Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
File: m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json)
Hash identifier: XoP51IrsgP7UCI8oXR1PivAGgp2mwCRPZJrAOmttRak=
Subject key identifier: 4C:B4:D7:2E:12:62:AB:DC:70:E9:BF:48:F5:8C:6C:10:12:CB:6E:FC
Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
Manifest number: 0193
Signing time: Fri 31 Jan 2025 02:44:56 +0000
Manifest this update: Fri 31 Jan 2025 02:44:56 +0000
Manifest next update: Fri 07 Feb 2025 02:44:56 +0000
Files and hashes: 1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: l0aM978HJMuRNDMN+MkSnSrszpiHrUiVMJoq+nXWJc8=)
2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: n/BMRPFUHjUzsfa0GoSirwLl0k+pEwLO2kUv8wHTWRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Validity
Not Before: Jan 31 02:44:56 2025 GMT
Not After : Feb 7 02:44:56 2025 GMT
Subject: CN=679c3928-3d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:59:74:e1:5e:82:b9:13:4e:6f:14:6c:3c:df:
2a:56:3e:58:5a:28:8e:31:d6:00:a1:02:06:92:bc:
cd:77:7c:33:40:99:fd:22:ec:ba:29:d8:69:71:51:
b5:c0:d2:90:fd:7b:dd:8b:af:5f:30:ae:c4:e7:94:
93:e4:bc:4b:1c:bc:a3:e5:2c:a7:15:31:e6:db:cb:
8a:fe:3b:ef:1b:72:28:00:ef:a8:76:45:02:bc:b1:
f2:30:99:b7:04:f4:c9:0e:29:11:07:a5:b2:f8:7a:
94:d7:4c:b5:7f:2c:68:a7:3d:ab:f5:0e:ab:92:da:
a7:20:af:50:14:62:a8:8e:3b:bb:b8:60:73:8e:4c:
88:d3:9d:7f:ca:c6:53:5c:9f:ee:a0:d7:93:e8:5b:
97:eb:2b:cb:92:c9:fd:4d:56:ba:cf:5c:b3:b9:2e:
07:ee:2b:09:30:72:92:28:50:f1:35:e2:e0:6d:56:
54:0e:ec:69:d0:7b:1c:45:2c:2d:03:b5:88:4d:f9:
b2:3f:c0:9f:19:57:36:58:82:47:c9:9b:77:b6:92:
31:52:14:9a:e0:b9:a1:03:cb:3d:70:bb:19:de:4b:
db:26:72:25:98:d7:7e:13:d2:87:34:05:54:82:33:
cf:02:c6:c8:86:f3:6c:8b:6d:78:6b:e9:c8:e8:12:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B4:D7:2E:12:62:AB:DC:70:E9:BF:48:F5:8C:6C:10:12:CB:6E:FC
X509v3 Authority Key Identifier:
keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f5:4a:cf:dd:b9:8e:a1:b1:8c:8f:4a:25:6f:47:ff:00:a0:
6d:19:0f:4b:74:8e:8a:ef:1e:a1:3c:b7:88:b2:38:9c:7a:71:
5a:0f:09:58:ce:c0:e1:da:cf:16:6e:c2:f5:74:53:78:e9:6b:
90:6a:5b:0d:70:05:3d:30:fa:53:9b:9b:cc:7a:3d:69:b1:ba:
af:48:48:36:80:c9:b6:a3:a6:a4:c6:a4:3c:01:da:43:97:98:
56:1e:10:52:9a:99:41:e5:0d:a6:a0:72:92:20:5d:0e:80:d1:
a6:14:fc:b9:d3:ed:ec:b7:56:f5:47:02:3a:01:16:ca:b6:6f:
93:7f:1d:06:62:df:d7:dc:75:8f:1d:98:39:ae:be:90:b5:62:
ba:42:aa:94:97:69:22:57:a5:45:9b:4c:de:b2:91:6b:45:5c:
10:75:4e:c7:93:47:b2:81:74:8d:10:06:f0:59:5d:42:97:34:
df:b1:6e:d8:10:a6:0b:89:b5:66:b7:ef:07:eb:fc:43:76:f8:
73:ce:f1:d9:1c:0c:b8:60:2e:52:52:78:23:4e:c8:89:ac:39:
3e:9a:23:1f:7a:e5:47:14:35:31:6f:8c:0e:5b:e9:3a:17:93:
55:2f:09:05:b1:5e:4a:9c:3d:8e:8b:6f:fe:a5:5a:72:d0:f6:
dc:89:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:28:44 2025 by rpki-client