Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json)
Hash identifier: o61pXqYcLEBSf/tn+2+liSYxwgtboYuq65BCOdCMD3o=
Subject key identifier: F5:D7:EE:B6:52:38:8B:4F:E2:95:64:EE:F3:50:B7:5D:BA:4C:EE:C4
Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
Manifest number: 08E6
Signing time: Thu 30 Jan 2025 20:50:08 +0000
Manifest this update: Thu 30 Jan 2025 20:50:08 +0000
Manifest next update: Thu 06 Feb 2025 20:50:08 +0000
Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: mdTFtuh6iYDoceFNp2TGjuGApTTE+tfJ1AizDUymyg8=)
2: C24E9F9CE0BE11EEA90D1B0EC4F9AE02.roa (hash: nGTad7rOatH730ExgJ+vC4JnrAa/jLbnM0rZQKdXWqY=)
3: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: dLPra4EoZ+/bT5SYFH8IAddwcEybHTxE3E/d5NwypeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004
Validity
Not Before: Jan 30 20:50:08 2025 GMT
Not After : Feb 6 20:50:08 2025 GMT
Subject: CN=679be600-7238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:c2:b3:07:bb:d0:47:d6:bf:ed:06:aa:22:
ab:84:dc:cd:5e:8e:16:21:38:ab:5e:25:aa:4b:c3:
7e:cc:a2:1c:67:3e:69:2d:a6:89:af:b2:45:50:f9:
1e:d8:79:c8:66:f2:d3:76:9b:b6:65:45:9c:31:65:
c2:d1:fd:87:f8:d3:0e:cf:5c:39:5e:71:53:e1:5d:
11:f2:b5:b7:48:bc:80:13:be:ed:6a:d5:ce:fa:50:
a0:d2:dd:78:ce:e9:16:05:10:4d:59:57:9e:f3:c7:
a8:f6:18:62:16:4b:49:75:11:33:41:5b:a0:f7:fe:
8e:34:ea:f1:3c:cf:da:69:7b:6d:91:8b:84:a6:e9:
63:e9:bf:5c:da:5a:f5:45:ad:d7:80:ba:2b:22:84:
a2:b3:09:c5:0d:4a:ac:3c:91:57:1b:95:12:c6:48:
a4:34:56:13:3a:35:f0:2b:3a:14:81:c3:0b:b5:96:
aa:aa:ba:d9:85:d2:79:a9:81:dd:dd:2a:28:ba:61:
7e:71:6f:b9:1b:10:5d:08:10:7e:da:e3:88:cc:b1:
6d:bb:9d:3b:ed:85:ab:c6:59:5f:3e:8d:22:58:5a:
e5:db:64:dc:23:84:61:f8:dc:04:ed:21:87:85:ca:
85:27:17:f4:da:85:75:b0:48:87:80:ad:16:7a:24:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:EE:B6:52:38:8B:4F:E2:95:64:EE:F3:50:B7:5D:BA:4C:EE:C4
X509v3 Authority Key Identifier:
keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:14:58:d5:80:13:13:fb:ee:70:fb:c4:a1:1f:6e:cb:ec:83:
dc:a8:e0:6e:e8:bc:b7:b2:d5:06:2e:4f:fb:32:6d:95:0b:10:
45:95:f1:98:e8:a2:cd:d5:32:65:a8:d4:df:97:28:48:16:66:
6d:57:d7:95:cb:3e:5c:36:5e:63:25:cb:02:52:28:d1:3c:ba:
66:1d:aa:0c:89:ae:40:f5:6e:62:45:3b:e7:48:f9:e1:4a:07:
0a:ec:fc:4f:ed:91:a2:7b:c4:be:d7:5e:08:4f:8b:89:7f:3f:
b8:b1:2b:8c:17:ff:21:7c:df:cc:2c:96:63:c0:bc:b2:0c:f8:
e2:81:6f:b0:04:11:63:7e:09:f4:19:87:38:18:fb:d0:c1:e3:
26:55:da:a1:39:71:a1:ff:ff:20:b1:f5:ca:bf:cc:33:3b:2d:
b8:e2:36:d3:75:35:a7:37:dd:9f:95:c5:11:e3:dc:e6:65:62:
0b:1b:98:9e:d5:ed:37:57:e7:d1:02:69:8d:d2:1f:6f:ae:4d:
5b:10:db:09:5c:be:e2:c3:63:5d:5f:a9:e3:0e:24:11:c4:8a:
4b:a1:e4:99:be:8c:81:dd:c6:95:38:55:83:fe:db:c2:80:92:
69:2a:64:ae:69:81:10:4d:92:99:af:86:ce:d0:47:fc:d6:83:
8d:48:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:49 2025 by rpki-client