Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
File: fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json)
Hash identifier: eJArhrY+VG8DKJThZTXXs90+LmEum76tkayCTo6WsIs=
Subject key identifier: 1E:03:B9:8C:54:49:E8:BA:0E:69:B8:A2:80:46:D9:C3:BB:A3:03:3A
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial: 08D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
Manifest number: 1E68
Signing time: Fri 31 Jan 2025 16:47:36 +0000
Manifest this update: Fri 31 Jan 2025 16:47:35 +0000
Manifest next update: Fri 07 Feb 2025 16:47:35 +0000
Files and hashes: 1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: /tGbR+vcpxcT2Kg3ee28KKAbaiVedohrSnknBvOug04=)
2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: 6B2x/iYf2SxQmC3mAUmHvW+/u1qhJpOMtlDaSW14D5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Validity
Not Before: Jan 31 16:47:35 2025 GMT
Not After : Feb 7 16:47:35 2025 GMT
Subject: CN=679cfea8-9a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:d4:69:90:0f:b4:0b:e1:28:92:ee:c7:c8:
de:16:d4:05:a9:b9:51:10:81:a5:01:58:8f:0d:0b:
cd:0b:03:2e:04:a1:f3:13:55:ba:10:f8:13:c4:b6:
44:8d:fe:b9:03:f6:77:e8:c7:e5:58:c8:66:22:5d:
d9:0d:a8:1a:de:07:20:d9:19:9f:cf:e6:8a:d3:f8:
36:c2:f8:54:e2:dd:c5:07:cd:b9:00:5f:f7:a7:ae:
76:34:05:43:dc:a9:9f:2e:f2:13:7b:1a:78:52:d3:
7f:a8:7e:e3:9a:17:0d:e0:a6:53:72:cd:70:22:c4:
d3:d0:36:69:1d:a5:a9:38:0c:28:94:45:20:dc:d9:
87:2a:bd:ae:eb:6b:9d:fe:f1:3a:e9:e0:98:5a:09:
03:4b:69:c4:b8:3b:2d:30:09:3a:3f:30:02:f6:e7:
92:1f:c1:45:32:8b:35:84:4d:07:d7:93:aa:b4:48:
2f:f3:f6:c7:75:c0:d7:35:92:9a:fb:ab:b7:ad:53:
d5:ee:d3:9e:f9:08:88:2e:63:1e:7c:31:af:3b:58:
3f:b4:03:63:3b:dd:d2:bc:86:5b:2b:00:0d:f4:e8:
56:dc:d6:26:d7:07:09:bd:7d:89:19:4a:c0:6a:9a:
b0:3d:73:03:5e:fe:1e:47:7d:25:55:ee:35:67:42:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:03:B9:8C:54:49:E8:BA:0E:69:B8:A2:80:46:D9:C3:BB:A3:03:3A
X509v3 Authority Key Identifier:
keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:da:25:2c:a1:27:2e:84:d4:38:f5:1b:52:13:4c:c6:b1:c8:
51:0e:a5:19:b8:cd:62:c3:6f:68:2e:58:da:2a:c1:36:b0:ab:
62:f4:b0:78:59:d6:7a:f1:96:19:77:51:d2:75:ef:e8:b0:7f:
b3:93:63:77:6f:01:76:c5:40:72:a1:77:56:b3:55:54:96:c8:
58:ad:e9:56:46:32:21:ad:9b:22:a6:a6:c6:ab:0e:6a:8b:68:
75:72:96:93:3c:af:b9:b8:58:23:82:4b:ca:c7:df:d5:1e:04:
60:4a:be:c6:8b:30:8c:9e:8b:ea:e4:39:bd:4d:83:8c:e0:34:
7e:78:d7:7b:49:ca:c5:25:c7:b8:fe:bb:74:77:d6:e2:00:47:
04:0d:47:c2:39:db:15:f9:a0:33:e8:74:08:24:c2:a4:23:82:
79:be:d8:e2:8f:e1:b8:de:a2:84:64:69:58:57:5c:0e:3d:c0:
47:0a:20:05:dd:8f:6d:bb:ca:cf:15:17:1b:43:10:35:aa:51:
74:3c:e2:89:5f:ad:ba:78:51:8d:72:8c:57:31:33:24:e3:6f:
cb:4e:86:4f:ff:9c:d5:55:d0:13:db:ec:94:83:43:00:24:b5:
da:ec:bb:8f:a7:82:02:6c:5b:d4:bc:4e:c2:77:2b:f3:b8:2c:
bb:9c:cf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:14:15 2025 by rpki-client