Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json)
Hash identifier: +p53F5Vc6b+h9WQbJERfavxc+fSgKQ1EJWSrPnAm6IA=
Subject key identifier: 9D:8C:89:B5:91:B7:3D:B3:43:AC:AE:02:B1:DD:4B:37:09:39:E9:29
Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
Manifest number: 0105
Signing time: Fri 31 Jan 2025 04:10:00 +0000
Manifest this update: Fri 31 Jan 2025 04:09:59 +0000
Manifest next update: Fri 07 Feb 2025 04:09:59 +0000
Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: fRO+SsRTCN2WzTBG2Bf+pBnnDwi89Lx8lpW9uWg8Gsw=)
2: 089A55E052CB11EEB275AA16C4F9AE02.roa (hash: OAbMIDlyrmwRlQtoGDtJTGqeGRYOM+KyLuHj+udJQVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Validity
Not Before: Jan 31 04:09:59 2025 GMT
Not After : Feb 7 04:09:59 2025 GMT
Subject: CN=679c4d18-3c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:28:0e:51:9c:4d:9f:7c:83:8c:b9:86:4e:
b7:fd:05:68:d8:39:b5:37:f7:63:6a:21:65:36:d0:
3f:94:2b:c4:66:6b:17:cd:08:c5:c0:4a:18:6e:92:
03:e4:ac:27:02:23:95:e9:09:2d:8e:d4:52:74:f6:
f3:06:d0:ea:01:33:54:04:79:cc:9a:da:1c:08:67:
1d:2f:dc:a6:1f:4a:29:14:f9:a7:62:f6:72:d7:9c:
51:d2:9f:bc:04:78:ac:01:9b:2e:f1:57:a3:e9:d5:
fe:5f:0f:fd:57:b8:99:99:90:ed:bf:80:e4:61:4a:
18:cc:dc:1e:7c:a2:b7:74:ad:5e:1e:1d:aa:1f:47:
2b:00:9d:1f:3d:47:5c:4b:29:2d:fc:d8:fc:18:8e:
a9:7d:58:13:86:a9:99:d3:9f:e0:44:67:30:e4:84:
e1:76:23:28:6e:f9:5b:69:c1:e3:a2:c1:b1:97:9c:
19:27:9e:52:f3:5e:c7:ba:60:ff:35:70:1c:cb:80:
d5:0b:48:3b:b3:e8:80:df:d7:99:07:2f:37:4d:cc:
72:da:ca:52:d6:c1:30:e0:99:4f:b0:4f:99:ff:1e:
f6:83:97:72:d2:90:2d:c5:84:39:1f:e7:74:ce:f9:
75:ef:8c:03:98:6b:c5:9e:e4:b5:02:c2:5c:d2:07:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:89:B5:91:B7:3D:B3:43:AC:AE:02:B1:DD:4B:37:09:39:E9:29
X509v3 Authority Key Identifier:
keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2e:dc:ec:c7:99:da:46:6b:da:f9:f0:ff:4c:1e:c1:1f:a1:
77:0d:27:17:27:96:23:f6:b7:eb:d9:a3:91:09:1c:81:af:91:
f2:8a:86:94:15:46:2b:7a:4a:75:52:76:f9:35:f2:65:6e:ac:
39:ee:f8:5b:1d:df:f1:ca:d5:18:e7:98:9c:99:54:5d:d5:3f:
2e:09:04:1f:83:1d:f0:41:e7:10:54:a4:36:33:b5:6e:9b:98:
41:30:2e:68:51:32:c7:89:17:63:bb:3c:b7:29:43:5b:95:0c:
7a:2a:ef:40:8e:ca:0f:65:4b:48:e8:a5:4b:9f:b4:de:89:ba:
ec:4b:8e:31:2f:72:46:bb:90:28:ca:14:04:99:49:f6:e0:39:
01:46:0e:5c:46:25:be:33:c8:65:df:dd:d6:69:4d:a1:1f:ab:
fb:96:bd:88:ad:b5:e2:ef:84:4a:02:40:b4:4f:9a:7c:28:35:
c4:b9:dc:80:b1:ed:36:d2:29:c2:44:27:2d:45:6a:3e:66:41:
61:f5:79:e6:41:02:dc:65:bf:10:23:0a:8b:c5:f5:c0:9a:74:
c1:72:76:1d:88:85:4e:18:f8:88:c9:96:39:e1:19:fb:5e:08:
5f:42:6a:88:00:0f:ac:0b:83:f6:9c:d1:19:26:a7:7c:41:46:
41:71:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:23 2025 by rpki-client