Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json)
Hash identifier: HAUMHJ7qDcRtnsf1j3ajolHqr7EpLZg1TIiGE0uPmso=
Subject key identifier: AD:B7:AE:69:E8:30:B1:1B:5E:28:31:61:E1:8A:02:1A:F4:52:0A:63
Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92
Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792
Certificate serial: 347B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
Manifest number: 3466
Signing time: Fri 31 Jan 2025 14:48:53 +0000
Manifest this update: Fri 31 Jan 2025 14:48:52 +0000
Manifest next update: Fri 07 Feb 2025 14:48:52 +0000
Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: LCI6edL5dmoUXDUyrGutNDVrTam8jtSjQ63XYaiuUZg=)
2: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: YazdyMwHOwoF8umaAipXjtQtje6WJc0WXJZNFJEXGA0=)
3: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: 2NUudbVYezITXTQtX0YxAZtsoAo14kkfj/OCaZq7JSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13435 (0x347b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792
Validity
Not Before: Jan 31 14:48:52 2025 GMT
Not After : Feb 7 14:48:52 2025 GMT
Subject: CN=679ce2d5-3690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:e4:35:f9:f4:fd:e4:0d:97:04:4e:a7:c1:
cd:aa:01:d3:ec:bc:69:ba:c6:9e:d3:9d:5b:7f:01:
72:a8:06:7a:75:68:08:80:0b:f5:5d:1a:35:9c:b7:
de:1c:f3:45:be:4f:69:d1:29:3f:4a:73:37:77:4e:
9b:89:c1:d7:34:d0:f3:b0:72:27:bd:b9:4f:6c:88:
db:2a:99:76:04:23:cd:9d:b3:a4:d9:0c:7d:83:4f:
3d:74:11:fd:16:99:94:28:10:b7:10:32:e6:78:be:
fd:62:6b:ab:71:b3:0a:4e:78:61:ae:ee:20:b0:08:
8d:62:f1:59:3b:a5:0e:8a:ff:8b:73:6a:91:e0:ac:
11:7f:9b:fa:b2:a6:2d:ee:40:5f:a7:1d:7e:ad:cc:
4c:4f:dd:81:a3:51:ea:9e:44:d5:47:ab:81:1c:12:
2f:10:55:db:0b:bd:ee:44:5b:de:10:1b:a7:22:ea:
50:9d:47:83:d3:bb:7f:67:1c:fe:39:aa:59:54:df:
ce:e7:f9:7e:63:f1:d5:54:96:48:8a:81:00:14:96:
cd:88:11:96:36:65:94:47:b0:a9:c0:94:33:8b:dd:
29:2f:40:b5:f3:fe:d8:f8:94:59:b4:60:ae:0c:46:
c1:dc:75:83:46:03:63:5f:24:de:e5:35:8e:e6:13:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B7:AE:69:E8:30:B1:1B:5E:28:31:61:E1:8A:02:1A:F4:52:0A:63
X509v3 Authority Key Identifier:
keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:fa:93:26:99:42:7c:dd:07:20:ba:41:31:43:3d:3c:b9:f6:
3b:fe:2a:03:6b:cc:fd:1e:10:e1:25:80:62:db:f2:a3:c6:1f:
8b:46:0b:a2:95:c0:7c:4a:2b:f8:73:d8:24:7d:80:b6:ce:89:
03:1d:0f:ad:59:57:ab:16:b2:0e:94:ad:19:cb:19:30:15:50:
58:6f:fd:39:f5:b9:13:29:2d:e1:ec:e6:b4:d3:b7:ae:bf:05:
5a:f9:48:ab:aa:0b:14:d7:11:ef:c3:2d:30:3b:8f:61:47:5d:
78:b9:72:e6:e9:2b:e1:e6:c6:f3:a1:88:3d:92:24:93:e8:0e:
b8:70:94:c7:ff:2a:41:07:d0:65:a8:98:9a:46:f7:3d:eb:53:
d8:b3:c3:8c:7a:b9:0b:87:9b:f9:e7:07:62:75:e1:fa:46:58:
c1:ba:bb:7c:89:75:a1:6d:df:d8:87:30:61:a2:e9:c7:fe:57:
87:38:50:a7:94:de:58:12:96:bd:6f:e1:d5:32:af:9a:3d:50:
f3:1a:c0:1b:09:a3:e0:0d:7c:09:5b:c9:7d:99:e6:18:fd:f2:
f6:af:2c:80:11:1c:06:17:ee:09:0b:61:f1:5a:91:7a:d2:15:
c7:4a:e9:5d:f8:ee:c7:6b:12:c6:79:93:da:9c:79:2c:60:3f:
08:a6:06:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:39 2025 by rpki-client