5AcWOtLPnmf8=
Subject key identifier: 2D:63:A1:D4:50:4D:AC:98:D5:2D:89:1D:57:94:1F:A5:5A:E9:F6:9B
Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Certificate serial: 0501
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
Manifest number: 04F7
Signing time: Thu 30 Jan 2025 23:42:53 +0000
Manifest this update: Thu 30 Jan 2025 23:42:52 +0000
Manifest next update: Thu 06 Feb 2025 23:42:52 +0000
Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: XvwGFBStV7Kqogf+JjyUM+OpSoJcS8OwVfG0KFF799M=)
2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: tUJpt/EI7+mUtTaZxM/GDLtgw+TCPgCTEghkC0N1Z5A=)
3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: 3HZy6lcIbmxJvukR156ukbCJwU755Be6EmYQo4zomEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Validity
Not Before: Jan 30 23:42:52 2025 GMT
Not After : Feb 6 23:42:52 2025 GMT
Subject: CN=679c0e7c-2efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:a9:aa:5e:a9:e3:cc:12:dc:2a:00:0c:ee:
d3:2c:ef:79:8e:9c:cf:07:7f:0f:64:fe:88:b2:32:
53:f7:ab:8e:d0:fa:52:7e:fb:80:e1:52:f6:05:ec:
29:26:97:35:21:f9:0d:d9:f1:3a:62:e4:9a:eb:aa:
38:67:49:18:2e:dd:96:13:17:10:b0:57:f6:cb:d9:
96:6c:14:a4:2f:90:90:c3:8f:f9:50:f0:d5:99:9b:
79:32:24:ff:78:ed:fe:18:ce:8d:49:9f:68:10:65:
fe:7a:20:18:cf:5c:cc:0a:51:c6:4c:ea:33:86:14:
51:54:e0:ff:83:f1:47:a1:49:07:74:91:71:07:11:
7e:5d:16:c7:4d:d8:43:42:3e:95:02:00:86:06:69:
70:c7:c9:49:29:aa:57:05:bf:cd:49:b4:4b:f8:57:
d7:3c:e0:f2:98:a5:c4:99:82:4a:14:9d:b3:3d:5f:
a6:c0:14:c3:00:63:2d:5a:91:ca:81:3f:1b:a4:91:
eb:77:af:af:2e:26:a2:e1:45:5e:78:92:99:c3:89:
78:5b:90:c2:52:fc:04:aa:fa:0a:0b:e7:d0:2b:a5:
3f:e8:8c:87:aa:80:fb:a6:3e:36:34:e6:02:7f:cd:
a3:51:85:09:b2:c0:dc:b4:ee:ec:84:9b:82:a6:8a:
2f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:63:A1:D4:50:4D:AC:98:D5:2D:89:1D:57:94:1F:A5:5A:E9:F6:9B
X509v3 Authority Key Identifier:
keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:92:21:e2:cb:20:2c:4f:0e:ad:66:ec:43:f0:c4:ec:f6:84:
61:b3:4f:a3:21:bb:89:fc:92:a9:57:73:c1:2b:4b:e7:9f:6c:
82:50:42:62:36:b7:60:c0:eb:35:73:8b:af:fc:8e:a5:00:e0:
fe:86:7e:16:00:d9:bd:b7:ce:ef:38:05:96:01:2a:0a:b3:ea:
0b:e1:31:d5:ac:f1:e4:74:01:b9:76:7c:94:79:d2:f6:80:c9:
9d:00:7b:0d:31:8b:0f:ac:7a:03:82:81:80:8c:bc:d5:54:2b:
14:a0:d9:98:e8:e4:e2:b5:2d:e8:2f:08:96:86:c8:46:35:02:
42:24:f1:1d:25:10:6d:94:dd:32:8b:1a:53:6b:1c:b2:ee:3c:
90:24:5b:6b:50:0f:5b:71:00:10:11:77:0a:1f:12:bb:38:ea:
b6:15:d4:82:fa:35:48:74:82:0c:61:c2:58:39:0d:3e:17:db:
ee:49:62:9a:c5:d0:3d:96:38:ed:be:77:4c:04:e4:3d:61:40:
db:6c:80:a8:ce:0e:71:cf:67:3a:5e:1f:4a:2d:c2:05:fe:21:
3a:6d:44:eb:6c:8d:0f:30:3c:c5:b9:85:b0:fa:ae:8c:82:d9:
5b:e0:02:fb:4b:7f:ae:fe:e0:9c:f9:d3:9d:3c:16:e6:7f:11:
e9:f0:79:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:10:28 2025 by rpki-client