Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json)
Hash identifier: 2zqnuntmJSsxa6XE9//wGWlZZv4uiW6ZEZjbeDgTBUs=
Subject key identifier: 3D:FE:E9:FB:E8:D2:13:03:88:17:6D:3C:72:08:4C:CD:CD:46:C6:E8
Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Certificate serial: 0811
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
Manifest number: 080B
Signing time: Thu 30 Jan 2025 20:53:42 +0000
Manifest this update: Thu 30 Jan 2025 20:53:41 +0000
Manifest next update: Thu 06 Feb 2025 20:53:41 +0000
Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: B9JTjoFgsIyFWH98FCPba0rKFXrsqkiz0PFZEiUUKIk=)
2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: Orts9nJAHIeXwpDUPuUMiOuSaf1VvGVbpuD8ge8k//4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2065 (0x811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Validity
Not Before: Jan 30 20:53:41 2025 GMT
Not After : Feb 6 20:53:41 2025 GMT
Subject: CN=679be6d5-2b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9b:ad:a0:46:e7:d8:45:84:de:5e:03:c7:57:
e6:b1:5a:66:d0:f5:81:a4:12:30:50:b4:33:f4:6f:
aa:17:ea:d7:4d:65:ed:69:b4:1b:f3:0c:6b:5b:f8:
06:b6:1d:42:56:f0:24:c5:72:44:80:b6:88:df:3f:
d7:f1:d5:b1:a8:76:4e:5a:73:2c:39:b4:cc:4c:3d:
af:d4:f9:f5:be:f3:8f:55:da:db:5a:b8:2b:ba:94:
4f:42:16:05:1f:b6:5b:58:84:fb:85:4f:13:d1:f1:
a5:88:f9:d3:47:e4:26:27:97:65:16:c7:7b:ca:b0:
ff:9b:1a:67:bc:30:37:8a:fb:3a:d8:46:67:54:5b:
77:89:d7:4a:a3:44:25:17:2e:e3:f8:c4:3e:d4:48:
58:fc:94:6d:b3:e7:b4:e3:89:dc:12:d1:2e:d8:91:
56:5b:84:58:ce:05:5d:78:81:3d:ae:1c:96:2d:46:
a3:47:76:cc:8b:45:a1:45:e7:d3:19:9e:34:6e:b9:
fd:07:23:b6:77:e8:50:97:6a:fd:8e:df:c8:2c:e5:
61:0e:bf:a0:d5:a0:32:f3:2d:03:fb:3d:74:49:ad:
59:d7:12:b6:f0:c5:2d:58:f7:be:59:f5:b1:e6:04:
7b:db:fa:1e:dd:ba:a1:67:8f:80:01:9a:77:af:9c:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:E9:FB:E8:D2:13:03:88:17:6D:3C:72:08:4C:CD:CD:46:C6:E8
X509v3 Authority Key Identifier:
keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:49:16:71:ba:2c:1b:6b:65:ab:a7:17:f0:ee:6c:65:46:7b:
0b:4a:c3:3d:40:51:07:8c:21:ed:0d:68:9c:96:ad:8d:4f:a1:
eb:8b:1f:e2:5a:15:31:98:43:fe:84:bb:c7:cf:74:af:8a:07:
e1:d5:66:77:f2:2d:39:09:30:55:fd:a2:22:62:0e:fe:a5:44:
7b:a3:4c:76:d0:e3:5c:54:e6:2d:7b:8a:47:a3:fd:a8:cc:f0:
45:ce:5c:21:bb:4a:7a:22:26:72:3e:71:20:d2:fc:db:1a:ca:
0b:b3:bf:77:e3:9d:ca:bb:d8:d2:92:1b:5a:07:d6:df:55:fe:
b3:cc:2a:3b:a5:cd:f7:c9:90:d5:9f:a3:84:aa:89:a9:78:1d:
19:4f:ad:81:7d:31:7a:6e:30:0e:70:50:41:b2:58:58:64:07:
1c:94:5d:ab:e7:80:84:29:c8:44:d6:67:17:37:cd:1e:48:c4:
38:46:ee:5c:18:13:14:4d:d9:fe:53:95:bd:89:db:a3:65:2e:
17:b2:16:e5:76:ea:7d:a2:de:e1:d4:da:3b:21:bd:db:1c:a2:
60:f5:a1:44:40:77:eb:a1:94:6f:32:16:40:ac:b3:ad:50:ac:
9c:cb:d6:8e:2f:4a:c4:72:0e:e8:b3:db:67:ff:62:d9:05:2c:
7b:be:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:16:00 2025 by rpki-client